DEEPBOM Python launcher
This package is a zero-analysis-logic launcher for the same platform-specific DEEPBOM engine used by the npm CLI release. Each wheel binds its operating system, architecture, engine SHA-256, and canonical TFLite WASM SHA-256 in an installed manifest. No parser or numerical rule is reimplemented in Python.
An experimental typed facade invokes that same verified engine and converts its JSON and exit-code contracts into Python values and exceptions:
from deepbom import (
DeepBomPolicyBlocked, audit, capabilities, capture_contract, diff,
tensor_inventory, tensors, verify_bom, verify_contract,
)
caps = capabilities()
envelope = audit("model.gguf")
selected = audit("model.gguf", sections=["summary", "findings"])
try:
gated = audit("model.safetensors", gate="defects")
except DeepBomPolicyBlocked as blocked:
gated = blocked.document
rows = tensors("model.gguf")
inventory = tensor_inventory("model.gguf")
comparison = diff("baseline.gguf", "candidate.gguf", tensors=True)
baseline = capture_contract("model.onnx")
contract_result = verify_contract("candidate.onnx", "baseline.interface-contract.json")
bom_result = verify_bom("model.onnx", "supplied.cdx.json")
audit() defaults to the canonical envelope, or to analysis selection when
sections are supplied without an explicit output. It accepts the CLI-equivalent
gate="defects" and policy="engineering"|"regulatory" controls plus explicit
timeout and maximum-output-byte bounds. gate and policy are mutually exclusive.
Exit 1 raises DeepBomInvocationError, exit 2
raises DeepBomPolicyBlocked, and exit 3 raises
DeepBomIncompleteBinding; exit 4 raises DeepBomIdentityMismatch. Policy
exceptions retain any completed JSON result
as .document. tensors() converts exact counts to Python int and decimal
ratios to decimal.Decimal; tensor_inventory() preserves the raw JSON document.
The facade is experimental in 1.96.x, and the CLI schemas remain
the compatibility contract.
deepbom audit model.tflite --compact
deepbom audit model.onnx --format cyclonedx
deepbom audit model.onnx --format sarif --output deepbom.sarif --fail-on high
deepbom capabilities --compact
deepbom audit Model.mlpackage --compact
deepbom audit safetensors-repository/ --compact
deepbom audit model.pte --executorch-build deepbom.executorch-build.json --compact
deepbom verify model.onnx --bom supplied.cdx.json --render markdown
deepbom contract capture model.onnx -o baseline.interface-contract.json
deepbom capabilities --format agent-text
ONNX external data next to the model is discovered only from safe serialized
references. Use --external-data-dir to bind a different explicit root.
ExecuTorch PTE audits can additionally bind a selected source/build and binary
inventory with --executorch-build; backend execution remains unobserved.
Set DEEPBOM_ENGINE only for a deliberately supplied engine build and bind it
with DEEPBOM_ENGINE_SHA256. TensorRT options import configuration or observed
parser evidence; NVIDIA runtime libraries are not bundled.
For the installed version, deepbom --help and deepbom capabilities --compact
are authoritative. The current source inventory is maintained in the
generated CLI reference.
This public channel package is licensed under Apache-2.0. Protected analyzers and private rulepack-generation sources are not included.
1 maintainer
Metadata
1 maintainer
Release files for deepbom 1.103.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distributions (wheels)
| File | Reset | |||
|---|---|---|---|---|
| deepbom-1.103.0-py3-none-win_arm64.whl | Python 3 | none | Windows ARM64 | Details |
| deepbom-1.103.0-py3-none-win_amd64.whl | Python 3 | none | Windows x86-64 | Details |
| deepbom-1.103.0-py3-none-manylinux_2_28_x86_64.whl | Python 3 | none | Linux glibc 2.28+ x86-64 | Details |
| deepbom-1.103.0-py3-none-manylinux_2_28_aarch64.whl | Python 3 | none | Linux glibc 2.28+ ARM64 | Details |
| deepbom-1.103.0-py3-none-macosx_14_0_x86_64.whl | Python 3 | none | macOS 14.0+ x86-64 | Details |
| deepbom-1.103.0-py3-none-macosx_14_0_arm64.whl | Python 3 | none | macOS 14.0+ ARM64 | Details |
Total release size: 232.5 MB
Release files / deepbom-1.103.0-py3-none-win_arm64.whl
| Download URL | deepbom-1.103.0-py3-none-win_arm64.whl |
|---|---|
| Size | 31.3 MB |
| Tags | Python 3 Windows ARM64 |
|
SHA-256 checksum How to use checksums |
52ba112bd5030a0b34fc6dc8adef19d68d355b3bba8b68621e96b954edba283c
|
|
BLAKE2b-256 checksum How to use checksums |
3ede3047c7ce3473d65b6ef97da7fe79942155db038f7c8b22b214f973298887
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency logRelease files / deepbom-1.103.0-py3-none-win_amd64.whl
| Download URL | deepbom-1.103.0-py3-none-win_amd64.whl |
|---|---|
| Size | 35.1 MB |
| Tags | Python 3 Windows x86-64 |
|
SHA-256 checksum How to use checksums |
08db0014ecfe036f6c8aa8cc79b1315e12808021d774d4ebd4c5e0f2485d2f48
|
|
BLAKE2b-256 checksum How to use checksums |
cddfe631608fef7c2f528b8264058c1315086ccf0380e9902e2fd2fad2efab87
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency logRelease files / deepbom-1.103.0-py3-none-manylinux_2_28_x86_64.whl
| Download URL | deepbom-1.103.0-py3-none-manylinux_2_28_x86_64.whl |
|---|---|
| Size | 43.2 MB |
| Tags | Linux glibc 2.28+ x86-64 Python 3 |
|
SHA-256 checksum How to use checksums |
7bfb1b77f38990e4586ee7b106b5132ee49e1f4e6c08f1c425d0c1c766565a2f
|
|
BLAKE2b-256 checksum How to use checksums |
67a69f2af7fe447e94b31f9aa8d5e68836868e4f9d6c28aad676cf2ea7d64b25
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency logRelease files / deepbom-1.103.0-py3-none-manylinux_2_28_aarch64.whl
| Download URL | deepbom-1.103.0-py3-none-manylinux_2_28_aarch64.whl |
|---|---|
| Size | 43.0 MB |
| Tags | Linux glibc 2.28+ ARM64 Python 3 |
|
SHA-256 checksum How to use checksums |
894ebcc61f1e2d7d35b15925a742eea1f6932cab774a7c88901aaf44eb941ca4
|
|
BLAKE2b-256 checksum How to use checksums |
9502743c26467dfc0d4de74a5e868214fdf319e056fe4ae8761048c1da0aed98
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency logRelease files / deepbom-1.103.0-py3-none-macosx_14_0_x86_64.whl
| Download URL | deepbom-1.103.0-py3-none-macosx_14_0_x86_64.whl |
|---|---|
| Size | 40.5 MB |
| Tags | Python 3 macOS 14.0+ x86-64 |
|
SHA-256 checksum How to use checksums |
ce1905ae5278cd24053373e081251edcba1507b09ecc1a8c4be3ac1efb596b2b
|
|
BLAKE2b-256 checksum How to use checksums |
cc18ba194541c37f13d5a0d0bb5ac45ef0795a95c01d174febc0a55a028c883f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency logRelease files / deepbom-1.103.0-py3-none-macosx_14_0_arm64.whl
| Download URL | deepbom-1.103.0-py3-none-macosx_14_0_arm64.whl |
|---|---|
| Size | 39.3 MB |
| Tags | Python 3 macOS 14.0+ ARM64 |
|
SHA-256 checksum How to use checksums |
baf0ea4660196d6b429e33f390320ae82dfd164bc79e115d9a7f92252102259d
|
|
BLAKE2b-256 checksum How to use checksums |
b486dc99201f594a1ba2126e1fdc5b1e264c2992b3f77062752d518f38956017
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 17, 2026.
Transparency log
