# SBOM for pandas 3.1.1

> Powerful data structures for data analysis, time series, and statistics

The Python package pandas 3.1.1 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pandas@3.1.1`
- PyPI: https://pypi.org/project/pandas/3.1.1/
- Requires Python: \>=3.11
- changelog: <https://pandas.pydata.org/docs/whatsnew/index.html>
- documentation: <https://pandas.pydata.org/docs/>
- funding: <https://opencollective.com/pandas>
- homepage: <https://pandas.pydata.org>
- issues: <https://github.com/pandas-dev/pandas/issues>
- source: <https://github.com/pandas-dev/pandas>

## SBOMs

### pandas-3.1.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/43f1cca9-70e0-501f-a388-30438006a597/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/575a133d-905b-5bc1-9d3f-58c7c94e2e41/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/27ad726a-6465-5af4-aadb-1cda40e07247/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3d636432-8945-5fa9-9b3a-7803aec81769/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d88f198e-4b67-521c-86f6-52fd610f6485/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/31c718ae-acd7-5217-9098-8d44dbd3f4c4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d4d68f1d-66fd-5dbc-b0df-c3b2255d605b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c3b4aae1-d045-57a0-823d-96bdf185dc30/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8a843340-64d7-57bb-8383-873aab2a2e14/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/34634010-70c0-53ee-8ab8-5759a18023af/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp315-cp315-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/84937725-52dd-5f4c-92d1-ff0360002f44/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8cc3df53-f5a6-5e67-9885-81234d4f74fb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp315-cp315t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, pandas-dev/pandas, workflow wheels.yml).

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ec12ba5c-b2b6-5248-900c-c9979419546b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pandas-3.1.1-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation failed verification: Failed to refresh TUF metadata.

- [pandas-3.1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b0772a47-2d01-59d1-a665-e28346fbcaa0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-09.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pandas@3.1.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pandas/3.1.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pandas/3.1.1