# SBOM for openqp 1.2.1

> Python bindings for the Open Quantum Platform (Fortran core + Python wrapper)

The Python package openqp 1.2.1 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/openqp@1.2.1`
- PyPI: https://pypi.org/project/openqp/1.2.1/
- License: GPLv3
- Requires Python: \>=3.9

## SBOMs

### openqp-1.2.1-cp310-cp310-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/db0efe35-75e9-5095-bacb-00933e3f3787/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3d3ba1fc-85d9-59ae-8602-e3fe5b342395/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/88d0dcce-8800-553c-b69a-f0ef588c1bd3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0465e8dd-38e0-5732-864d-25261fd23f00/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/29fc8d86-5dd4-558f-b092-ced96b9490b1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6ac77d81-f5a7-554e-9ccf-6defc0dc51a6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/814ba399-e1b7-5032-bfa8-741666d98154/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d1607925-4212-5dde-8452-99d0f1236ff0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/af765f28-5c77-5308-9da6-47c0e3515ae8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation failed verification: Failed to refresh TUF metadata.

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/00bed4c5-47e5-57a0-84f1-1b6d4b74d5d7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp39-cp39-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/eff9b172-bb64-5a2e-9b64-76316e5a9a9f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### openqp-1.2.1-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, Open-Quantum-Platform/openqp, workflow build\_wheels.yml).

- [openqp-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e19ea88d-8d92-5237-84e0-2eaff063096a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/openqp@1.2.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/openqp/1.2.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/openqp/1.2.1