# SBOM for pxr-arch 26.8

> Architecture-dependent code used in OpenUSD

The Python package pxr-arch 26.8 ships 18 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pxr-arch@26.8`
- PyPI: https://pypi.org/project/pxr-arch/26.8/
- Requires Python: \>=3.8
- Repository: <https://github.com/untwine/pxr-arch>

## SBOMs

### pxr\_arch-26.8-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5feee0ac-d4cb-5284-839e-488c8a27cc57/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1e35245a-09f7-521a-907d-b6b13decbaee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dceef500-3c05-528e-bf8f-966186fe6ce7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/373cfc47-3bb9-5ce4-85d0-69c538ddd53a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c90967a2-0b69-50dd-b4ee-ba38fdbaeb52/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9a46e022-d17a-5e00-9ae7-d6127597c256/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/099136bc-836e-5e6a-a0a8-7663739d4251/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/22928add-e6d2-5a94-8958-e3c4934ee26a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/64ca11ad-5209-56f1-85cf-b022e3877e22/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bb133fec-2235-533e-b328-af876b926867/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2a312091-db24-5169-80d8-1cff2d1e6231/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/44a80186-f43f-54fd-873a-cff4d960d6cf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp315-cp315-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8010718a-730d-52b5-8c52-d9dd702ff107/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/76bbb5c2-c671-509b-9641-2b5b758be4a5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp315-cp315t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a558eb16-3c47-5e9f-adc0-7aec1b241625/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e067ef63-e187-5333-a50b-251d0b92bfe1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp39-cp39-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2d8ead9d-0531-5d48-817b-e86ef7189422/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pxr\_arch-26.8-cp39-cp39-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, untwine/pxr-arch, workflow pypi.yml).

- [pxr\_arch-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/73942281-0148-52b3-8bc5-f4bc1e01eded/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pxr-arch@26.8
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pxr-arch/26.8.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pxr-arch/26.8