# SBOM for small-gicp 1.0.1

> Efficient and parallelized algorithms for fine point cloud registration

The Python package small-gicp 1.0.1 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/small-gicp@1.0.1`
- PyPI: https://pypi.org/project/small-gicp/1.0.1/
- License: MIT
- Requires Python: \>=3.7
- Homepage: <https://github.com/koide3/small_gicp>

## SBOMs

### small\_gicp-1.0.1-cp310-cp310-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, koide3/small\_gicp, workflow wheels.yml).

- [small\_gicp-1.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3be756d4-7268-5d4f-8853-5b74d57823da/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### small\_gicp-1.0.1-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, koide3/small\_gicp, workflow wheels.yml).

- [small\_gicp-1.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/48862ba5-fdb8-50ab-8e78-cd433e716212/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### small\_gicp-1.0.1-cp311-cp311-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, koide3/small\_gicp, workflow wheels.yml).

- [small\_gicp-1.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6918fa98-7dcd-5e66-b26a-79c3a036fb0e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### small\_gicp-1.0.1-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, koide3/small\_gicp, workflow wheels.yml).

- [small\_gicp-1.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2e2bea69-f9b8-5bde-bdbd-9401f4df6e61/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### small\_gicp-1.0.1-cp312-cp312-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, koide3/small\_gicp, workflow wheels.yml).

- [small\_gicp-1.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/72b3ca58-096b-5d08-a368-eb7b2ceae290/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### small\_gicp-1.0.1-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, koide3/small\_gicp, workflow wheels.yml).

- [small\_gicp-1.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/75f553e9-53e8-5d5e-bab0-d2c9da2620b5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### small\_gicp-1.0.1-cp313-cp313-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, koide3/small\_gicp, workflow wheels.yml).

- [small\_gicp-1.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5b4aff53-87e2-53da-96af-4c7e199c6d48/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### small\_gicp-1.0.1-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, koide3/small\_gicp, workflow wheels.yml).

- [small\_gicp-1.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3073036c-d113-5c86-8e26-811588b21c3e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### small\_gicp-1.0.1-cp314-cp314-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, koide3/small\_gicp, workflow wheels.yml).

- [small\_gicp-1.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/09a9e9ce-fa41-5bfa-9da3-f2f36840b1c9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### small\_gicp-1.0.1-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, koide3/small\_gicp, workflow wheels.yml).

- [small\_gicp-1.0.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a0cefbd7-af90-59c3-ac1f-65f50e9b9cbd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/small-gicp@1.0.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/small-gicp/1.0.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/small-gicp/1.0.1