# SBOM for smt 2.15.1 > The Surrogate Modeling Toolbox (SMT) The Python package smt 2.15.1 ships 5 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/smt@2.15.1` - PyPI: https://pypi.org/project/smt/2.15.1/ - Requires Python: \>=3.10 - Download: - Homepage: ## SBOMs ### smt-2.15.1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, SMTorg/smt, workflow build\_release.yml). - [smt-2.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9b2c3d3c-95b1-50da-89ba-69a898a2745f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### smt-2.15.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, SMTorg/smt, workflow build\_release.yml). - [smt-2.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/23cdde57-5a65-56b7-88d8-860ea6f6f4b2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### smt-2.15.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, SMTorg/smt, workflow build\_release.yml). - [smt-2.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/07eaaf01-8096-50d2-b285-8752db7d5351/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### smt-2.15.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, SMTorg/smt, workflow build\_release.yml). - [smt-2.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8a4da1b6-827a-5f12-900a-803ac4d1fe01/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### smt-2.15.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, SMTorg/smt, workflow build\_release.yml). - [smt-2.15.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9ff69785-22cb-5dee-80e9-cdc6d62dda5f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/smt@2.15.1 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/smt/2.15.1.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/smt/2.15.1