# SBOM for ulid-transform 2.2.9 > Create and transform ULIDs The Python package ulid-transform 2.2.9 ships 15 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/ulid-transform@2.2.9` - PyPI: https://pypi.org/project/ulid-transform/2.2.9/ - Author: J. Nick Koston - Requires Python: \>=3.11 - Bug Tracker: - Changelog: - Repository: ## SBOMs ### ulid\_transform-2.2.9-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/628eb446-ead1-55d0-b542-298c83d23fa7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp311-cp311-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/18271e7f-6fa1-5466-8a1a-b6224e6ea04f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bd3905ef-efab-527f-914d-9e184455238c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/505c92d4-5878-5453-9540-168f01ed0537/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp312-cp312-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6f203bad-6ebb-5cd7-804c-4411e67e4e0d/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/bc467834-630c-5178-8fa8-ff09bba592ed/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/344ae1f3-1062-58f9-9a0e-c193ed420e87/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp313-cp313-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/66dc1c1d-451d-55d2-a5e6-2226d52f60b0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/381af293-86b3-506f-ba0f-0d30e4a37bc5/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/828bed04-a1f0-5134-825d-54296323614f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp314-cp314-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c838a50f-4aba-56cd-bbda-45476d7dc24a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation failed verification: Failed to refresh TUF metadata. - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8feb1028-036b-5d48-b7ae-7a2528a7c883/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp314-cp314t-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7262b284-fa58-50a1-a6e5-a209f27f8d3f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp314-cp314t-musllinux\_1\_2\_armv7l.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c6ef2684-3258-569d-b18d-12a85b52c253/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### ulid\_transform-2.2.9-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, Bluetooth-Devices/ulid-transform, workflow ci.yml). - [ulid\_transform-2.2.9.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6460b6a0-4aef-5608-a623-6f35788efd24/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/ulid-transform@2.2.9 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/ulid-transform/2.2.9.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/ulid-transform/2.2.9