# SBOM for ship-framework 0.1.5

> Center-based hierarchical clustering framework using 3 steps: compute a Similarity, build an Hierarchy, and lastly extract a clustering using a Partitioning method.

The Python package ship-framework 0.1.5 ships 7 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/ship-framework@0.1.5`
- PyPI: https://pypi.org/project/ship-framework/0.1.5/
- Author: Pascal Weber
- License: BSD-3-Clause License
- Requires Python: \>=3.9
- Documentation: <https://SHiP-framework.readthedocs.io/en/>
- Homepage: <https://github.com/pasiweber/SHiP-framework>
- Issues: <https://github.com/pasiweber/SHiP-framework/issues>
- Repository: <https://github.com/pasiweber/SHiP-framework>

## SBOMs

### ship\_framework-0.1.5-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, pasiweber/SHiP-framework, workflow publish\_to\_pypi.yml).

- [ship\_framework-0.1.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/137ca80b-0896-5e25-a263-bba40eab32b8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ship\_framework-0.1.5-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, pasiweber/SHiP-framework, workflow publish\_to\_pypi.yml).

- [ship\_framework-0.1.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e48bc7e0-623c-544f-b677-be5e06fa9ed6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ship\_framework-0.1.5-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, pasiweber/SHiP-framework, workflow publish\_to\_pypi.yml).

- [ship\_framework-0.1.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8e7d81f5-e0ed-5cc7-8163-5b0f5f2373d4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ship\_framework-0.1.5-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, pasiweber/SHiP-framework, workflow publish\_to\_pypi.yml).

- [ship\_framework-0.1.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a76effe3-db60-5ea0-b1aa-e892d00ca24e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ship\_framework-0.1.5-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, pasiweber/SHiP-framework, workflow publish\_to\_pypi.yml).

- [ship\_framework-0.1.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e9998b17-46e7-507c-9c71-603e30bf29b5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ship\_framework-0.1.5-cp314-cp314t-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, pasiweber/SHiP-framework, workflow publish\_to\_pypi.yml).

- [ship\_framework-0.1.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c9e511b6-5049-59f5-b106-195fc05af5ca/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ship\_framework-0.1.5-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, pasiweber/SHiP-framework, workflow publish\_to\_pypi.yml).

- [ship\_framework-0.1.5.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/15ebe4d5-968f-5302-9727-c57e52c1c9e9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/ship-framework@0.1.5
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/ship-framework/0.1.5.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/ship-framework/0.1.5