# SBOM for rawpy 0.28.0 > RAW image processing for Python, a wrapper for libraw The Python package rawpy 0.28.0 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/rawpy@0.28.0` - PyPI: https://pypi.org/project/rawpy/0.28.0/ - Author: Maik Riechert - Requires Python: \>=3.11 - Changelog: - Documentation: - Homepage: - Issues: - Repository: ## SBOMs ### rawpy-0.28.0-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml). - [rawpy-0.28.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fda30fea-8c46-520c-a4e6-8583c022caf8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rawpy-0.28.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml). - [rawpy-0.28.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/838b60e1-c824-574f-908a-d8de62c46e2d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rawpy-0.28.0-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml). - [rawpy-0.28.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f5cd6444-3144-5739-87d1-24e37346a150/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rawpy-0.28.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml). - [rawpy-0.28.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c64a39af-9d30-5c3d-b19a-405654adab6a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rawpy-0.28.0-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml). - [rawpy-0.28.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/35126b6d-227b-534e-836c-25a3235810ee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rawpy-0.28.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml). - [rawpy-0.28.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/390eb00f-0bf3-57d0-ae36-827b7fae7b38/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rawpy-0.28.0-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml). - [rawpy-0.28.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c1b90e17-ab10-5490-a06f-8f9c3335aced/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rawpy-0.28.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml). - [rawpy-0.28.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/17ec27d5-5e39-5577-b57f-7037b3a89c53/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rawpy-0.28.0-cp315-cp315-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml). - [rawpy-0.28.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/81c21a4e-e76b-5128-83d6-ec1f73807e32/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### rawpy-0.28.0-cp315-cp315-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, letmaik/rawpy, workflow ci.yml). - [rawpy-0.28.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5f8373e0-7661-5d12-afb8-e40c14360144/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/rawpy@0.28.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/rawpy/0.28.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/rawpy/0.28.0