# SBOM for punchboot 2.7.1

> Punchboot tools

The Python package punchboot 2.7.1 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/punchboot@2.7.1`
- PyPI: https://pypi.org/project/punchboot/2.7.1/
- Author: Jonas Blixt
- License: BSD
- Requires Python: \>=3.10
- Homepage: <https://github.com/jonasblixt/punchboot>

## SBOMs

### punchboot-2.7.1-cp310-cp310-manylinux\_2\_28\_x86\_64.whl

- [punchboot-2.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/968886e3-a222-5148-b503-cfd4232a9987/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### punchboot-2.7.1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl

- [punchboot-2.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/97bc5140-41cc-5c36-b64b-5a7d3ec80824/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### punchboot-2.7.1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl

- [punchboot-2.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/05ff95cc-8aa6-5913-b80d-655b94acfb5d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### punchboot-2.7.1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl

- [punchboot-2.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/adf4a2c2-3b1a-59db-bbbe-0c82b4b77da1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### punchboot-2.7.1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl

- [punchboot-2.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f2170b13-5e36-504a-8528-be0d305728e4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### punchboot-2.7.1-cp315-cp315-manylinux\_2\_28\_x86\_64.whl

- [punchboot-2.7.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1e6849c0-2016-5c98-8be4-6323be92fa11/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/punchboot@2.7.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/punchboot/2.7.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/punchboot/2.7.1