# SBOM for pyvpmr 260927

> The VPMR Algorithm

The Python package pyvpmr 260927 ships 28 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/pyvpmr@260927`
- PyPI: https://pypi.org/project/pyvpmr/260927/
- Requires Python: \>=3.11
- Bug Reports: <https://github.com/TLCFEM/vpmr/issuess>
- Homepage: <https://github.com/TLCFEM/vpmr>
- Source: <https://github.com/TLCFEM/vpmr>

## SBOMs

### pyvpmr-260927-cp311-cp311-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6daccaea-bc82-5c01-a54e-1dd37ad6d250/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/63659342-4576-512f-b63b-87db7d2cb4e7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2ec1f412-3c76-5db0-8bfc-a5008c1f0cce/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1c5f1348-1333-5398-a16b-259b78991c6d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp312-cp312-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation failed verification: Failed to refresh TUF metadata.

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/51424be6-3c50-5b5f-9097-e69803b98947/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9db00dba-82ea-552b-9ff8-941c71331655/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/aacc65b8-a9ae-5fb3-8c88-50f3e36b9b0a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9633cd51-11da-5147-b711-349b2448c4af/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp313-cp313-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5bf76edd-cce5-5008-b035-5aa7470066ea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bd7277dc-78bb-5989-bcab-592be663d1c8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e15a84d3-2c5d-5955-86be-29550e00fb57/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/171e0e76-3328-523c-a455-2e294b4a355d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp314-cp314-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f07fa6f4-0674-5a38-a5f0-fc88a31b77ff/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8291283d-def7-5cea-8780-c70415a03d5c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c072a008-1bcf-57dc-ba96-a88dcf895e86/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/46e4b18b-7b1e-55c5-a0fd-d8a0e942e4ee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp314-cp314t-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5901a340-513e-5de6-b371-4f24ecfcd9cf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp314-cp314t-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b807c156-0360-54fa-9320-4b8251405cc1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b4a0129f-f616-5c3e-a6ae-25d110797596/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a4e47eca-074e-565a-8551-9ab277b0778c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp315-cp315-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/86d2a1d1-0f0c-5a47-b1a9-678274a567c6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp315-cp315-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7e0d87fe-83ee-589e-b16d-6edf63034952/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp315-cp315-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2f4fc82c-f269-5ffd-ab2d-52347f233858/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/182a6271-ead0-5210-a8d9-97e807beb8b9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp315-cp315t-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c10cdf56-fd71-5770-9182-e76f3609fbe4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp315-cp315t-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f9932dbc-a33c-52b0-946d-6d520108fa60/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp315-cp315t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5d76bd57-3b0d-5237-aa76-01ccd107fb2c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### pyvpmr-260927-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, TLCFEM/vpmr, workflow wheels.yml).

- [pyvpmr-260927.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/72cef94d-7d33-5143-ad3d-7d0e659ba6d2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/pyvpmr@260927
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/pyvpmr/260927.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/pyvpmr/260927