# SBOM for sortedl1 1.11.3

> Sorted L-One Penalized Estimation

The Python package sortedl1 1.11.3 ships 32 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/sortedl1@1.11.3`
- PyPI: https://pypi.org/project/sortedl1/1.11.3/
- Author: Quentin Klopfenstein, Malgorzata Bogdan
- License: GNU General Public License ========================== \_Version 3, 29 June 2007\_ \_Copyright © 2007 Free Software Foundation, Inc. &lt;\<http://fsf.org/\>&gt;\_ Everyone is permitted to copy and distribut…
- Requires Python: \>=3.10
- changelog: <https://github.com/jolars/sortedl1/blob/main/CHANGELOG.md>
- documentation: <https://jolars.github.io/sortedl1/>
- homepage: <https://github.com/jolars/sortedl1>
- tracker: <https://github.com/jolars/sortedl1/issues>

## SBOMs

### sortedl1-1.11.3-cp310-cp310-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/557619b1-b80d-5ca2-8137-9fa83f0f95f1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp310-cp310-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6ddce214-c3ea-54f1-a8b7-084b3430dce5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f6895c93-0bfb-596f-828e-8ea232af0341/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/58295c1b-7dab-5060-8a51-4da9ddce61cd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp311-cp311-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6fbf27e9-10dc-583f-9efd-f7a694df6d32/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp311-cp311-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f5bfd75a-dc5e-50a2-b9a5-5feaee746ba4/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/822bccae-959e-5986-ba88-4dc64560c3fb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4be2b5b7-0922-5ec1-9952-ab1e17653bd2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp312-cp312-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/19da806f-15f0-55d9-8b8c-48b0e80987cf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp312-cp312-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/0e528a1c-d0b8-5e17-a2f8-7144bee62650/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9b881242-ac2d-582c-b618-3c85394bbeb3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/45f25dbb-bb64-5f2f-9a17-cb9dff48956f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp313-cp313-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/60959d63-2153-5c33-b21f-f3b3fd5c66ff/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp313-cp313-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/baf64094-6275-5627-b5d4-a39cdd0dde5d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7859fde6-0d4c-5d18-9911-b5bee22ebcc8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ff2b9564-6258-57ee-bfb1-5212dcbeb70e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp314-cp314-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7cb12d00-c121-51e7-af90-bd1244ec8789/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp314-cp314-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/af380572-673d-5985-9798-a4c43877ee65/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/98f64c14-725b-503a-b867-369c440eb19c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/893367f8-14b8-569c-b4a9-90dd0c4d0a9d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp314-cp314t-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/dac4a10a-8608-5805-b369-a76a2a803563/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp314-cp314t-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/97a51e23-c370-50a7-bc96-23bd709813fd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5014bc32-b6d3-56ab-b0cc-f06578f784b7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fa9f4c29-58b3-56ef-92da-0fb8c3e4d0db/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp315-cp315-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/641f91b0-02fb-56ea-8636-50dc0ecead75/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp315-cp315-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/32094555-82b6-5db0-b947-15834884ba57/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp315-cp315-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/05acb995-0aa5-51cb-90d0-f2286b35fa0d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fe1d5f11-54b4-5c54-ac37-0645a92c406b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp315-cp315t-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e271c697-897b-55f7-b48a-2fa3909c167e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp315-cp315t-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/66ec87ad-9f6a-55d3-8696-9a3e7db54894/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp315-cp315t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/06fd366d-7242-54af-8a8a-b0941ad34e1f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### sortedl1-1.11.3-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml).

- [sortedl1-1.11.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3962eace-d731-59a5-bca2-26af8e6c0797/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/sortedl1@1.11.3
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/sortedl1/1.11.3.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/sortedl1/1.11.3