# SBOM for vttcompilepy 0.0.1.13

> Python extension for Visual TrueType font compile.

The Python package vttcompilepy 0.0.1.13 ships 8 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). Its wheels carry a verified PEP 740 attestation.

- Package URL (PURL): `pkg:pypi/vttcompilepy@0.0.1.13`
- PyPI: https://pypi.org/project/vttcompilepy/0.0.1.13/
- Author: Paul Linnerud
- License: MIT
- Requires Python: \>=3.7
- Homepage: <https://github.com/microsoft/VisualTrueType>

## SBOMs

### vttcompilepy-0.0.1.13-cp310-cp310-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, microsoft/VisualTrueType, workflow py\_ext\_main.yml).

- [vttcompilepy-0.0.1.13.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/cf0ec237-cf6c-5769-824f-25917df758a8/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### vttcompilepy-0.0.1.13-cp311-cp311-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, microsoft/VisualTrueType, workflow py\_ext\_main.yml).

- [vttcompilepy-0.0.1.13.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a516edfd-88b6-5864-987e-353e0c3e684b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### vttcompilepy-0.0.1.13-cp312-cp312-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, microsoft/VisualTrueType, workflow py\_ext\_main.yml).

- [vttcompilepy-0.0.1.13.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/7e3fe136-a193-5d09-9f8a-0af6266bbd8f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### vttcompilepy-0.0.1.13-cp313-cp313-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, microsoft/VisualTrueType, workflow py\_ext\_main.yml).

- [vttcompilepy-0.0.1.13.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/f5cafea0-010f-5f29-82bd-030836057778/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### vttcompilepy-0.0.1.13-cp314-cp314-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, microsoft/VisualTrueType, workflow py\_ext\_main.yml).

- [vttcompilepy-0.0.1.13.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/01b14af9-2ab8-5228-9103-50865e997802/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### vttcompilepy-0.0.1.13-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, microsoft/VisualTrueType, workflow py\_ext\_main.yml).

- [vttcompilepy-0.0.1.13.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/1c8b5711-fa65-5279-bb70-c08470ce79f9/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### vttcompilepy-0.0.1.13-cp38-cp38-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, microsoft/VisualTrueType, workflow py\_ext\_main.yml).

- [vttcompilepy-0.0.1.13.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/93fcc66f-4143-5869-b365-a4c496139d32/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

### vttcompilepy-0.0.1.13-cp39-cp39-musllinux\_1\_2\_x86\_64.whl

PEP 740 attestation verified (GitHub, microsoft/VisualTrueType, workflow py\_ext\_main.yml).

- [vttcompilepy-0.0.1.13.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/198f3c4d-7c34-5aad-ae9d-dadf1f896002/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities

## Known vulnerabilities

Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10.

OSV has no known vulnerabilities for the components these SBOMs list.

## Fetch it over TEA

This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client:

```
pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/vttcompilepy@0.0.1.13
```

Machine-readable copy of this page: https://pypi.sbomify.com/package/vttcompilepy/0.0.1.13.json

---
From pypi-tea by sbomify: https://pypi.sbomify.com/package/vttcompilepy/0.0.1.13