# SBOM for tradeflow 1.2.0 > A package to simulate autocorrelated time series of signs The Python package tradeflow 1.2.0 ships 20 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/tradeflow@1.2.0` - PyPI: https://pypi.org/project/tradeflow/1.2.0/ - Requires Python: \<3.13,\>=3.8 - Homepage: ## SBOMs ### tradeflow-1.2.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/745ad187-741a-55b9-8cc9-1495e31719b5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp310-cp310-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8556d7ab-6924-5921-8763-cac1da161831/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp310-cp310-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f9da1ecc-e072-5434-a953-14125ed7c82d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/19846357-a2a4-55dd-be4d-2cac32c77dc3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e4aeb55d-92f9-56ce-beb9-c5cb1920adbf/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp311-cp311-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1efda2af-4977-5081-9ffc-519eb357ed98/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp311-cp311-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/556eb70e-35a6-5d32-9abe-76da153d37b8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8ee8cb84-6bc5-574b-8f86-25d1a04ab8f1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ddd53cbc-19fd-582b-bb81-0fc0e7d8e55e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp312-cp312-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a1ab7a4a-af03-59ff-9c2c-97b3ad41bc63/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp312-cp312-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b2072d26-4145-56be-afae-f83887bf25b3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9bf39d3a-e08b-57f0-a790-1d02bd733530/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp38-cp38-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3b0a5917-231d-593a-aeb8-cd9362fd8166/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp38-cp38-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/78eb26ae-cd5f-5fb3-bfa4-73b0dc280f3d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp38-cp38-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c4d61a77-c88f-5b0a-abd3-ba851e96f450/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp38-cp38-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9143008b-8278-57ca-8e05-19d6f6f7b876/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp39-cp39-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9beaf0a3-6fde-5b97-8eb9-a033bf68a382/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp39-cp39-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6188fd46-afad-517e-9019-9c12a131cc10/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp39-cp39-musllinux\_1\_2\_i686.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/331c3f00-7d4e-541e-b39b-82e58337ca10/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### tradeflow-1.2.0-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, MartinGangand/tradeflow, workflow python-publish-to-pypi.yml). - [tradeflow-1.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2741a1ab-abc2-5b04-a503-71de4fda337d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/tradeflow@1.2.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/tradeflow/1.2.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/tradeflow/1.2.0