# SBOM for shapely 2.2.0 > Manipulation and analysis of geometric objects The Python package shapely 2.2.0 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/shapely@2.2.0` - PyPI: https://pypi.org/project/shapely/2.2.0/ - Author: Sean Gillies - Requires Python: \>=3.11 - Documentation: - Repository: ## SBOMs ### shapely-2.2.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/888cd014-8a4a-5d68-9ca6-7dc698c0cbd8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/89104a8a-81db-559f-a3c5-2d9c39d49131/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bfef0cc7-3abb-5f8b-a3a4-9941345997ed/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8a98d02b-f488-5c30-9857-c2ddfd6799bc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4ce64cf1-ccd4-5cba-a4a3-41efd4d3595f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4260c449-e3a7-5be5-b94e-32f4912e01fb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/93fbefd4-8d1a-5176-8e4c-725cf39fd162/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2e886b97-2d7e-5482-a379-2f91ff36930a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c27bedc0-f932-53c0-83fd-0f4147b53167/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b58ecf53-cdd8-51bb-8a12-45fd1991e6a6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7c6b56be-8f7d-5325-82e5-b67065cc8158/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3d14a0dd-ad89-55f5-ad81-f50d09d1dcec/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp315-cp315t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3456904a-b87d-5ec4-8c8c-cbfde1ab3d00/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### shapely-2.2.0-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, shapely/shapely, workflow release.yml). - [shapely-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/15a09863-43f8-5c35-8573-8839ace7ccb3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/shapely@2.2.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/shapely/2.2.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/shapely/2.2.0