# SBOM for punwrap 0.3.3 The Python package punwrap 0.3.3 ships 30 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/punwrap@0.3.3` - PyPI: https://pypi.org/project/punwrap/0.3.3/ - Requires Python: \>=3.10 ## SBOMs ### punwrap-0.3.3-cp310-cp310-manylinux\_2\_17\_i686.manylinux2014\_i686.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/2d0c7502-2b65-576e-83ea-2ba7705f374c/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp310-cp310-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/e94eb26c-b565-5bb7-a92a-4c93f89e8b33/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp310-cp310-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/70d6a50a-9e95-54da-af4a-5468319f22c3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/83e0faca-1cfc-5bee-b2ea-210073cb5830/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp310-cp310-win32.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/91d3e15e-0b88-50d6-82dd-bb4810c84432/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp310-cp310-win\_amd64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/57928903-7eb2-5ee8-bdc9-24925d40649b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp311-cp311-manylinux\_2\_17\_i686.manylinux2014\_i686.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/2f40e99b-6348-5815-80e7-f064cc29cdff/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp311-cp311-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/1fb11a2d-42cc-5020-bc5f-4aa99d9e3296/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp311-cp311-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/b5f8b3b4-f340-5a2c-b135-104f08a5b8f0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/f4549e72-ce05-56a6-84c8-ad320e363574/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp311-cp311-win32.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/32945407-d9dc-5f0d-a064-97fb96b393f0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp311-cp311-win\_amd64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/e4601342-4995-5489-bd3d-48c7ac7b502b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp312-cp312-manylinux\_2\_17\_i686.manylinux2014\_i686.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/5c9e1427-6352-5031-a587-405ecbf21c0d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp312-cp312-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/cf567d96-cf9f-50bd-b60c-35e279916d64/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp312-cp312-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/92ba6785-a6a0-5f4d-b14d-b91f0127442d/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/9d712987-4a62-50ef-8d0d-bc7fd65fba07/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp312-cp312-win32.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/3c462954-a087-51d3-8702-757f03c0161a/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp312-cp312-win\_amd64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/5ce5a0cf-269b-5713-8ffb-27e9f4d125a8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp313-cp313-manylinux\_2\_17\_i686.manylinux2014\_i686.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/a9139fbb-b8bb-59e4-a068-77ebc4c361f3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp313-cp313-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/bfb47090-edbb-5b83-9a88-aaaeffeb48c6/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp313-cp313-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/f82cd07e-6a80-56d0-bad3-7d653b647caf/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/97db82c5-6d68-5404-a8f8-56fa2a5c2104/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp313-cp313-win32.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/37fdfb42-5eb4-5321-80f6-66c75cdf9a9e/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp313-cp313-win\_amd64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/eb810247-3642-577d-975b-6335893f4d03/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp314-cp314-manylinux\_2\_17\_i686.manylinux2014\_i686.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/4acf2e6a-3c31-5a08-a592-680319069ac3/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp314-cp314-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/37876840-a99b-5070-91c2-3aee08962254/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp314-cp314-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/ddf0ad58-6bba-5d62-a7cb-b394ea4850db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/f5eae3ee-989b-554e-972a-febaa19e9dd4/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp314-cp314-win32.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/6d79e8ab-7678-5436-8a40-cef5b455f9fd/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### punwrap-0.3.3-cp314-cp314-win\_amd64.whl PEP 740 attestation verified (GitHub, veikman/punwrap, workflow build.yml). - [punwrap-0.3.3.dist-info/sboms/punwrap.cyclonedx.json](https://pypi.sbomify.com/artifact/424e70bc-1784-5b76-be07-d5c70996d0e8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/punwrap@0.3.3 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/punwrap/0.3.3.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/punwrap/0.3.3