# SBOM for portaudio-py 2026.1.0.dev0

> PortAudio bindings for Python

The Python package portaudio-py 2026.1.0.dev0 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/portaudio-py@2026.1.0.dev0`
- PyPI: https://pypi.org/project/portaudio-py/2026.1.0.dev0/
- Requires Python: \>=3.12
- Discord: <https://discord.gg/shiguredo>
- Source: <https://github.com/shiguredo/portaudio-py>

## SBOMs

### portaudio\_py-2026.1.0.dev0-cp312-cp312-manylinux\_2\_34\_aarch64.whl

PEP 740 attestation verified (GitHub, shiguredo/portaudio-py, workflow wheel.yml).

- [portaudio\_py-2026.1.0.dev0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0e25bdca-63d7-5648-84c5-37d0c49198d9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### portaudio\_py-2026.1.0.dev0-cp312-cp312-manylinux\_2\_34\_x86\_64.whl

PEP 740 attestation verified (GitHub, shiguredo/portaudio-py, workflow wheel.yml).

- [portaudio\_py-2026.1.0.dev0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f227ca6e-bbb9-5140-b5fc-a93987b079fd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### portaudio\_py-2026.1.0.dev0-cp313-cp313-manylinux\_2\_34\_aarch64.whl

PEP 740 attestation verified (GitHub, shiguredo/portaudio-py, workflow wheel.yml).

- [portaudio\_py-2026.1.0.dev0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/52524ea2-4598-5f1b-a992-af248b66d84a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### portaudio\_py-2026.1.0.dev0-cp313-cp313-manylinux\_2\_34\_x86\_64.whl

PEP 740 attestation verified (GitHub, shiguredo/portaudio-py, workflow wheel.yml).

- [portaudio\_py-2026.1.0.dev0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/22a722d7-166f-581c-acdc-dc4e4aa78870/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### portaudio\_py-2026.1.0.dev0-cp314-cp314-manylinux\_2\_34\_aarch64.whl

PEP 740 attestation verified (GitHub, shiguredo/portaudio-py, workflow wheel.yml).

- [portaudio\_py-2026.1.0.dev0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/86e9cd5e-285c-5f6c-a277-b87df610621b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### portaudio\_py-2026.1.0.dev0-cp314-cp314-manylinux\_2\_34\_x86\_64.whl

PEP 740 attestation verified (GitHub, shiguredo/portaudio-py, workflow wheel.yml).

- [portaudio\_py-2026.1.0.dev0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bf15a49e-93da-590f-9a23-c2ca311ac325/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### portaudio\_py-2026.1.0.dev0-cp314-cp314t-manylinux\_2\_34\_aarch64.whl

PEP 740 attestation verified (GitHub, shiguredo/portaudio-py, workflow wheel.yml).

- [portaudio\_py-2026.1.0.dev0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/85043c9c-e0e1-557c-80fd-c4aedefb6dda/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

### portaudio\_py-2026.1.0.dev0-cp314-cp314t-manylinux\_2\_34\_x86\_64.whl

PEP 740 attestation verified (GitHub, shiguredo/portaudio-py, workflow wheel.yml).

- [portaudio\_py-2026.1.0.dev0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/93f2fe43-9dc6-5aab-ba37-d10ce42adbdb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 2 known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-41989](https://insights.sbomify.com/CVE-2026-41989/) | medium (6.7) | libgcrypt20 1.9.4-3ubuntu3 (Ubuntu) | none listed | libgcrypt20 vulnerabilities |
| [CVE-2024-2236](https://insights.sbomify.com/CVE-2024-2236/) | medium (5.9) | libgcrypt20 1.9.4-3ubuntu3 (Ubuntu) | none listed | libgcrypt20 vulnerability |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/portaudio-py@2026.1.0.dev0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/portaudio-py/2026.1.0.dev0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/portaudio-py/2026.1.0.dev0