# SBOM for python-libphash 2.0.2.0

> Perceptual image hashing: Python binding for the libphash C library

The Python package python-libphash 2.0.2.0 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/python-libphash@2.0.2.0`
- PyPI: https://pypi.org/project/python-libphash/2.0.2.0/
- Requires Python: \>=3.10
- Changelog: <https://github.com/gudoshnikovn/python-libphash/blob/main/CHANGELOG.md>
- Homepage: <https://github.com/gudoshnikovn/python-libphash>
- Issues: <https://github.com/gudoshnikovn/python-libphash/issues>
- Source: <https://github.com/gudoshnikovn/python-libphash>
- libphash: <https://gudoshnikovn.github.io/libphash/>

## SBOMs

### python\_libphash-2.0.2.0-cp310-abi3-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/51884d99-bd96-5c88-9b87-2d7c0776219c/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp310-abi3-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/6a0df699-2ec3-5ff0-a89f-f84643f2bdd2/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp310-abi3-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/7269c0c2-f7e6-5e6f-9bf0-6a3b671b8645/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp310-abi3-win\_amd64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/4a4e2887-4429-5e28-b274-1d6d69eebf75/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp314-cp314t-macosx\_11\_0\_arm64.whl

PEP 740 attestation failed verification: Failed to refresh TUF metadata.

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/f77510f0-7d3a-5521-b865-8607ca55cafd/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp314-cp314t-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/3bd91911-76b2-5991-b444-8cc39971ac31/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp314-cp314t-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/1881a9cc-f058-5606-889c-82aa9aa791d1/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp314-cp314t-win\_amd64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/4adcafb2-0e14-5612-9a29-6481d3f09ef8/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp315-cp315t-macosx\_11\_0\_arm64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/87aa2620-cb51-5054-a2d5-5291adcded99/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp315-cp315t-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/a0abb5f0-475a-566c-b26d-ae6b5f6bad16/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp315-cp315t-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/4cccfcc3-8b9f-5281-879b-b121272ef8ee/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### python\_libphash-2.0.2.0-cp315-cp315t-win\_amd64.whl

PEP 740 attestation verified (GitHub, gudoshnikovn/python-libphash, workflow release.yml).

- [python\_libphash-2.0.2.0.dist-info/sboms/python-libphash.cdx.json](https://pypi.sbomify.com/artifact/ea018b94-30ee-5332-acc4-046054f0588a/download): CycloneDX/1.6, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/python-libphash@2.0.2.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/python-libphash/2.0.2.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/python-libphash/2.0.2.0