# SBOM for pymde 0.3.0 > Minimum-Distortion Embedding The Python package pymde 0.3.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/pymde@0.3.0` - PyPI: https://pypi.org/project/pymde/0.3.0/ - Requires Python: \>=3.10 - Homepage: - Issues: - Repository: ## SBOMs ### pymde-0.3.0-cp310-cp310-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, cvxgrp/pymde, workflow build.yaml). - [pymde-0.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ee4fba10-aafc-55d4-aebe-4d4e4e4f140d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pymde-0.3.0-cp310-cp310-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, cvxgrp/pymde, workflow build.yaml). - [pymde-0.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e2f4728b-5da8-55d1-98f0-9819a9b7b0d1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pymde-0.3.0-cp311-cp311-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, cvxgrp/pymde, workflow build.yaml). - [pymde-0.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4634e43b-30e6-5ad2-99cb-5ed78434d331/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pymde-0.3.0-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, cvxgrp/pymde, workflow build.yaml). - [pymde-0.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/11bdf2e3-3688-5dc4-a47b-e3b712317db4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pymde-0.3.0-cp312-cp312-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, cvxgrp/pymde, workflow build.yaml). - [pymde-0.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6d197aa5-3528-5002-93cb-72336bd97dea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pymde-0.3.0-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, cvxgrp/pymde, workflow build.yaml). - [pymde-0.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/232510ea-c90e-569c-b758-ee6856e9841f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pymde-0.3.0-cp313-cp313-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, cvxgrp/pymde, workflow build.yaml). - [pymde-0.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/279077fe-dda6-52b6-8b60-4fc23550bbba/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pymde-0.3.0-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, cvxgrp/pymde, workflow build.yaml). - [pymde-0.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/153d7bb4-9dfe-55f3-ac51-dd48922db776/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pymde-0.3.0-cp314-cp314-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, cvxgrp/pymde, workflow build.yaml). - [pymde-0.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/815afd0f-dcf0-548f-a6a5-80091e2f48c2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### pymde-0.3.0-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, cvxgrp/pymde, workflow build.yaml). - [pymde-0.3.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/533a4030-7042-594d-a113-d35731be537d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/pymde@0.3.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/pymde/0.3.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/pymde/0.3.0