# SBOM for sailpy 1.3.1

The Python package sailpy 1.3.1 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/sailpy@1.3.1`
- PyPI: https://pypi.org/project/sailpy/1.3.1/

## SBOMs

### sailpy-1.3.1-cp310-cp310-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, HappySeaFox/sail, workflow build-python-wheels.yml).

- [sailpy-1.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/083ba5e5-985e-5158-992e-21fa6ff1593f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### sailpy-1.3.1-cp311-cp311-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, HappySeaFox/sail, workflow build-python-wheels.yml).

- [sailpy-1.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2b0bd069-e3fa-5dcf-b573-b0fdef50d95d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### sailpy-1.3.1-cp312-cp312-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, HappySeaFox/sail, workflow build-python-wheels.yml).

- [sailpy-1.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e715b74d-57e0-57b9-9e52-780e737b997b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### sailpy-1.3.1-cp313-cp313-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, HappySeaFox/sail, workflow build-python-wheels.yml).

- [sailpy-1.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a4a89850-82a5-50db-8610-ed0e57c1f67e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### sailpy-1.3.1-cp314-cp314-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, HappySeaFox/sail, workflow build-python-wheels.yml).

- [sailpy-1.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3b8e8ce2-60cd-51da-98ba-b8f83a59ec09/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

### sailpy-1.3.1-cp315-cp315-manylinux\_2\_39\_x86\_64.whl

PEP 740 attestation verified (GitHub, HappySeaFox/sail, workflow build-python-wheels.yml).

- [sailpy-1.3.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ec4b56b0-ecaf-5055-b2ae-55f26e50a9b5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, 1 known vulnerability

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

| Vulnerability | Severity | Component | Fixed in | Summary |
|---|---|---|---|---|
| [CVE-2026-11979](https://insights.sbomify.com/CVE-2026-11979/) | high (7.8) | libxml2 2.9.14+dfsg-1.3ubuntu3.10 (Ubuntu) | none listed |  |

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/sailpy@1.3.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/sailpy/1.3.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/sailpy/1.3.1