# SBOM for pyccl 3.3.6

> Library of validated cosmological functions.

The Python package pyccl 3.3.6 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pyccl@3.3.6`
- PyPI: https://pypi.org/project/pyccl/3.3.6/
- Author: LSST DESC
- License: BSD
- Requires Python: \>=3.10
- documentation: <https://ccl.readthedocs.io/en/latest/>
- homepage: <https://lsstdesc.org/>
- repository: <https://github.com/LSSTDESC/CCL>

## SBOMs

### pyccl-3.3.6-cp310-cp310-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LSSTDESC/CCL, workflow publish.yml).

- [pyccl-3.3.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bea57178-8c67-53b3-b74b-ec369aac1323/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyccl-3.3.6-cp311-cp311-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LSSTDESC/CCL, workflow publish.yml).

- [pyccl-3.3.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6e7e1b70-972f-573b-aa0e-9b07f0589ef4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyccl-3.3.6-cp312-cp312-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LSSTDESC/CCL, workflow publish.yml).

- [pyccl-3.3.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3cc33e4e-a570-5815-b940-63771c9028ed/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyccl-3.3.6-cp313-cp313-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LSSTDESC/CCL, workflow publish.yml).

- [pyccl-3.3.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f33e6d61-6691-5e2d-8ded-fb545874fb85/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyccl-3.3.6-cp314-cp314-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, LSSTDESC/CCL, workflow publish.yml).

- [pyccl-3.3.6.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7265e8a0-66ba-5f81-b592-d5378df5a4bd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pyccl@3.3.6
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pyccl/3.3.6.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pyccl/3.3.6