# SBOM for musica 0.17.2 > MUSICA is a Python library for performing computational simulations in atmospheric chemistry. The Python package musica 0.17.2 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/musica@0.17.2` - PyPI: https://pypi.org/project/musica/0.17.2/ - License: Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for… - Requires Python: \>=3.10 - homepage: ## SBOMs ### musica-0.17.2-cp310-cp310-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, NCAR/musica, workflow python-wheels.yml). - [musica-0.17.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f8a67fcd-4af3-587c-be6b-6d1fcc21b232/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### musica-0.17.2-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, NCAR/musica, workflow python-wheels.yml). - [musica-0.17.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d09f557f-6f4b-5238-8af5-d0121a28df50/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### musica-0.17.2-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, NCAR/musica, workflow python-wheels.yml). - [musica-0.17.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/352ea956-5864-55af-b54b-6959b38987c5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### musica-0.17.2-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, NCAR/musica, workflow python-wheels.yml). - [musica-0.17.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5c921a94-5a8b-5652-9203-a1e857591b6b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### musica-0.17.2-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, NCAR/musica, workflow python-wheels.yml). - [musica-0.17.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b621c076-e4bf-5b27-936d-0814019d7d85/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### musica-0.17.2-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, NCAR/musica, workflow python-wheels.yml). - [musica-0.17.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ddb55008-3e2b-5b87-aa51-883b1aa0949f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### musica-0.17.2-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, NCAR/musica, workflow python-wheels.yml). - [musica-0.17.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cf332f53-27bc-5dd6-854d-e6b4f76544ed/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### musica-0.17.2-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, NCAR/musica, workflow python-wheels.yml). - [musica-0.17.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bf7e3c8e-20e4-592f-996a-805fc32de8f2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### musica-0.17.2-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, NCAR/musica, workflow python-wheels.yml). - [musica-0.17.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c5be599d-782f-5de6-ab24-41f3cd370b6c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### musica-0.17.2-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, NCAR/musica, workflow python-wheels.yml). - [musica-0.17.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a9525722-7ff9-5bc9-82a4-f5c9926f96cc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/musica@0.17.2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/musica/0.17.2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/musica/0.17.2