# SBOM for photonforge 2.1.0

> PhotonForge is a design tool that integrates with foundry PDKs to speed up the design, simulation, and verification cycle for optical components and systems.

The Python package photonforge 2.1.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/photonforge@2.1.0`
- PyPI: https://pypi.org/project/photonforge/2.1.0/
- Requires Python: \>=3.10
- documentation: <https://docs.flexcompute.com/projects/photonforge/>
- homepage: <https://www.flexcompute.com/>

## SBOMs

### photonforge-2.1.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, flexcompute/compute, workflow photonforge-build-packages.yml).

- [photonforge-2.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1846f438-c656-5164-8fc6-89f36020b4cc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### photonforge-2.1.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, flexcompute/compute, workflow photonforge-build-packages.yml).

- [photonforge-2.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2644cdb3-3430-52bb-a5bf-04aeb3d51e3b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### photonforge-2.1.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, flexcompute/compute, workflow photonforge-build-packages.yml).

- [photonforge-2.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cbd3f99d-78f4-58a0-b4ab-8200b2eb62ef/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### photonforge-2.1.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, flexcompute/compute, workflow photonforge-build-packages.yml).

- [photonforge-2.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/56155b1d-d8e3-51a6-bf68-c1c8ba601e7d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### photonforge-2.1.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, flexcompute/compute, workflow photonforge-build-packages.yml).

- [photonforge-2.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7412be8b-c539-5343-aadc-b9f74d2d3f41/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### photonforge-2.1.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, flexcompute/compute, workflow photonforge-build-packages.yml).

- [photonforge-2.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/06bab93e-79c7-599f-90a7-8f3b337c89d3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### photonforge-2.1.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, flexcompute/compute, workflow photonforge-build-packages.yml).

- [photonforge-2.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/86060754-372d-5942-a700-fa4eacf3fb1d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### photonforge-2.1.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, flexcompute/compute, workflow photonforge-build-packages.yml).

- [photonforge-2.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3b1066d6-b670-56a8-871b-584385ff57ea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### photonforge-2.1.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, flexcompute/compute, workflow photonforge-build-packages.yml).

- [photonforge-2.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/75972a39-74e7-5b31-849c-2afe67ee73e3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### photonforge-2.1.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, flexcompute/compute, workflow photonforge-build-packages.yml).

- [photonforge-2.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5c0d25db-98de-55b1-86a8-c70f4a81fa30/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/photonforge@2.1.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/photonforge/2.1.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/photonforge/2.1.0