# SBOM for numpy 2.5.4 > Fundamental package for array computing in Python The Python package numpy 2.5.4 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/numpy@2.5.4` - PyPI: https://pypi.org/project/numpy/2.5.4/ - Author: Travis E. Oliphant et al. - Requires Python: \>=3.12 - documentation: - download: - homepage: - release notes: - source: - tracker: ## SBOMs ### numpy-2.5.4-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1ead50c4-e74f-56bd-998e-e346155da5a6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a57d7ae4-1c21-5744-a8de-942f696d6b1b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/61a6dfc7-697f-5ba0-a2bd-f07364c3dc81/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3937f91e-84d9-5aed-9b42-9abdd769be7c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2646f32e-a38d-578b-a464-aad0dbc24288/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8f8deb83-ceac-5a8e-8ecc-776d9d54b2cc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7b0c910a-4b51-5f80-a0d9-c7c3f004e8be/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/adb224f9-9d76-511e-a023-15cbfe0777de/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/69e68612-c080-5e94-92b8-0ce8d5f87bd7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/47547510-b2fc-5a78-b9b0-f8ecde82b608/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ea0c4ec8-d9d0-5cc1-a4bd-aca24b5bff56/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### numpy-2.5.4-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, numpy/numpy-release, workflow wheels.yml). - [numpy-2.5.4.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7902b0da-747d-5435-be7d-61bda7185f90/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/numpy@2.5.4 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/numpy/2.5.4.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/numpy/2.5.4