# SBOM for npyosmium 4.2.0 > Python bindings for libosmium, the data processing library for OSM data, with numpy interface The Python package npyosmium 4.2.0 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/npyosmium@4.2.0` - PyPI: https://pypi.org/project/npyosmium/4.2.0/ - License: BSD-2-Clause - Requires Python: \>=3.9 - Homepage: - Issues: - Repository: ## SBOMs ### npyosmium-4.2.0-cp310-cp310-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/46aa45f6-721a-54de-83d8-b4cc2b3f7a08/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/12dbe22a-b3ae-510b-973e-5cb1d33d0671/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp311-cp311-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/931784a9-8294-580d-b4da-ca9070a00d04/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bcdf7169-7bb1-5c22-89b8-5e3a2884da6a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp312-cp312-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/29da01c7-cfcf-5019-a8f1-6f68af87bbc4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/96906409-4c62-5fc0-9ffb-b5ed54574084/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp313-cp313-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b99c03d9-ce76-5773-b98c-56011acd7ca6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d7a4a392-69ed-57fe-bfd1-3459de5be0f6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp314-cp314-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7b2fc87f-48a5-5755-9554-be408864b3d0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/02a3fae2-3674-5f1f-9dc2-e417dab5a884/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp39-cp39-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4e4d6aac-91da-5cb1-8bc6-70f8a3716b47/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### npyosmium-4.2.0-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, agrenott/npyosmium, workflow build\_wheels.yml). - [npyosmium-4.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/eccd3766-6e56-5847-976c-a05367064028/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/npyosmium@4.2.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/npyosmium/4.2.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/npyosmium/4.2.0