# SBOM for vaex-core 4.20.0 > Core of vaex The Python package vaex-core 4.20.0 ships 28 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation. - Package URL (PURL): `pkg:pypi/vaex-core@4.20.0` - PyPI: https://pypi.org/project/vaex-core/4.20.0/ - Author: Maarten A. Breddels - License: MIT - Requires Python: \<3.16,\>=3.9 - Homepage: ## SBOMs ### vaex\_core-4.20.0-cp310-cp310-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/13a326a0-a7f7-53e8-b4e5-4b5d09f18d05/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp310-cp310-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fe747e97-1a99-53fa-8f4f-7538f9a754e6/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp310-cp310-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/eaf454d9-f5fc-5dc8-a4b0-7eb740ff85cc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4a1ad813-15c4-5ebf-bb97-cee1a13ceefb/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp311-cp311-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/87ac79ae-e719-5521-9d00-7a29df3c2fd0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp311-cp311-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/baabcc64-d1a0-515b-9c65-ec472e4b521e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp311-cp311-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/048e8d1d-88c6-5b18-b834-3797d5ec3621/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8e7d4a0b-be5f-52bf-a66f-e7af1babde21/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp312-cp312-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9caa948a-a40f-56f4-aa17-adc497be21ca/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp312-cp312-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c0d5125c-aa07-5b60-a3c7-f97398999d94/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp312-cp312-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c977f909-a517-5cf2-a412-47350a0c4c3e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/47adb4a9-4b1e-5b74-8b98-6556513a8d6a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp313-cp313-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/c45bd65c-ad02-54f6-943f-ea7f63bf2fce/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp313-cp313-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/3b09e50d-b9a2-540d-b989-5f7f3edd5ee8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp313-cp313-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/8fd6fdb7-6d27-5829-b004-81321a03855a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6d5d07e0-e033-5c24-b158-15447ba8d91c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp314-cp314-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/559ffe71-41dc-5b43-a859-ff9aec1b7483/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp314-cp314-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/d1ba3197-9b3d-54b1-97a3-aad38aa7119e/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp314-cp314-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a5da7019-207b-5b43-b50c-200006e1f8fc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/75382083-7882-519c-8afb-d4b5837e5471/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp315-cp315-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/56001ba4-5f04-5b7a-855d-c2dd2cd34bf7/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp315-cp315-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/016ec895-0aac-5afa-b60f-2d293dfa5b38/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp315-cp315-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/9b985976-fb77-5a00-9731-5c39dc4decc1/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp315-cp315-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/528565b3-0c23-5cd0-aaf9-f0c4c053fd61/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp39-cp39-manylinux\_2\_26\_aarch64.manylinux\_2\_28\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/fc52cd74-bc97-5a33-830c-fa27e3c11a2b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp39-cp39-manylinux\_2\_27\_x86\_64.manylinux\_2\_28\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/ea1c525f-3e1c-5d56-ac39-91e1f6c306ba/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp39-cp39-musllinux\_1\_2\_aarch64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f25b8a4b-1f04-5957-a0db-ba350c47717c/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### vaex\_core-4.20.0-cp39-cp39-musllinux\_1\_2\_x86\_64.whl PEP 740 attestation verified (GitHub, vaexio/vaex, workflow wheel.yml). - [vaex\_core-4.20.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/2002e887-d2bd-5abd-b2c4-809fad1b00fc/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/vaex-core@4.20.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/vaex-core/4.20.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/vaex-core/4.20.0