# SBOM for py4dgeo 1.2.1

> Library for change detection in 4D point cloud data

The Python package py4dgeo 1.2.1 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/py4dgeo@1.2.1`
- PyPI: https://pypi.org/project/py4dgeo/1.2.1/
- Requires Python: \>=3.10
- documentation: <https://py4dgeo.readthedocs.io/>
- homepage: <https://github.com/3dgeo-heidelberg/py4dgeo/>
- repository: <https://github.com/3dgeo-heidelberg/py4dgeo/>

## SBOMs

### py4dgeo-1.2.1-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 3dgeo-heidelberg/py4dgeo, workflow pypi.yml).

- [py4dgeo-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d11e7a58-917c-5b66-b55b-3cd6d6823f6a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### py4dgeo-1.2.1-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 3dgeo-heidelberg/py4dgeo, workflow pypi.yml).

- [py4dgeo-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bf187cda-f05b-59d0-85cf-1885ac5aa5b7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### py4dgeo-1.2.1-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 3dgeo-heidelberg/py4dgeo, workflow pypi.yml).

- [py4dgeo-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3c9d3781-e8bb-516c-9bc8-967fa4731849/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### py4dgeo-1.2.1-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 3dgeo-heidelberg/py4dgeo, workflow pypi.yml).

- [py4dgeo-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0d4b73a8-04ba-5d53-b3a5-a29e733ba42e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### py4dgeo-1.2.1-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 3dgeo-heidelberg/py4dgeo, workflow pypi.yml).

- [py4dgeo-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e3477b2a-dc19-5980-99fc-093899ecbeb0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### py4dgeo-1.2.1-cp314-cp314t-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, 3dgeo-heidelberg/py4dgeo, workflow pypi.yml).

- [py4dgeo-1.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fd749436-0f89-5243-9631-e9b855a59844/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/py4dgeo@1.2.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/py4dgeo/1.2.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/py4dgeo/1.2.1