# SBOM for numina 0.41.1

> Astronomy data reduction library

The Python package numina 0.41.1 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/numina@0.41.1`
- PyPI: https://pypi.org/project/numina/0.41.1/
- Requires Python: \>=3.11
- Documentation: <https://numina.readthedocs.io/en/stable/>
- Homepage: <https://github.com/guaix-ucm/numina>
- Repository: <https://github.com/guaix-ucm/numina.git>

## SBOMs

### numina-0.41.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, guaix-ucm/numina, workflow upload.yml).

- [numina-0.41.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2fefbf6a-7553-5306-8f13-af5047b78d2d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### numina-0.41.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, guaix-ucm/numina, workflow upload.yml).

- [numina-0.41.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/67356b28-bb86-5d0e-9eec-5a459344121f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### numina-0.41.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, guaix-ucm/numina, workflow upload.yml).

- [numina-0.41.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b215f965-3462-5959-a932-db6cd616754f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### numina-0.41.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, guaix-ucm/numina, workflow upload.yml).

- [numina-0.41.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a5e41d50-75ce-5630-8e5c-e39df51302f4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### numina-0.41.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, guaix-ucm/numina, workflow upload.yml).

- [numina-0.41.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/aad50553-9ded-549e-ab3c-5e47e1142b7e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### numina-0.41.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation failed verification: Failed to refresh TUF metadata.

- [numina-0.41.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1c1ed10d-2903-5d75-99b8-737d6d04cc03/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### numina-0.41.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, guaix-ucm/numina, workflow upload.yml).

- [numina-0.41.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9ade35d8-4ebf-5a99-9441-40717df35101/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### numina-0.41.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, guaix-ucm/numina, workflow upload.yml).

- [numina-0.41.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/35434cd2-cb18-5ca0-bf76-15b7b3a337c5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### numina-0.41.1-cp315-cp315-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, guaix-ucm/numina, workflow upload.yml).

- [numina-0.41.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5159494d-fe5a-50f5-8185-0eff43ef13a6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### numina-0.41.1-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, guaix-ucm/numina, workflow upload.yml).

- [numina-0.41.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5daf92b9-61fc-512c-83d4-4a9298d3cabc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/numina@0.41.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/numina/0.41.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/numina/0.41.1