# SBOM for piqtree 0.8.3 > Python bindings for IQTree The Python package piqtree 0.8.3 ships 3 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/piqtree@0.8.3` - PyPI: https://pypi.org/project/piqtree/0.8.3/ - Author: Gavin Huttley, Robert McArthur, Bui Quang Minh , Richard Morris, Thomas Wong - Requires Python: \>=3.12 - Documentation: - Repository: ## SBOMs ### piqtree-0.8.3-cp312-cp312-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, iqtree/piqtree, workflow release.yml). - [piqtree-0.8.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b5afa872-00cc-586a-b9d2-c050a510dcd5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### piqtree-0.8.3-cp313-cp313-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, iqtree/piqtree, workflow release.yml). - [piqtree-0.8.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/26db74cc-05c9-5c1c-9f2e-4d7769f44994/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### piqtree-0.8.3-cp314-cp314-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, iqtree/piqtree, workflow release.yml). - [piqtree-0.8.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/141a26b7-6bbe-57e0-bbf9-d77dad016314/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/piqtree@0.8.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/piqtree/0.8.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/piqtree/0.8.3