# SBOM for sortedl1 1.9.0 > Sorted L-One Penalized Estimation The Python package sortedl1 1.9.0 ships 24 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/sortedl1@1.9.0` - PyPI: https://pypi.org/project/sortedl1/1.9.0/ - Author: Quentin Klopfenstein, Malgorzata Bogdan - License: GNU General Public License ========================== \_Version 3, 29 June 2007\_ \_Copyright © 2007 Free Software Foundation, Inc. <\>\_ Everyone is permitted to copy and distribut… - Requires Python: \>=3.10 - changelog: - documentation: - homepage: - tracker: ## SBOMs ### sortedl1-1.9.0-cp310-cp310-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bd003c22-7646-5598-a735-db1b3c935797/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp310-cp310-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f78ec41d-f51b-55c3-a885-d66b52ae33ce/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f7063054-2758-5008-9262-dded5dbd911a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7f0f1a23-7a5d-5e00-8ed1-c72193ac2539/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp311-cp311-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e2e7e49b-690d-51a4-b2d6-5efeabfbbeb6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp311-cp311-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/21459367-e949-542c-bcf6-ea5653893e22/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9e358636-7128-5888-bda1-7dc48345ce6c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5881f807-8f97-56e7-8383-60027510da2d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp312-cp312-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/95ec74e4-a650-5e18-968b-e583a5118d9d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp312-cp312-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/62f8e6d2-06f7-53db-a413-ea9934219905/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fccbd765-3000-50cb-baef-3e049f5430ea/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/885b4a37-f8aa-5c56-9d0f-7b4cf9c5c35e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp313-cp313-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c8accbfc-cae1-5a32-a817-e611a48363fe/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp313-cp313-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c18d0cd0-29de-5202-8d00-21e65b641d21/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/075932f2-4254-5aaa-bb46-8a63d227c2cd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cc365895-7a2a-5658-8854-564c64dcf781/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp314-cp314-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7635fc11-c04b-51c0-b657-9fd157df519d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp314-cp314-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8ee81da4-adbd-5b10-bdcc-7d2c8f8d54e1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/63868597-ed66-54c7-b2ce-6e309204b04e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bbae1d29-c4be-5446-b7f6-f6c60e018002/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp314-cp314t-manylinux\_2\_24\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/59d649e6-a561-53fd-a221-ff4c110fb09e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp314-cp314t-manylinux\_2\_24\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2a8b34dd-f42b-5bb1-9057-c0adf501568a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/abaf7184-fe19-52e6-875c-5874133a9669/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### sortedl1-1.9.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, jolars/sortedl1, workflow pypi.yml). - [sortedl1-1.9.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7e95e7f4-add2-59a8-af98-3fe417a0cfaf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/sortedl1@1.9.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/sortedl1/1.9.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/sortedl1/1.9.0