# SBOM for pandarm 0.0.7.post1

> The Pandas Routing Machine

The Python package pandarm 0.0.7.post1 ships 20 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pandarm@0.0.7.post1`
- PyPI: https://pypi.org/project/pandarm/0.0.7.post1/
- Requires Python: \>=3.10
- Home: <https://github.com/oturns/pandarm/>
- Repository: <https://github.com/oturns/pandarm>

## SBOMs

### pandarm-0.0.7.post1-cp311-cp311-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/af7a15d3-142c-5e74-9c56-349eb262343e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a07d5cc8-9123-5898-8103-4cd22acbb8a3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8e01cdab-6cf0-547b-995d-b0c1f629756c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1c93a904-4bf0-5e02-ba38-5165b0978155/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp312-cp312-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d1bf3e4d-b768-589d-8a97-d77536e21895/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/313475a6-d2b8-5eb8-88fb-decc49755704/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6ca732c6-95ec-52ee-88cd-198c23d35db7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a921ee72-8fd9-556b-88d7-0cec2c0505fb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp313-cp313-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bc6f613d-d608-570c-a5e1-92e97d45b1da/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3771159f-9757-5c1b-9d56-0dfbde33115b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/39f08562-2c67-54f4-bba3-44a15fbf2e88/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b4a82819-d3d3-5981-bbad-37d07c9a8368/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp314-cp314-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4f87968c-4b99-5b46-9c89-b27b905dbd5d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation failed verification: Failed to refresh TUF metadata.

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e28b3082-6f99-53b9-9f1d-ccab599be5a6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b5e26271-92e7-5259-b858-6117276bfa4a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/42fb1fcc-cab9-5f1b-8de5-30c679e514da/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp315-cp315-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d56a9d4f-42c0-5e35-b4c2-654569768ce8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp315-cp315-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/51dcc8b0-7c14-569c-8ae3-77b81a8c13ba/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp315-cp315-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fa699aa3-22a1-5710-9e28-ee4413508ce4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandarm-0.0.7.post1-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, oturns/pandarm, workflow build-wheels.yml).

- [pandarm-0.0.7.post1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/585c0b3f-25de-5a71-90df-de24def06565/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pandarm@0.0.7.post1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pandarm/0.0.7.post1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pandarm/0.0.7.post1