# SBOM for protovalidate 2.1.0 > Protocol Buffer Validation for Python The Python package protovalidate 2.1.0 ships 24 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/protovalidate@2.1.0` - PyPI: https://pypi.org/project/protovalidate/2.1.0/ - Requires Python: \>=3.11 - Documentation: - Homepage: - Issues: - Source: ## SBOMs ### protovalidate-2.1.0-cp311-abi3-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b1ad9e8f-ef13-5b6d-83b3-773649ff3bfb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp311-abi3-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e4f21ac1-f57b-5584-800d-342f5719553a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp311-abi3-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/cc2c4693-3a47-5b7a-8be2-a4889f170fb1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp311-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b54a3234-32c7-5455-aa7d-4b03cf0e3b97/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp311-abi3-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ef929948-ec5a-5d09-900e-da35d50da108/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp311-abi3-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/9755028d-4274-5865-a268-1712770e9105/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp311-abi3-win\_amd64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/70d50e9b-129a-5fea-8569-6e6e1927bfe0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp311-abi3-win\_arm64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/c20f82cd-92ed-554a-8aad-96d756c7d2d7/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp314-cp314t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/0d0a7fea-d988-54ec-acb2-9196c94dd3cb/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp314-cp314t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/101f8cad-4dc5-54d5-acec-f7909c544fc9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp314-cp314t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/dc2eee6c-3075-5e40-968f-53c708e736c1/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/2b6d9726-4b6d-5754-b133-bbb2d66af7e4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/fab5900e-7284-576d-9acc-8f78850b7920/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/6e783f4c-f7b7-5104-ad31-c179dca04ded/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp314-cp314t-win\_amd64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b1cdb7c0-c6eb-54a0-89ce-a872ba8b05fa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp314-cp314t-win\_arm64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/23f0c414-c9a0-5270-a71b-9c284298797b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp315-abi3.abi3t-macosx\_10\_12\_x86\_64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/ecd3140d-e718-5630-9678-5d3f9a119474/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp315-abi3.abi3t-macosx\_11\_0\_arm64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/3009b05a-973c-5ca9-991c-4a29d9eb344e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp315-abi3.abi3t-manylinux\_2\_17\_aarch64.manylinux2014\_aarch64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/b05ad1a6-a386-5731-b622-ba1a03784f7e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp315-abi3.abi3t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/8ab7d4e5-a711-5054-99cb-5e0499c22948/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp315-abi3.abi3t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/583a19af-9d42-5cb2-a78d-270fe22dd74e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp315-abi3.abi3t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/e3558dc4-a726-5119-b60a-2a6a88a291fa/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp315-abi3.abi3t-win\_amd64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/39333c65-634c-5651-86ca-ddb52b8d5da9/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### protovalidate-2.1.0-cp315-abi3.abi3t-win\_arm64.whl PEP 740 attestation verified (GitHub, bufbuild/protovalidate-py, workflow release.yaml). - [protovalidate-2.1.0.dist-info/sboms/protovalidate-py.cyclonedx.json](https://pypi.sbomify.com/artifact/26562620-b3e1-5a44-84e8-afc819e7652b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/protovalidate@2.1.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/protovalidate/2.1.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/protovalidate/2.1.0