# SBOM for pitct 1.0.8

> Python TCT Library

The Python package pitct 1.0.8 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pitct@1.0.8`
- PyPI: https://pypi.org/project/pitct/1.0.8/
- Author: Shoma Matsui, Masahiro Konishi
- Requires Python: \>=3.9
- Documentation: <https://omucai.github.io/PiTCT-docs/>
- Homepage: <https://omucai.github.io/PiTCT/>
- Repository: <https://github.com/OMUCAI/PiTCT.git>

## SBOMs

### pitct-1.0.8-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c7dd4600-e060-5c39-8354-7917f1ba3a8b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/feb6631b-5e23-5c72-b0bd-f54790f38632/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d5ab7964-0f4e-559f-8a53-466c76005e0a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/56996913-fe91-5f95-add3-c10799c6cdd6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce7c2622-5e36-584e-8b32-3d3d0dcb9a41/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/07df5c89-a51a-5235-b537-4eaea85b6a72/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/aa437946-1ec8-5fb0-a870-64863050f902/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0644eb56-aefe-5473-84d5-6ba7e9603c9f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dee55dbf-4a17-5e84-8d36-688484912423/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/23d3600a-64b7-59cb-addc-99ce1fd8ae42/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce1c8db7-f282-528c-b853-ebdc41095485/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/14279d96-a684-5dd3-bbc0-831a4db69be9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp39-cp39-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/71cdf4cf-dd53-52fc-8eb4-c5a826120a8f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pitct-1.0.8-cp39-cp39-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, OMUCAI/PiTCT, workflow release.yml).

- [pitct-1.0.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dd5698e8-9cd0-53a7-8d33-774e6b51147b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pitct@1.0.8
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pitct/1.0.8.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pitct/1.0.8