# SBOM for swh-shard 2.2.1

> Software Heritage Shard File Format

The Python package swh-shard 2.2.1 ships 6 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)).

- Package URL (PURL): `pkg:pypi/swh-shard@2.2.1`
- PyPI: https://pypi.org/project/swh-shard/2.2.1/
- Requires Python: \>=3.10
- Bug Reports: <https://gitlab.softwareheritage.org/swh/devel/swh-shard/-/issues>
- Documentation: <https://docs.softwareheritage.org/devel/swh-shard/>
- Funding: <https://www.softwareheritage.org/donate>
- Homepage: <https://gitlab.softwareheritage.org/swh/devel/swh-shard>
- Source: <https://gitlab.softwareheritage.org/swh/devel/swh-shard.git>

## SBOMs

### swh\_shard-2.2.1-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

- [swh\_shard-2.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4ba2ed54-ae2c-5dd2-9260-f85653bee2b9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### swh\_shard-2.2.1-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

- [swh\_shard-2.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bdc1e2c9-108a-5716-b1c2-c42032bba371/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### swh\_shard-2.2.1-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

- [swh\_shard-2.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/55f847e5-501c-5c7e-9e49-4f6b7d846a1a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### swh\_shard-2.2.1-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

- [swh\_shard-2.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e20365ee-2ef4-5b9b-8ce0-b0f1ed514f6c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### swh\_shard-2.2.1-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

- [swh\_shard-2.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f34f5dc6-86f9-515b-9fa8-8819f4e1b2c6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### swh\_shard-2.2.1-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

- [swh\_shard-2.2.1.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2157391c-7f1a-5bba-ae70-449490193eae/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/swh-shard@2.2.1
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/swh-shard/2.2.1.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/swh-shard/2.2.1