# SBOM for pm-implicit 0.7.3 > Collaborative Filtering for Implicit Feedback Datasets The Python package pm-implicit 0.7.3 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/pm-implicit@0.7.3` - PyPI: https://pypi.org/project/pm-implicit/0.7.3/ - Author: Aki Ariga - License: MIT - Homepage: ## SBOMs ### pm\_implicit-0.7.3-cp310-cp310-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, chezou/pm-implicit, workflow build.yml). - [pm\_implicit-0.7.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/27833828-0664-5f29-a5e2-3c86b3c1d876/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pm\_implicit-0.7.3-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, chezou/pm-implicit, workflow build.yml). - [pm\_implicit-0.7.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5d9de9c1-a71e-5a63-875d-bfe6bdd7fbf0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pm\_implicit-0.7.3-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, chezou/pm-implicit, workflow build.yml). - [pm\_implicit-0.7.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dc04742c-2d0b-5c77-ac8e-6c2e272b29aa/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pm\_implicit-0.7.3-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, chezou/pm-implicit, workflow build.yml). - [pm\_implicit-0.7.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fe49f794-b56a-582e-9cd8-fde5c7ea44d2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pm\_implicit-0.7.3-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, chezou/pm-implicit, workflow build.yml). - [pm\_implicit-0.7.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4dd1cc55-798a-5330-8bc8-086224d56a64/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pm\_implicit-0.7.3-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, chezou/pm-implicit, workflow build.yml). - [pm\_implicit-0.7.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/827c11ef-7f27-528f-9371-99c4f8313033/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pm\_implicit-0.7.3-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, chezou/pm-implicit, workflow build.yml). - [pm\_implicit-0.7.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/91cb1fb9-a609-5a6f-b5e4-e6479d5502db/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pm\_implicit-0.7.3-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, chezou/pm-implicit, workflow build.yml). - [pm\_implicit-0.7.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/50b58c63-ac4a-5913-99f8-87239155830b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pm\_implicit-0.7.3-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, chezou/pm-implicit, workflow build.yml). - [pm\_implicit-0.7.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/379813f9-4ccd-5df3-a0b5-5e70f5f7e682/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pm\_implicit-0.7.3-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, chezou/pm-implicit, workflow build.yml). - [pm\_implicit-0.7.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c5693d15-cbad-598b-ace5-147ff95e0d11/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pm-implicit@0.7.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pm-implicit/0.7.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pm-implicit/0.7.3