# SBOM for pylibheif 1.25.0
> Python bindings for libheif - HEIC/AVIF/JPEG2000 image codec
The Python package pylibheif 1.25.0 ships 4 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.
- Package URL (PURL): `pkg:pypi/pylibheif@1.25.0`
- PyPI: https://pypi.org/project/pylibheif/1.25.0/
- License: LGPL-3.0-or-later
- Requires Python: \>=3.11
- Documentation:
- Homepage:
- Issues:
- Repository:
## SBOMs
### pylibheif-1.25.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl
PEP 740 attestation verified (GitHub, twn39/pylibheif, workflow build.yml).
- [pylibheif-1.25.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6f3d26f8-178a-5431-965a-6738f76d5d60/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
### pylibheif-1.25.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl
PEP 740 attestation verified (GitHub, twn39/pylibheif, workflow build.yml).
- [pylibheif-1.25.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/32c90d6f-1f0f-5283-9fba-8282cff04444/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
### pylibheif-1.25.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl
PEP 740 attestation verified (GitHub, twn39/pylibheif, workflow build.yml).
- [pylibheif-1.25.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2e3462ae-9e53-5464-96ae-7e9757aeb497/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
### pylibheif-1.25.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl
PEP 740 attestation verified (GitHub, twn39/pylibheif, workflow build.yml).
- [pylibheif-1.25.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c6218220-4c64-5c90-a5d5-a1a1e1f650c3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities
## Known vulnerabilities
Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.
OSV has no known vulnerabilities for the components these SBOMs list.
## Fetch it over TEA
This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:
```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pylibheif@1.25.0
```
Machine-readable copy of this page: https://pypi.sbomify.com/package/pylibheif/1.25.0.json
---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pylibheif/1.25.0