# SBOM for pybmds 25.1

> U.S. EPA Dose Response Modeling Software

The Python package pybmds 25.1 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/pybmds@25.1`
- PyPI: https://pypi.org/project/pybmds/25.1/
- Author: BMDS Development Team
- License: MIT License
- Requires Python: \>=3.11
- Changes: <https://github.com/USEPA/BMDS/blob/main/docs/source/history.md>
- Documentation: <https://usepa.github.io/BMDS/>
- Issue Tracker: <https://github.com/USEPA/BMDS/issues>
- Source: <https://github.com/USEPA/BMDS>

## SBOMs

### pybmds-25.1-cp311-cp311-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

- [pybmds-25.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4170be8b-863d-5b5b-9378-b1d5d6fe4dca/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybmds-25.1-cp312-cp312-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

- [pybmds-25.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e004e888-b4c7-5f92-bbf0-80de6904fa69/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybmds-25.1-cp313-cp313-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

- [pybmds-25.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/78ff183c-694b-540b-9ff5-2f8e14d29544/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybmds-25.1-cp314-cp314-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

- [pybmds-25.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d8880a36-dc71-57db-b2b0-88fb18f6efc8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybmds-25.1-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [pybmds-25.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/95648d9a-09ed-5093-b5ca-85ced3099bab/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pybmds@25.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pybmds/25.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pybmds/25.1