# SBOM for skia-python 144.0.post2 > Skia python binding The Python package skia-python 144.0.post2 ships 16 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/skia-python@144.0.post2` - PyPI: https://pypi.org/project/skia-python/144.0.post2/ - Author: Kota Yamaguchi - Homepage: ## SBOMs ### skia\_python-144.0.post2-cp310-cp310-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/78551893-eaa4-57fd-b2d3-5744e4a77097/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp310-cp310-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/22c8a1a9-2fad-5ee7-8fce-93798255ae5d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp311-cp311-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2a36ee7b-d347-5f1d-81cd-33ee667acc30/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0d86fee6-b2a3-5a74-b545-c3887b1ed70c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp312-cp312-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/18dbfb1c-56ab-50d9-a5c0-4e48d648e5fd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d66a7019-85bb-52a4-85ee-dac144dc5858/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp313-cp313-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/38b71a94-8505-58cb-935b-cb3dc5ce6d15/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dc543196-897a-5064-878c-e90e0e1c7b87/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp314-cp314-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/55012f8b-114a-5961-82f5-b85dec7e9c72/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f63b6da5-c712-5bc0-aabb-199bcacbc151/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp314-cp314t-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a559c5fd-5bcf-5da7-8f85-071dbda08278/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp314-cp314t-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e2cddaf3-91af-595f-86c8-8a3ad49142cf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp38-cp38-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d5574ec1-849b-56e7-aa98-c37f1f07e70f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp38-cp38-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/840b6ba0-db30-5f9a-9b14-777ad08b69a2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp39-cp39-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/aa0701db-59a6-52b0-90d5-e9d8764484be/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.0.post2-cp39-cp39-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, kyamagu/skia-python, workflow ci.yml). - [skia\_python-144.0.post2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e4ba9c40-8a80-5675-9e30-e9d77472cb85/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/skia-python@144.0.post2 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/skia-python/144.0.post2.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/skia-python/144.0.post2