# SBOM for spacy-transformers 2.0.3

> spaCy pipelines for pre-trained BERT and other transformers

The Python package spacy-transformers 2.0.3 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/spacy-transformers@2.0.3`
- PyPI: https://pypi.org/project/spacy-transformers/2.0.3/
- Author: Explosion
- License: MIT
- Requires Python: \<4.0,\>=3.11
- Homepage: <https://spacy.io>

## SBOMs

### spacy\_transformers-2.0.3-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, explosion/wheelmonger, workflow publish.yml).

- [spacy\_transformers-2.0.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d3fb1319-f6b2-5f4e-9a23-fd5617042a2d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### spacy\_transformers-2.0.3-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, explosion/wheelmonger, workflow publish.yml).

- [spacy\_transformers-2.0.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/09e17f40-6d76-5684-95aa-2bc966829db7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### spacy\_transformers-2.0.3-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, explosion/wheelmonger, workflow publish.yml).

- [spacy\_transformers-2.0.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bed36239-b87e-5fc7-8f1d-02ef1d13db3b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### spacy\_transformers-2.0.3-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, explosion/wheelmonger, workflow publish.yml).

- [spacy\_transformers-2.0.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/30d7eb69-ed9c-59d6-9103-22d84ae29854/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### spacy\_transformers-2.0.3-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, explosion/wheelmonger, workflow publish.yml).

- [spacy\_transformers-2.0.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/06145c7f-d7e4-588d-bbbd-474dadc84f6f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### spacy\_transformers-2.0.3-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, explosion/wheelmonger, workflow publish.yml).

- [spacy\_transformers-2.0.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7a3a322f-b5df-5470-bb55-3beda6fa99f1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### spacy\_transformers-2.0.3-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, explosion/wheelmonger, workflow publish.yml).

- [spacy\_transformers-2.0.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6b08dc7f-2063-5a6d-96fb-5b81add54201/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### spacy\_transformers-2.0.3-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, explosion/wheelmonger, workflow publish.yml).

- [spacy\_transformers-2.0.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/81ca5acc-a2e0-5dfc-9af6-692546399099/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### spacy\_transformers-2.0.3-cp315-cp315-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, explosion/wheelmonger, workflow publish.yml).

- [spacy\_transformers-2.0.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d7248315-3a12-5a3a-a279-43abb27dabc9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### spacy\_transformers-2.0.3-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, explosion/wheelmonger, workflow publish.yml).

- [spacy\_transformers-2.0.3.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/60df1840-76bf-5bea-9911-a0d817138897/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/spacy-transformers@2.0.3
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/spacy-transformers/2.0.3.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/spacy-transformers/2.0.3