# SBOM for potpourri3d 1.4.0 > An invigorating blend of 3D geometry tools in Python. The Python package potpourri3d 1.4.0 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/potpourri3d@1.4.0` - PyPI: https://pypi.org/project/potpourri3d/1.4.0/ - License: MIT License Copyright (c) 2021 Nicholas Sharp Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to dea… - Requires Python: \>=3.9 - Homepage: ## SBOMs ### potpourri3d-1.4.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4bc4433c-1065-5b32-8d85-b698733bddd1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/08653f77-67a2-5594-8a62-06a2994016bc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4e8b9a86-3e6f-5711-bb63-deead52bc5c9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/db02296d-5ae3-56de-a064-d2565ae5cd45/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/87123baf-03a8-5d4f-95a4-21b220a13b78/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ca245f62-3633-5fa1-9c28-80b70fa36066/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a0b4727d-afef-51d5-9027-32c31a03bf81/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0099cf08-1eb4-5f20-97fc-99845925a64a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8414c855-a69e-517f-9d02-e0585a8772f4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/116c0b8f-d36b-572a-b7ea-8a8012d5e54f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f04e39da-9d4e-5112-a6ff-8f05c3679f7d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cc6be4fa-6934-56bd-851d-3eb5b2710526/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp39-cp39-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bbe7c7f4-5776-5711-a325-5fd43cab1631/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### potpourri3d-1.4.0-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, nmwsharp/potpourri3d, workflow publish.yml). - [potpourri3d-1.4.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bdc72ed5-844f-57e1-b81e-316aa41bfa88/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/potpourri3d@1.4.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/potpourri3d/1.4.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/potpourri3d/1.4.0