# SBOM for torchfits 1.3.2

> FITS I/O for PyTorch with native tensor reads, datasets, and transforms

The Python package torchfits 1.3.2 ships 10 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/torchfits@1.3.2`
- PyPI: https://pypi.org/project/torchfits/1.3.2/
- Requires Python: \>=3.11
- Documentation: <https://astroai.github.io/torchfits/>
- Homepage: <https://github.com/astroai/torchfits>
- Repository: <https://github.com/astroai/torchfits>

## SBOMs

### torchfits-1.3.2-cp311-cp311-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, astroai/torchfits, workflow build\_wheels.yml).

- [torchfits-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8e98245c-a246-5a2a-b71d-8e1d74852068/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### torchfits-1.3.2-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, astroai/torchfits, workflow build\_wheels.yml).

- [torchfits-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b12dff6c-22be-579a-808d-0d9b9c2bf2c1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### torchfits-1.3.2-cp312-cp312-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, astroai/torchfits, workflow build\_wheels.yml).

- [torchfits-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f0e4f6f7-de26-592c-bb89-46ff2fca1549/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### torchfits-1.3.2-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, astroai/torchfits, workflow build\_wheels.yml).

- [torchfits-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cac49413-47c1-506b-b4e8-be865812b620/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### torchfits-1.3.2-cp313-cp313-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, astroai/torchfits, workflow build\_wheels.yml).

- [torchfits-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f5f0679d-7588-5c6b-982a-6602ea3a2170/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### torchfits-1.3.2-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, astroai/torchfits, workflow build\_wheels.yml).

- [torchfits-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ec88bac7-76aa-5669-8271-7ec85d54db73/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### torchfits-1.3.2-cp314-cp314-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, astroai/torchfits, workflow build\_wheels.yml).

- [torchfits-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b14ca108-8879-5c71-a41c-667c2a146250/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### torchfits-1.3.2-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, astroai/torchfits, workflow build\_wheels.yml).

- [torchfits-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/239a588f-787f-554f-b309-ace6d9850d13/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### torchfits-1.3.2-cp315-cp315-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl

PEP 740 attestation verified (GitHub, astroai/torchfits, workflow build\_wheels.yml).

- [torchfits-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/659886e6-07bd-5e30-b817-b9b352aa3843/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### torchfits-1.3.2-cp315-cp315-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl

PEP 740 attestation verified (GitHub, astroai/torchfits, workflow build\_wheels.yml).

- [torchfits-1.3.2.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bea80dd5-bec4-55c6-87e7-8e72f9b4ee3a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/torchfits@1.3.2
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/torchfits/1.3.2.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/torchfits/1.3.2