# SBOM for opentimspy 1.2.3

> opentimspy: An open-source parser of Bruker Tims Data File (.tdf).

The Python package opentimspy 1.2.3 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/opentimspy@1.2.3`
- PyPI: https://pypi.org/project/opentimspy/1.2.3/
- Requires Python: \>=3.9
- Homepage: <https://github.com/michalsta/opentims>
- Repository: <https://github.com/michalsta/opentims.git>

## SBOMs

### opentimspy-1.2.3-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5a2370f8-f67c-5414-84bf-f5ee201d6a4a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/db709c73-94c3-5649-87c8-d0cb1488523e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/05fb8364-7b98-5ce2-8dbc-96daa48c1fce/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4328e993-3981-53ba-9616-5c5b4cd1c35b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4aef97ef-3465-5a9d-a9bf-5317d4f170b6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/72ac9535-1da9-5136-adff-e8d5cd5ea23a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/df03c642-31b5-5d6f-ba5e-7213a8e2bc2a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d22d08e3-8138-5c5e-ad74-4855999baf62/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bbac90ca-eb08-554c-8334-5769d2b871d4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f9dcf35d-df2a-5f90-8343-cee345b2eb49/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/addcd46e-c110-5693-b867-dfd5976c0e49/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5895c005-c137-5d9d-9f28-134743dbaba1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp315-cp315-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9a9d019a-8d36-5118-9fcd-f9de5bce3390/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fca854b1-da52-5464-8254-ebb810fa5adf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp315-cp315t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/83ef12f1-d829-5f10-9a6f-0c14804073ab/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### opentimspy-1.2.3-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, michalsta/opentims, workflow publish.yml).

- [opentimspy-1.2.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f7e3e274-17ad-526d-a381-0eacf5982196/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/opentimspy@1.2.3
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/opentimspy/1.2.3.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/opentimspy/1.2.3