# SBOM for ujson 6.1.0

> Ultra fast JSON encoder and decoder for Python

The Python package ujson 6.1.0 ships 24 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/ujson@6.1.0`
- PyPI: https://pypi.org/project/ujson/6.1.0/
- Author: Jonas Tarnstrom
- Requires Python: \>=3.10
- Download: <https://github.com/ultrajson/ultrajson>
- Homepage: <https://github.com/ultrajson/ultrajson>
- Source: <https://github.com/ultrajson/ultrajson>

## SBOMs

### ujson-6.1.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/da39c53c-e9aa-5a66-ba48-60ebbfffd480/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp310-cp310-musllinux\_1\_2\_i686.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1ce15a67-9c50-5035-b7e9-6fed01e43945/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7f7e6cfa-3b0e-5e5e-aa3a-e85e62238823/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9c07f043-ecc1-53cb-87b2-7cbc06ad6b71/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp311-cp311-musllinux\_1\_2\_i686.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d8f1ab40-3994-5b02-8f91-a6ddde836ab7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/532506b4-60fd-5ca0-b82e-0a39b702a8f2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7d797e12-3677-5062-b7b7-802ca434ce1a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp312-cp312-musllinux\_1\_2\_i686.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8edf3c79-3e6c-59d8-870e-9cbbe8ab8038/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ce286912-2b32-5200-8411-aabf76839259/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/022523e9-c01e-56e7-a78a-2ddac0864b2e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp313-cp313-musllinux\_1\_2\_i686.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/868a6bbb-bb33-51f9-8ae7-45a26097c6d2/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/b5012d3b-dadc-584b-baff-2ca1d73478fa/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f086e7fc-0630-5c7f-a514-8abfa9924ac0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp314-cp314-musllinux\_1\_2\_i686.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/20cc16b3-9c8b-52a2-8680-4a76381028dd/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3df362f7-f135-508a-ad91-db44c1ccb48d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp314-cp314t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fcabe130-2b32-51f3-9c4c-0b4ae2dc60ae/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp314-cp314t-musllinux\_1\_2\_i686.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5af2007c-8814-5b0c-a091-b0e9fe73a72a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/e8d3b0e8-e175-5a56-aaf9-17ada09bd52a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp315-cp315-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/abe8c95b-6f4c-5298-8ab4-98e8dac1ec1e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp315-cp315-musllinux\_1\_2\_i686.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/30de79f8-2d48-5538-9cec-a584f8435dc8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8ff261f9-8ffa-5141-a85b-aae329af5601/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp315-cp315t-musllinux\_1\_2\_aarch64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/35ea0c7d-8fd5-58e3-b021-f33599c6c756/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp315-cp315t-musllinux\_1\_2\_i686.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/5dc50ec2-d153-59b6-a7f3-83a648993140/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### ujson-6.1.0-cp315-cp315t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, ultrajson/ultrajson, workflow deploy.yml).

- [ujson-6.1.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/233d47c2-58b6-5bd7-89c3-ac2c1c523be0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/ujson@6.1.0
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/ujson/6.1.0.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/ujson/6.1.0