# SBOM for qif 1.6.0

> Quantitative Information Flow library

The Python package qif 1.6.0 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/qif@1.6.0`
- PyPI: https://pypi.org/project/qif/1.6.0/
- Author: Kostas Chatzikokolakis
- Requires Python: \>=3.11
- Bug Tracker: <https://github.com/chatziko/libqif/issues>
- Documentation: <https://libqif.chatzi.org/>
- Homepage: <https://github.com/chatziko/libqif>
- Source Code: <https://github.com/chatziko/libqif>

## SBOMs

### qif-1.6.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [qif-1.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/455d58d0-7624-5b49-8634-9a196a068592/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qif-1.6.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [qif-1.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8dadce14-f947-51b2-8dd5-2dbcf7dc7906/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qif-1.6.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [qif-1.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c7991ac9-dbc4-5d73-85e4-67ee15f3629f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qif-1.6.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [qif-1.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e13bb95f-ad7d-5183-98f3-eb52b25e3688/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qif-1.6.0-cp315-cp315-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [qif-1.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0fb74614-df56-5e67-a557-c74c829fe78e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/qif@1.6.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/qif/1.6.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/qif/1.6.0