# SBOM for osm-shortlink 1.4.1 > OpenStreetMap shortlink encoder and decoder The Python package osm-shortlink 1.4.1 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/osm-shortlink@1.4.1` - PyPI: https://pypi.org/project/osm-shortlink/1.4.1/ - Requires Python: \>=3.9 - Issues: - Repository: ## SBOMs ### osm\_shortlink-1.4.1-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/349ce969-1532-5bcf-b789-3d4057701dfe/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/72e5da34-6693-51d9-a306-a8735d03d69a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/827f3fb2-8076-5ad1-a91e-ca3dc9904468/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ae97761b-806f-56e1-88d4-fc0014449909/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/52bdae2d-06fa-5598-8ee9-d214d80d71bd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7b45ab2d-e6aa-5c87-ab10-ab3e8a6efaa9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d7b0f882-f729-5aca-ab3a-8a034e465750/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0e704b8e-2a12-5283-b050-ccfa7913b99c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp313-cp313t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1dea1b6c-d956-57a9-b492-ff33d6a52057/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp313-cp313t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2d5752a8-66e8-5f19-99a8-7a3f1fd5d781/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dbdad735-650e-5ffb-8aa5-7cafb02fcfd6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2753bc89-79e0-5eb0-8853-adade09fbd1a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fc46aba9-bfb4-5fe4-bb16-cba289199512/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6f4b0d37-37c3-5f7d-97b3-b244d3b1a995/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp39-cp39-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f696d407-f9ce-5589-b58d-dcf668ab8ea2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### osm\_shortlink-1.4.1-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Zaczero/pkgs, workflow ci.yaml). - [osm\_shortlink-1.4.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/24ea5a30-be95-5c96-8538-2312240bc130/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/osm-shortlink@1.4.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/osm-shortlink/1.4.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/osm-shortlink/1.4.1