# SBOM for opengris-scaler 2.9.0 > OpenGRIS Scaler Distribution Framework The Python package opengris-scaler 2.9.0 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/opengris-scaler@2.9.0` - PyPI: https://pypi.org/project/opengris-scaler/2.9.0/ - License: Apache 2.0 - Requires Python: \>=3.10 - Home: ## SBOMs ### opengris\_scaler-2.9.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6298719d-f0ce-56a7-8ef3-7c4d02eca396/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/70816320-d263-5d68-9602-f34e42fd9104/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7e6de2eb-c42a-5db0-a0d1-0ef565d0d833/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation failed verification: Failed to refresh TUF metadata. - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9384dd32-4f01-5a7b-8186-6ca7094f7d98/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/eee7d45e-e125-5201-b8fc-ff9d6108db40/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/64d3960f-6b93-5273-8ee9-348044aa98a6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1a44e014-3710-52d4-8c14-93278456f5f3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/60830928-0937-5b39-8aac-1057385d7820/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ccc4ade0-54c0-5ade-9fb8-9b419911a1d2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/230a69b4-1bb7-5155-adb8-99f811776ff0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c04c46dd-1ef5-506f-93c1-1aa63491d4a4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dfd93de9-a3bf-5420-9ea4-46759bf09c63/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/372995b3-063e-58ee-802e-b1426de9a0db/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cc36b511-2f0f-52e7-92c8-13ad8edee309/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2b36548e-2d20-5c5b-82b2-1306a0399f19/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opengris\_scaler-2.9.0-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, finos/opengris-scaler, workflow publish-artifact.yml). - [opengris\_scaler-2.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f9c0fc99-b068-5446-906e-69552b3436af/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/opengris-scaler@2.9.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/opengris-scaler/2.9.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/opengris-scaler/2.9.0