# SBOM for mnn 3.6.2 > C methods for MNN Package The Python package mnn 3.6.2 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/mnn@3.6.2` - PyPI: https://pypi.org/project/mnn/3.6.2/ - Author: alibaba MNN Team - License: BSD-3 - Requires Python: \>=3.8 - Download: - Homepage: ## SBOMs ### mnn-3.6.2-cp310-cp310-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2f534c49-4476-5b03-9eaf-866eec7b3c4f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp310-cp310-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/591f4e7a-cbcf-57d1-812f-1fb7cae5493f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp311-cp311-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/719a0fa9-8a11-53e8-b4c7-c5a2d85659a6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp311-cp311-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/aa048090-619e-5c48-8dcf-dc7daba78c0a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp312-cp312-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/eda9aeeb-6782-52dd-b786-5476798a063d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp312-cp312-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0c67d7c1-39c0-5189-aaaf-d67367d0872f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp313-cp313-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/42801efb-65a2-5c33-a999-15a38bdc95a1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp313-cp313-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1eff1a67-5c5f-57b6-bd56-a4d4d9a05067/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp314-cp314-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce0cb7bb-380c-50ea-9739-5c3d53d52837/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp314-cp314-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9e33103e-36eb-59a4-89ec-f54b560e7912/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp38-cp38-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1d86e665-f174-5c1a-94c2-87ee20aac913/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp38-cp38-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/96709b93-8155-5062-a14b-b23f4a01b7b6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp39-cp39-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8f0b9737-915f-538f-a430-037c80abf04e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mnn-3.6.2-cp39-cp39-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.whl PEP 740 attestation verified (GitHub, alibaba/MNN, workflow pymnn\_release.yml). - [mnn-3.6.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c70a1906-db0c-534e-a852-1b45b206ab0b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/mnn@3.6.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/mnn/3.6.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/mnn/3.6.2