# SBOM for rawpy 0.26.0

> RAW image processing for Python, a wrapper for libraw

The Python package rawpy 0.26.0 ships 12 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/rawpy@0.26.0`
- PyPI: https://pypi.org/project/rawpy/0.26.0/
- Author: Maik Riechert
- Homepage: <https://github.com/letmaik/rawpy>

## SBOMs

### rawpy-0.26.0-cp310-cp310-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/71b1c030-5a3d-57ae-bdda-01540d0494d6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5769ad5e-4db8-5a77-b24e-2bf0de25a083/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a10d8038-588c-55c5-8efd-cf4e37571366/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/42a7b286-b6c5-540c-a8b6-12241843d156/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/21fc2ce5-b213-5e6f-b30b-d290a816fb5d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/419c1c0c-d7d8-528a-a281-62da4fa446c6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bde3df69-f5a7-569f-9130-a97fd7e3490d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/29568029-e273-5651-a02d-dbf54b340682/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/63976710-85a0-5868-9368-d0aad112e4ff/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/360ef05b-ed18-52ec-ac0a-ab34e8a4026f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp39-cp39-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8f91070e-759f-59f6-af84-38260c614673/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### rawpy-0.26.0-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml).

- [rawpy-0.26.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ba1add5c-0a41-57c4-a23c-c6e1e57efbab/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/rawpy@0.26.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/rawpy/0.26.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/rawpy/0.26.0