# SBOM for qoi 0.8.0

> A simple, fast wrapper around qoi (https://qoiformat.org), the 'Quite OK Image' format

The Python package qoi 0.8.0 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/qoi@0.8.0`
- PyPI: https://pypi.org/project/qoi/0.8.0/
- License: MIT
- Requires Python: \>=3.11
- Bug Tracker: <https://github.com/kodonnell/qoi/issues>
- Homepage: <https://github.com/kodonnell/qoi>

## SBOMs

### qoi-0.8.0-cp311-abi3-macosx\_10\_12\_x86\_64.whl

- [qoi-0.8.0.dist-info/sboms/qoi-python.cyclonedx.json](https://pypi.sbomify.com/artifact/8f718462-5c44-59a0-917a-d15d77a9bff0/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qoi-0.8.0-cp311-abi3-macosx\_11\_0\_arm64.whl

- [qoi-0.8.0.dist-info/sboms/qoi-python.cyclonedx.json](https://pypi.sbomify.com/artifact/52213ba4-da1d-5edc-a1dd-197a4e4b0045/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qoi-0.8.0-cp311-abi3-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [qoi-0.8.0.dist-info/sboms/qoi-python.cyclonedx.json](https://pypi.sbomify.com/artifact/eff196f0-3d0e-5137-8d5d-89d91eaffd50/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qoi-0.8.0-cp311-abi3-win\_amd64.whl

- [qoi-0.8.0.dist-info/sboms/qoi-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e50cb43d-6b45-59fa-92dc-6908242c05db/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qoi-0.8.0-cp314-cp314t-macosx\_10\_12\_x86\_64.whl

- [qoi-0.8.0.dist-info/sboms/qoi-python.cyclonedx.json](https://pypi.sbomify.com/artifact/e541d3c0-d758-549f-9b63-58c93a2b3ee8/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qoi-0.8.0-cp314-cp314t-macosx\_11\_0\_arm64.whl

- [qoi-0.8.0.dist-info/sboms/qoi-python.cyclonedx.json](https://pypi.sbomify.com/artifact/af35b046-5c89-5c3a-afa6-8e85840e8966/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qoi-0.8.0-cp314-cp314t-manylinux\_2\_17\_x86\_64.manylinux2014\_x86\_64.whl

- [qoi-0.8.0.dist-info/sboms/qoi-python.cyclonedx.json](https://pypi.sbomify.com/artifact/7eff7311-2a0a-5840-bfeb-4d75747b394b/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### qoi-0.8.0-cp314-cp314t-win\_amd64.whl

- [qoi-0.8.0.dist-info/sboms/qoi-python.cyclonedx.json](https://pypi.sbomify.com/artifact/a2649efe-329a-58b7-9553-e63f7250f8dc/download): CycloneDX/1.5, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/qoi@0.8.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/qoi/0.8.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/qoi/0.8.0