# SBOM for scanlib 1.3.2

> A multiplatform document scanning library for Python

The Python package scanlib 1.3.2 ships 4 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/scanlib@1.3.2`
- PyPI: https://pypi.org/project/scanlib/1.3.2/
- License: MIT
- Requires Python: \>=3.9
- Changelog: <https://github.com/amottola/scanlib/blob/main/CHANGELOG.md>
- Documentation: <https://python-scanlib.readthedocs.io/>
- Homepage: <https://github.com/amottola/scanlib>
- Issues: <https://github.com/amottola/scanlib/issues>
- Repository: <https://github.com/amottola/scanlib>

## SBOMs

### scanlib-1.3.2-cp314-cp314t-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, amottola/scanlib, workflow wheels.yml).

- [scanlib-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d349a9a5-5d48-5e14-a932-5554c09a7523/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### scanlib-1.3.2-cp314-cp314t-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, amottola/scanlib, workflow wheels.yml).

- [scanlib-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7a22ce3d-0810-5a97-a033-93b6308bb838/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### scanlib-1.3.2-cp39-abi3-manylinux2014\_aarch64.manylinux\_2\_17\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, amottola/scanlib, workflow wheels.yml).

- [scanlib-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e51654cc-dc6c-5637-b77d-e4a28c6eb1ec/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### scanlib-1.3.2-cp39-abi3-manylinux2014\_x86\_64.manylinux\_2\_17\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, amottola/scanlib, workflow wheels.yml).

- [scanlib-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0a40375f-3b68-5cad-b65f-b7f8ed392d26/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/scanlib@1.3.2
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/scanlib/1.3.2.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/scanlib/1.3.2