# SBOM for mpdaf 3.7 > Framework for MUSE data analysis The Python package mpdaf 3.7 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/mpdaf@3.7` - PyPI: https://pypi.org/project/mpdaf/3.7/ - Requires Python: \>=3.11 - documentation: - github: - gitlab: ## SBOMs ### mpdaf-3.7-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, musevlt/mpdaf, workflow publish.yml). - [mpdaf-3.7.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/72044818-73d8-51ac-b834-ca086dfc0ec4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mpdaf-3.7-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, musevlt/mpdaf, workflow publish.yml). - [mpdaf-3.7.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/316872ec-81e8-5fe0-a66a-2e49d9123822/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mpdaf-3.7-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, musevlt/mpdaf, workflow publish.yml). - [mpdaf-3.7.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1daa8b57-868e-5ff2-b309-799977547162/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mpdaf-3.7-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, musevlt/mpdaf, workflow publish.yml). - [mpdaf-3.7.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e1fc8d87-7d4b-5ec9-9a9c-6fb27124ca94/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### mpdaf-3.7-cp315-cp315-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, musevlt/mpdaf, workflow publish.yml). - [mpdaf-3.7.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/20525838-5ddf-5e9f-885a-831a209ae532/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/mpdaf@3.7 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/mpdaf/3.7.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/mpdaf/3.7