# SBOM for opensim 4.6 > OpenSim Simulation Framework The Python package opensim 4.6 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/opensim@4.6` - PyPI: https://pypi.org/project/opensim/4.6/ - Author: OpenSim Team - License: Apache 2.0 - Homepage: ## SBOMs ### opensim-4.6-1-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, opensim-org/opensim-core, workflow build\_all\_wheels.yml). - [opensim-4.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c79f65d0-32d1-5469-91e6-52395b55dafb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opensim-4.6-1-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, opensim-org/opensim-core, workflow build\_all\_wheels.yml). - [opensim-4.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c7eed134-082a-5ef5-a9f0-85e75fc425e0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opensim-4.6-1-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, opensim-org/opensim-core, workflow build\_all\_wheels.yml). - [opensim-4.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/338de855-a9db-5740-a597-97ca7dbb37d5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opensim-4.6-2-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, opensim-org/opensim-core, workflow publish\_to\_pypi.yml). - [opensim-4.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e07b4e37-1f0b-50b8-bd36-3d06ef7fc7ee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opensim-4.6-2-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, opensim-org/opensim-core, workflow publish\_to\_pypi.yml). - [opensim-4.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/75366581-4e96-5262-b598-c55d11353a57/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### opensim-4.6-2-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, opensim-org/opensim-core, workflow publish\_to\_pypi.yml). - [opensim-4.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5370caed-7d50-5d06-a0ec-208a248929bd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/opensim@4.6 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/opensim/4.6.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/opensim/4.6