# SBOM for pxr-boost 26.8 > Boost.Python fork optimized for OpenUSD The Python package pxr-boost 26.8 ships 18 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/pxr-boost@26.8` - PyPI: https://pypi.org/project/pxr-boost/26.8/ - Requires Python: \>=3.8 - Repository: ## SBOMs ### pxr\_boost-26.8-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/81d963a4-635d-51b2-a283-08631e6140c5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/86b887b1-4f0a-5279-bed1-242e1e15cf78/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6c13009b-8023-5c3e-a10f-a5262fb17a59/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/07297663-0913-59d4-ba4f-71f217f15e9d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/275634a7-b551-5313-843b-f7facdc9226a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d3729eb9-9228-56e8-9ca4-63ba388ffb35/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1c47001e-4dfd-5485-9c97-cf6e1d582401/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c9d170de-dfa6-543d-a022-a551c3aa9758/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2e874199-00a6-503b-8b28-db55058c3d94/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f7d101bc-dfd3-593e-8ef8-09d026fd92f9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5c87cdaf-1021-5f1b-bd46-691060c0933c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0211bcf8-3e25-5c14-8d2b-1ae5b1e58245/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5c9ad217-0e5b-59c0-b675-5cbf123c4d1a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6003be26-2817-52d6-947c-1e143768a43b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c06ea30f-78d5-5668-8010-9e8da43c87bc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/503d544a-0b3c-58a1-9a9b-ba8e77fbd687/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp39-cp39-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e8e48829-a920-5569-9bb4-0d158efec8d9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pxr\_boost-26.8-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, untwine/pxr-boost, workflow pypi.yml). - [pxr\_boost-26.8.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/587960d4-e99b-5e8d-ae42-79e79eec8b81/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pxr-boost@26.8 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pxr-boost/26.8.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pxr-boost/26.8