P
podence
Guest
- Thread Author
- #1
See the Tools page for more info
Pitloom automates the generation of SPDX 3-compliant Software Bills of Materials (SBOMs) for Python applications and AI models. It extracts metadata directly from common Python build backends (Flit, Hatchling, PDM, Poetry, setuptools, and uv_build) and leading AI model formats, including PyTorch, ONNX, Safetensors, GGUF, and fastText. With native Hatchling integration and an official GitHub Action, Pitloom embeds SBOMs directly into your wheel distribution under
Pitloom automates the generation of SPDX 3-compliant Software Bills of Materials (SBOMs) for Python applications and AI models. It extracts metadata directly from common Python build backends (Flit, Hatchling, PDM, Poetry, setuptools, and uv_build) and leading AI model formats, including PyTorch, ONNX, Safetensors, GGUF, and fastText. With native Hatchling integration and an official GitHub Action, Pitloom embeds SBOMs directly into your wheel distribution under
.dist-info/sboms in full compliance with the PEP 770 specification – offering software supply chain transparency without disrupting the build pipeline.