# SBOM for signalflow 0.6.0

> SignalFlow is a sound synthesis library designed for clear and concise expression of sonic ideas

The Python package signalflow 0.6.0 ships 14 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/signalflow@0.6.0`
- PyPI: https://pypi.org/project/signalflow/0.6.0/
- Author: Daniel Jones
- Requires Python: \>=3.9

## SBOMs

### signalflow-0.6.0-cp310-cp310-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/715037b0-96cb-57d2-aaa3-88f7abf27aaf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/853fbbbe-14c2-55b2-832a-6ce5269ed701/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/116a3042-7a92-52cf-a3ff-b8149d0d4b14/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c326e1a4-2c9f-5b85-80ac-9ce68f2d6be1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ad153403-27ea-5210-86d7-6014c4c5391b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7de378d1-1e9b-5bbe-8efd-fcfbca709eb1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dd2a313d-a1ed-516d-b557-cf5b1a7570aa/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/211328ab-8fe9-5e5b-9d50-8207cd942ad3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3d41be63-da62-5971-a75d-57c2bae4daea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f4c15e05-35ea-5060-a540-aea287ee487c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp315-cp315-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9f3574fc-ef12-5477-b017-08478858545b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp315-cp315-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation failed verification: Failed to refresh TUF metadata.

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b503f961-5629-527f-b241-15d7855b8a7c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp39-cp39-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3495003c-5163-5ffa-99e1-8efa04bbdca1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### signalflow-0.6.0-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, ideoforms/signalflow, workflow wheels.yml).

- [signalflow-0.6.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e13a0262-c445-50c6-b144-c204ad3496a8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/signalflow@0.6.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/signalflow/0.6.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/signalflow/0.6.0