# SBOM for pypdfium2 5.15.1

> Python bindings to PDFium

The Python package pypdfium2 5.15.1 ships 7 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pypdfium2@5.15.1`
- PyPI: https://pypi.org/project/pypdfium2/5.15.1/
- Author: pypdfium2-team
- License: BSD-3-Clause, Apache-2.0, dependency licenses
- Requires Python: \>=3.6
- Changelog: <https://pypdfium2.readthedocs.io/en/stable/changelog.html>
- Documentation: <https://pypdfium2.readthedocs.io>
- Homepage: <https://github.com/pypdfium2-team/pypdfium2>
- Source: <https://github.com/pypdfium2-team/pypdfium2>
- Tracker: <https://github.com/pypdfium2-team/pypdfium2/issues>

## SBOMs

### pypdfium2-5.15.1-py3-none-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, pypdfium2-team/pypdfium2, workflow main.yaml).

- [pypdfium2-5.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/919c9bc9-1f6f-5485-afa6-1fa4859cf00b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pypdfium2-5.15.1-py3-none-musllinux\_1\_2\_armv7l.whl

PEP 740 attestation verified (GitHub, pypdfium2-team/pypdfium2, workflow main.yaml).

- [pypdfium2-5.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cba5abff-9501-58ce-9730-f7e10dec9a87/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pypdfium2-5.15.1-py3-none-musllinux\_1\_2\_i686.whl

PEP 740 attestation verified (GitHub, pypdfium2-team/pypdfium2, workflow main.yaml).

- [pypdfium2-5.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c3babd87-f6e9-5a92-b53b-f211e26a40ad/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pypdfium2-5.15.1-py3-none-musllinux\_1\_2\_ppc64le.whl

PEP 740 attestation verified (GitHub, pypdfium2-team/pypdfium2, workflow main.yaml).

- [pypdfium2-5.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ff0e54fd-9a5f-5c7c-b328-7d83d6a1b83c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pypdfium2-5.15.1-py3-none-musllinux\_1\_2\_riscv64.whl

PEP 740 attestation verified (GitHub, pypdfium2-team/pypdfium2, workflow main.yaml).

- [pypdfium2-5.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/da03b781-569e-5b2f-be9b-860569762423/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pypdfium2-5.15.1-py3-none-musllinux\_1\_2\_s390x.whl

PEP 740 attestation verified (GitHub, pypdfium2-team/pypdfium2, workflow main.yaml).

- [pypdfium2-5.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/07293e29-71dc-588c-bf22-8eef9d613860/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pypdfium2-5.15.1-py3-none-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, pypdfium2-team/pypdfium2, workflow main.yaml).

- [pypdfium2-5.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fa961d7b-039b-5870-9a80-cc403488eacf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pypdfium2@5.15.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pypdfium2/5.15.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pypdfium2/5.15.1