# SBOM for opentimspy 1.2.0b1

> opentimspy: An open-source parser of Bruker Tims Data File (.tdf).

The Python package opentimspy 1.2.0b1 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/opentimspy@1.2.0b1`
- PyPI: https://pypi.org/project/opentimspy/1.2.0b1/
- License: OpenTIMS is released under the terms of MIT licence, as published by the Free Software Foundation. Full text below. If you require other licensing terms please contact the authors. OpenTIMS contains…
- Requires Python: \>=3.6
- Homepage: <https://github.com/michalsta/opentims>
- Repository: <https://github.com/michalsta/opentims.git>

## SBOMs

### opentimspy-1.2.0b1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.0b1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a0710896-e033-5b1e-88a6-822260f796d6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.0b1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.0b1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e08f59f6-629b-5107-a523-f3171edfdeab/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.0b1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.0b1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2c28ecab-24bc-5f14-ade8-c0651cc8f570/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.0b1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.0b1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4c2a1338-c3c2-5646-bbf9-6985fccf22eb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.0b1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.0b1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e153efbf-8edb-58a7-b437-dc890c0dc624/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.0b1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.0b1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e400b59b-cf54-543e-9cc9-6c596748a948/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.0b1-cp38-cp38-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.0b1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0ca0daad-5a05-52f7-a14a-4b5b95b9d5c5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.0b1-cp39-cp39-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.0b1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/aeb151b1-3152-5e89-9bdb-d549e26f252f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/opentimspy@1.2.0b1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/opentimspy/1.2.0b1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/opentimspy/1.2.0b1