# SBOM for pygmo 2.20.0

> Parallel optimisation for Python

The Python package pygmo 2.20.0 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pygmo@2.20.0`
- PyPI: https://pypi.org/project/pygmo/2.20.0/
- Author: The pagmo development team
- License: MPL-2.0
- Homepage: <https://github.com/esa/pygmo2>

## SBOMs

### pygmo-2.20.0-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, esa/pygmo2, workflow publish-manual.yml).

- [pygmo-2.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2c83e986-88d4-5c0a-a6df-a4bd434fd5f2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pygmo-2.20.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, esa/pygmo2, workflow publish-manual.yml).

- [pygmo-2.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/18c4f931-73f2-551d-835a-472bf3d434b5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pygmo-2.20.0-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, esa/pygmo2, workflow publish-manual.yml).

- [pygmo-2.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9ec35581-0ef8-57e1-b9a2-e0dc2826b6fa/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pygmo-2.20.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, esa/pygmo2, workflow publish-manual.yml).

- [pygmo-2.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/43db7720-690b-544a-82b7-94ba26c85ffd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pygmo-2.20.0-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, esa/pygmo2, workflow publish-manual.yml).

- [pygmo-2.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2c67967a-08c9-5a4e-abcd-59fc7fdadddc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pygmo-2.20.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, esa/pygmo2, workflow publish-manual.yml).

- [pygmo-2.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b3656b01-848e-56ba-9eeb-d717c15ccf0e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pygmo-2.20.0-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, esa/pygmo2, workflow publish-manual.yml).

- [pygmo-2.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0cfd34fe-1d0d-5bcf-be51-0b0e95ba8bf9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pygmo-2.20.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, esa/pygmo2, workflow publish-manual.yml).

- [pygmo-2.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5712503f-03f1-5632-b2df-c54dc31de130/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pygmo@2.20.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pygmo/2.20.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pygmo/2.20.0