# SBOM for pylibheif 1.21.2.post11

> Python bindings for libheif - HEIC/AVIF/JPEG2000 image codec

The Python package pylibheif 1.21.2.post11 ships 4 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pylibheif@1.21.2.post11`
- PyPI: https://pypi.org/project/pylibheif/1.21.2.post11/
- License: LGPL-3.0-or-later
- Requires Python: \>=3.11
- Documentation: <https://github.com/twn39/pylibheif#readme>
- Homepage: <https://github.com/twn39/pylibheif>
- Issues: <https://github.com/twn39/pylibheif/issues>
- Repository: <https://github.com/twn39/pylibheif>

## SBOMs

### pylibheif-1.21.2.post11-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, twn39/pylibheif, workflow build.yml).

- [pylibheif-1.21.2.post11.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9853facc-c2bf-54e1-b9c2-dcce75c5dc22/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pylibheif-1.21.2.post11-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, twn39/pylibheif, workflow build.yml).

- [pylibheif-1.21.2.post11.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5bbe62d3-4e5d-5a4c-be15-1a094df67cbb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pylibheif-1.21.2.post11-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, twn39/pylibheif, workflow build.yml).

- [pylibheif-1.21.2.post11.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4c3c34c1-c3cc-5689-9513-1c3ecba5b46f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pylibheif-1.21.2.post11-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, twn39/pylibheif, workflow build.yml).

- [pylibheif-1.21.2.post11.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e1645fb8-8a83-5540-a343-66adc989b10c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pylibheif@1.21.2.post11
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pylibheif/1.21.2.post11.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pylibheif/1.21.2.post11