# SBOM for whr 2.2.0 > A Python interface incorporating a C++ implementation of the Whole History Rating algorithm proposed by Rémi Coulom. The implementation is based on the Ruby code of GoShrine. The Python package whr 2.2.0 ships 7 SBOM files (CycloneDX) inside its wheels, under `.dist-info/sboms/` ([PEP 770](https://peps.python.org/pep-0770/)). - Package URL (PURL): `pkg:pypi/whr@2.2.0` - PyPI: https://pypi.org/project/whr/2.2.0/ - Author: Tianyi Hao, Pete Schwamb - License: MIT - Requires Python: \>=3.6 - Download: - Homepage: ## SBOMs ### whr-2.2.0-cp310-cp310-musllinux\_1\_2\_x86\_64.whl - [whr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/4effd751-f2f2-5d49-b675-8a52eca62b6b/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### whr-2.2.0-cp311-cp311-musllinux\_1\_2\_x86\_64.whl - [whr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/6b406518-a572-5598-8b6c-0032bdb346f0/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### whr-2.2.0-cp312-cp312-musllinux\_1\_2\_x86\_64.whl - [whr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a88affe3-dd75-55d0-9e0c-94ee1e79687a/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### whr-2.2.0-cp313-cp313-musllinux\_1\_2\_x86\_64.whl - [whr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/38462ef9-3e6e-532e-9363-dbb246786b0f/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### whr-2.2.0-cp314-cp314-musllinux\_1\_2\_x86\_64.whl - [whr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/45299f35-6d08-529c-ad7b-671aabcb7869/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### whr-2.2.0-cp314-cp314t-musllinux\_1\_2\_x86\_64.whl - [whr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/a99f04ee-29db-5ffd-b69e-6848843fb634/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ### whr-2.2.0-cp39-cp39-musllinux\_1\_2\_x86\_64.whl - [whr-2.2.0.dist-info/sboms/auditwheel.cdx.json](https://pypi.sbomify.com/artifact/473e472f-73b7-5b71-af04-dbd483fce2d3/download): CycloneDX/1.4, `application/vnd.cyclonedx+json`, valid, no known vulnerabilities ## Known vulnerabilities Components listed in these SBOMs, matched against the [OSV database](https://osv.dev/) as of 2026-11-10. OSV has no known vulnerabilities for the components these SBOMs list. ## Fetch it over TEA This SBOM is served over the [Transparency Exchange API](https://github.com/CycloneDX/transparency-exchange-api) (TEA). With the `libtea` client: ``` pip install libtea python -m libtea https://pypi.sbomify.com pkg:pypi/whr@2.2.0 ``` Machine-readable copy of this page: https://pypi.sbomify.com/package/whr/2.2.0.json --- From pypi-tea by sbomify: https://pypi.sbomify.com/package/whr/2.2.0