# SBOM for mhm 5.13.4 > Python distribution of mHM with bindings. The Python package mhm 5.13.4 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/mhm@5.13.4` - PyPI: https://pypi.org/project/mhm/5.13.4/ - License: LGPL-3.0 - Requires Python: \>=3.9 - Changelog: - Conda-Forge: - Documentation: - Homepage: - Source: - Tracker: ## SBOMs ### mhm-5.13.4-cp310-cp310-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3fb2e9c4-a136-58d7-adad-25b825bf6c85/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp310-cp310-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dfb3dd8a-2471-51cc-8df1-8ca29acdc9db/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp311-cp311-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6a08a760-9a87-5129-b6f2-0eb203201c88/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5f3c6a60-a545-510e-b6b3-a6990a02edc5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp312-cp312-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6708be7b-e460-564a-9921-45a0a1456dca/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/591d2d10-76b6-5e0a-bccf-30d23ed1d9cf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp313-cp313-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/40bdc851-aa3b-505f-b7b0-c7d2a3d81981/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6bf0d180-9ea1-5422-b8c6-b07606774d71/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp314-cp314-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/18ded5e3-d357-59bb-b65b-9ac008e3ac78/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b000baf0-186d-5e08-9a5d-37d51e650fe6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp39-cp39-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ab72f6c2-b808-5279-b66d-df3f8db18832/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mhm-5.13.4-cp39-cp39-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, mhm-ufz/mHM, workflow main.yml). - [mhm-5.13.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d0cac849-acf3-56ad-898f-294d34130cc7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/mhm@5.13.4 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/mhm/5.13.4.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/mhm/5.13.4