# SBOM for pybwa 2.3.0

> Python bindings for BWA

The Python package pybwa 2.3.0 ships 20 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pybwa@2.3.0`
- PyPI: https://pypi.org/project/pybwa/2.3.0/
- Author: Nils Homer
- Requires Python: \<4.0,\>=3.10.0

## SBOMs

### pybwa-2.3.0-cp310-cp310-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a6159b9b-a5db-5237-bfda-8d89cc2b05ea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/36d5fddb-ee81-5d0b-a4a3-3ed3109b61b6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/60273910-1d59-5d55-96b4-1d3f50bd4c86/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1896b8a6-d6e2-5036-a2cb-2b200cbb2ce9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ba2b55b5-2820-5fe8-8f95-ea2ecbe345af/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c4e844c0-849e-5dba-91fb-9c8637239f93/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fe01d04c-6c93-5417-8b7e-001abaf46b8b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b6044936-6b42-5d8b-b475-73382711a42f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/95bae717-cc5a-55b4-b25a-ea8d35d90bea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c1f4b640-9a59-584a-9888-ddde3ef65ddc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/36d0dca2-b745-5c67-8f26-b2e16cec6cb9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1a28c31b-1abd-57c4-bc76-a2f10a5038f2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9ac58d63-f802-5e88-a25e-f03651b4450d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c63961ce-d6ff-505f-8705-2c5a38b60d2b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cdded61d-fb62-5bad-8548-ba88ac5b3b21/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0a5ef382-6b59-5378-9fc6-82dd2cb02e9a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/75f07919-6db9-59ce-aab1-fd2b9934af12/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/24fc2446-42a4-5362-bf5c-4ebfc399e1a0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1d582b88-0837-5259-aa32-2537558271b9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pybwa-2.3.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, fulcrumgenomics/pybwa, workflow publish\_pybwa.yml).

- [pybwa-2.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d5646230-d0a5-567c-a796-b30f8416e24f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pybwa@2.3.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pybwa/2.3.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pybwa/2.3.0