# SBOM for skia-python 144.1 > Skia python binding The Python package skia-python 144.1 ships 18 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/skia-python@144.1` - PyPI: https://pypi.org/project/skia-python/144.1/ - Author: Kota Yamaguchi, Hin-Tak Leung - Homepage: ## SBOMs ### skia\_python-144.1-cp310-cp310-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/726dccd8-4f56-5f01-83d4-8e0e48bfe720/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp310-cp310-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fd61ecae-6a87-5c9d-875a-e220954fc69b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp311-cp311-manylinux\_2\_28\_aarch64.whl PEP 740 attestation failed verification: Failed to refresh TUF metadata. - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce52e137-cbcd-5ff4-ad85-3631df53cdd6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp311-cp311-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/07384ead-1ca2-5a61-935a-3bb7456dc1ef/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp312-cp312-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/618e3296-8c1b-5d9d-a968-5cf8a5f596ea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp312-cp312-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e9d2e704-8d8e-5ef4-b108-8f5df0d625c6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp313-cp313-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f53f22d1-91ef-5a65-adfb-2e244ef855c7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp313-cp313-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d26a7fb1-e623-5fe8-88eb-118cf528f872/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp314-cp314-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/16bf17d4-d37a-5169-badf-2b7306df7b16/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp314-cp314-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2f5f5cfc-c03e-5526-8c3e-18fed60ac371/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp314-cp314t-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b7c18f8b-e149-53d8-91a8-5c5a908b08aa/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp314-cp314t-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b9f1c66c-6956-5c34-a0c7-383ea44af364/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp315-cp315-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cb68df30-c02d-5c93-8612-292165d3eb84/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp315-cp315-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d33a4a3c-bcb4-5e4e-8b28-613dec0bdf2e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp315-cp315t-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/878524c5-08ac-5205-8f1a-61cad94f2059/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp315-cp315t-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dd87b6f0-3547-51b8-82b6-d6d4ce0f7fee/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp39-cp39-manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/19c5aabc-83a1-58b2-861d-6d89d09fa8a9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### skia\_python-144.1-cp39-cp39-manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, skia-python/skia-python, workflow ci.yml). - [skia\_python-144.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/53c73bb7-b4e9-55da-bdf9-9a6a2ffcee0a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/skia-python@144.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/skia-python/144.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/skia-python/144.1