# SBOM for smurff 1.1

> Bayesian Factorization Methods

The Python package smurff 1.1 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/smurff@1.1`
- PyPI: https://pypi.org/project/smurff/1.1/
- License: MIT
- Homepage: <http://github.com/ExaScience/smurff>

## SBOMs

### smurff-1.1-cp310-cp310-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

- [smurff-1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/32338786-f0e6-5cb5-9cca-1dc06f4df125/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### smurff-1.1-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [smurff-1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fa74a77c-ed41-5573-9a82-2f87a4f66a5e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### smurff-1.1-cp311-cp311-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

- [smurff-1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5ed6a248-67f7-533f-881d-e37d48960fc4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### smurff-1.1-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [smurff-1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bcad9209-8b3d-5295-b946-217e2fcf78d4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### smurff-1.1-cp312-cp312-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

- [smurff-1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1fb1c7b1-436f-59a1-9a47-8b2111d09eb6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### smurff-1.1-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [smurff-1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b3ab21af-8f63-5daf-9e03-fd2d47bf505f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### smurff-1.1-cp313-cp313-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

- [smurff-1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d03e9929-84a4-5d3d-a2fb-4a5904573076/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### smurff-1.1-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [smurff-1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3bb480df-5868-5f9a-9573-788b46ef6f0e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### smurff-1.1-cp314-cp314-manylinux\_2\_27\_aarch64.manylinux\_2\_28\_aarch64.whl

- [smurff-1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/734b223d-44f2-5061-b28a-ae4e567ef367/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### smurff-1.1-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

- [smurff-1.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6160ec62-11cd-54d4-b240-4bb94cf32438/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/smurff@1.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/smurff/1.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/smurff/1.1