# SBOM for shapiq 1.8.0

> Shapley Interactions for Machine Learning

The Python package shapiq 1.8.0 ships 4 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/shapiq@1.8.0`
- PyPI: https://pypi.org/project/shapiq/1.8.0/
- Requires Python: \>=3.12
- changelog: <https://github.com/mmschlk/shapiq/blob/main/CHANGELOG.md>
- documentation: <https://shapiq.readthedocs.io>
- source: <https://github.com/mmschlk/shapiq>
- tracker: <https://github.com/mmschlk/shapiq/issues>

## SBOMs

### shapiq-1.8.0-cp312-cp312-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, mmschlk/shapiq, workflow python-publish.yml).

- [shapiq-1.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e909b599-9dfa-5a46-9a70-1313bbe206bc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### shapiq-1.8.0-cp313-cp313-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, mmschlk/shapiq, workflow python-publish.yml).

- [shapiq-1.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b6048dde-9bfd-50c4-b4ea-357e77ecc773/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### shapiq-1.8.0-cp314-cp314-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, mmschlk/shapiq, workflow python-publish.yml).

- [shapiq-1.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/976cd163-6aef-5790-9bb8-49ed6308c642/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### shapiq-1.8.0-cp315-cp315-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, mmschlk/shapiq, workflow python-publish.yml).

- [shapiq-1.8.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/574bfc72-5499-554a-a97e-e7ddd1069683/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/shapiq@1.8.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/shapiq/1.8.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/shapiq/1.8.0