# SBOM for pillow-heif 1.8.1 > Python interface for libheif library The Python package pillow-heif 1.8.1 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/pillow-heif@1.8.1` - PyPI: https://pypi.org/project/pillow-heif/1.8.1/ - Author: Alexander Piskun - License: BSD-3-Clause - Requires Python: \>=3.10 - Changelog: - Documentation: - Homepage: - Source: ## SBOMs ### pillow\_heif-1.8.1-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cccad852-556c-5133-a5a8-3ab232f5a8df/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3ef97f0d-d733-55bf-a2e9-477eba474d56/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5a09263f-bf70-5d3c-80c1-efd7fa3e01ed/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/981dd226-12c7-543b-8380-1c2118a15231/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/92d5874a-329a-57ee-9467-a4f0584c8881/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/427e9223-acda-5b9a-988c-4e30ab3ee842/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c6a5514f-0c87-548b-a89c-c7ff72d28d9c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f63e9898-eeaa-59e3-9abb-19f1adca84fc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/93a8dd8a-f442-5b8a-9df8-8b65cdb82e04/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/161597d5-af80-5205-9f3d-b2207f1dbd89/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/82f43881-76a1-5f58-8c60-ce6f8613ff8d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5a4b8c5f-1ee1-5c53-bc0d-92f21d241ace/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f06cdd0a-0752-5ba5-bb57-87eddf6041b8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/df33f1f3-79a2-581f-aeb1-74d1da6c0f9a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3eb0b3a9-ba40-5229-bcf5-6758b622010d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pillow\_heif-1.8.1-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bigcat88/pillow\_heif, workflow wheels.yml). - [pillow\_heif-1.8.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a74a72eb-26ce-5b93-a8d4-dd0c1c5093c2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pillow-heif@1.8.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pillow-heif/1.8.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pillow-heif/1.8.1