# SBOM for qualpal 1.1.0 > Automatically generate qualitative color palettes with distinct colors The Python package qualpal 1.1.0 ships 30 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/qualpal@1.1.0` - PyPI: https://pypi.org/project/qualpal/1.1.0/ - Requires Python: \>=3.9 - changelog: - documentation: - homepage: - repository: - tracker: ## SBOMs ### qualpal-1.1.0-cp310-cp310-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2eb22386-b484-5429-bddf-e91c549d1cf5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp310-cp310-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/21ffd4a1-dec3-50b5-8538-cc412fb0fb63/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d5e4bc9b-2bdb-580d-83c6-f44fc3783973/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/508a3067-0851-53e1-90ba-8992b5752908/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp311-cp311-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/77c8918e-18cf-5214-a926-ba0623660277/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp311-cp311-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ab9d8741-9ebb-5ad0-b007-9ac7472f8507/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/70347bb7-40fb-597a-9567-061eaa3404b4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/97e8f71e-9acc-54bd-b8f8-196667c99d3d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp312-cp312-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9ef861e6-c716-5187-ae53-bf24f0a314d4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp312-cp312-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/faf8f2a7-da97-523f-888e-50d833ce98bd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/aadcc234-e9a6-5c30-82f7-e2f1e7d928e4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/850b737e-a9f8-5be4-a9be-20923d233b53/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp313-cp313-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fedbaf8d-7dd8-5625-8f83-68d053ade4a8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp313-cp313-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1f1c077f-883b-5f1d-aafb-78ea7b3b37be/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/50818688-2213-53e0-a330-78d09267655f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5e97b1a7-f551-5597-b7be-eebb97860211/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp314-cp314-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0cb0d8c0-f8a5-5864-a2bd-63412e4339ce/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp314-cp314-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/345c13c7-3047-518c-8665-9994ed7fd050/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/99998438-4ea4-515f-9492-4aa3e25b6fc4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b15321b3-291e-5275-8cd4-0cc739d392a9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp314-cp314t-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d0f14f29-745a-5c4a-b713-e76102269ed1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp314-cp314t-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/90ab155a-22fd-56de-af66-17b7160c5f6e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a9567fa9-c58d-5f47-ad57-b5a1d86fe514/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/99905cfa-0615-56de-b90d-38a6dd798ed6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp39-cp39-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/02835207-3987-52e5-9176-5ce9cca3b686/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp39-cp39-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/14ecf386-f4c2-5108-a4b9-8c157c79614c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp39-cp39-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/607ec5ae-a4cf-5d2a-89bd-e5fee5fe7c7c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ccee25a7-4c2d-52cc-9c40-234457a52cb2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-pp311-pypy311\_pp73-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/667ed271-8f90-5e44-b899-0b151b07e7f6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### qualpal-1.1.0-pp311-pypy311\_pp73-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/qualpal-py, workflow pypi.yml). - [qualpal-1.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fe6d5642-5795-52d6-a76f-a51b5404b9ee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/qualpal@1.1.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/qualpal/1.1.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/qualpal/1.1.0