DEEPBOM Python launcher

This package is a zero-analysis-logic launcher for the same platform-specific DEEPBOM engine used by the npm CLI release. Each wheel binds its operating system, architecture, engine SHA-256, and canonical TFLite WASM SHA-256 in an installed manifest. No parser or numerical rule is reimplemented in Python.

An experimental typed facade invokes that same verified engine and converts its JSON and exit-code contracts into Python values and exceptions:

from deepbom import (
    DeepBomPolicyBlocked, audit, capabilities, capture_contract, diff,
    tensor_inventory, tensors, verify_bom, verify_contract,
)

caps = capabilities()
envelope = audit("model.gguf")
selected = audit("model.gguf", sections=["summary", "findings"])
try:
    gated = audit("model.safetensors", gate="defects")
except DeepBomPolicyBlocked as blocked:
    gated = blocked.document
rows = tensors("model.gguf")
inventory = tensor_inventory("model.gguf")
comparison = diff("baseline.gguf", "candidate.gguf", tensors=True)
baseline = capture_contract("model.onnx")
contract_result = verify_contract("candidate.onnx", "baseline.interface-contract.json")
bom_result = verify_bom("model.onnx", "supplied.cdx.json")

audit() defaults to the canonical envelope, or to analysis selection when sections are supplied without an explicit output. It accepts the CLI-equivalent gate="defects" and policy="engineering"|"regulatory" controls plus explicit timeout and maximum-output-byte bounds. gate and policy are mutually exclusive. Exit 1 raises DeepBomInvocationError, exit 2 raises DeepBomPolicyBlocked, and exit 3 raises DeepBomIncompleteBinding; exit 4 raises DeepBomIdentityMismatch. Policy exceptions retain any completed JSON result as .document. tensors() converts exact counts to Python int and decimal ratios to decimal.Decimal; tensor_inventory() preserves the raw JSON document. The facade is experimental in 1.96.x, and the CLI schemas remain the compatibility contract.

deepbom audit model.tflite --compact
deepbom audit model.onnx --format cyclonedx
deepbom audit model.onnx --format sarif --output deepbom.sarif --fail-on high
deepbom capabilities --compact
deepbom audit Model.mlpackage --compact
deepbom audit safetensors-repository/ --compact
deepbom audit model.pte --executorch-build deepbom.executorch-build.json --compact
deepbom verify model.onnx --bom supplied.cdx.json --render markdown
deepbom contract capture model.onnx -o baseline.interface-contract.json
deepbom capabilities --format agent-text

ONNX external data next to the model is discovered only from safe serialized references. Use --external-data-dir to bind a different explicit root. ExecuTorch PTE audits can additionally bind a selected source/build and binary inventory with --executorch-build; backend execution remains unobserved.

Set DEEPBOM_ENGINE only for a deliberately supplied engine build and bind it with DEEPBOM_ENGINE_SHA256. TensorRT options import configuration or observed parser evidence; NVIDIA runtime libraries are not bundled.

For the installed version, deepbom --help and deepbom capabilities --compact are authoritative. The current source inventory is maintained in the generated CLI reference.

This public channel package is licensed under Apache-2.0. Protected analyzers and private rulepack-generation sources are not included.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

deepbom-1.103.0-py3-none-win_arm64.whl (31.3 MB view details)

Uploaded Sep 17, 2026 Python 3Windows ARM64

deepbom-1.103.0-py3-none-win_amd64.whl (35.1 MB view details)

Uploaded Sep 17, 2026 Python 3Windows x86-64

deepbom-1.103.0-py3-none-manylinux_2_28_x86_64.whl (43.2 MB view details)

Uploaded Sep 17, 2026 Python 3manylinux: glibc 2.28+ x86-64

deepbom-1.103.0-py3-none-manylinux_2_28_aarch64.whl (43.0 MB view details)

Uploaded Sep 17, 2026 Python 3manylinux: glibc 2.28+ ARM64

deepbom-1.103.0-py3-none-macosx_14_0_x86_64.whl (40.5 MB view details)

Uploaded Sep 17, 2026 Python 3macOS 14.0+ x86-64

deepbom-1.103.0-py3-none-macosx_14_0_arm64.whl (39.3 MB view details)

Uploaded Sep 17, 2026 Python 3macOS 14.0+ ARM64

File details

Details for the file deepbom-1.103.0-py3-none-win_arm64.whl.

File metadata

Download URL: deepbom-1.103.0-py3-none-win_arm64.whl
Upload date: Sep 17, 2026
Size: 31.3 MB
Tags: Python 3, Windows ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for deepbom-1.103.0-py3-none-win_arm64.whl
Algorithm	Hash digest
SHA256	`52ba112bd5030a0b34fc6dc8adef19d68d355b3bba8b68621e96b954edba283c`
MD5	`29c99438965d5d1bd5207bc4bcdc21a3`
BLAKE2b-256	`3ede3047c7ce3473d65b6ef97da7fe79942155db038f7c8b22b214f973298887`

See more details on using hashes here.

Provenance

The following attestation bundles were made for deepbom-1.103.0-py3-none-win_arm64.whl:

Publisher: release-channels.yml on JunHwan-Kwon/deepbom

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: deepbom-1.103.0-py3-none-win_arm64.whl
- Subject digest: 52ba112bd5030a0b34fc6dc8adef19d68d355b3bba8b68621e96b954edba283c
- Sigstore transparency entry: 2875439921
- Sigstore integration time: Sep 17, 2026
Source repository:
- Permalink: JunHwan-Kwon/deepbom@133860b79b941aff0c327fa95813e13fb03c4ce6
- Branch / Tag: refs/tags/channels-v1.103.0
- Owner: https://github.com/JunHwan-Kwon
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-channels.yml@133860b79b941aff0c327fa95813e13fb03c4ce6
- Trigger Event: workflow_dispatch

File details

Details for the file deepbom-1.103.0-py3-none-win_amd64.whl.

File metadata

Download URL: deepbom-1.103.0-py3-none-win_amd64.whl
Upload date: Sep 17, 2026
Size: 35.1 MB
Tags: Python 3, Windows x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for deepbom-1.103.0-py3-none-win_amd64.whl
Algorithm	Hash digest
SHA256	`08db0014ecfe036f6c8aa8cc79b1315e12808021d774d4ebd4c5e0f2485d2f48`
MD5	`450c47aa81cebbcfb8c5056c6e8d35ce`
BLAKE2b-256	`cddfe631608fef7c2f528b8264058c1315086ccf0380e9902e2fd2fad2efab87`

See more details on using hashes here.

Provenance

The following attestation bundles were made for deepbom-1.103.0-py3-none-win_amd64.whl:

Publisher: release-channels.yml on JunHwan-Kwon/deepbom

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: deepbom-1.103.0-py3-none-win_amd64.whl
- Subject digest: 08db0014ecfe036f6c8aa8cc79b1315e12808021d774d4ebd4c5e0f2485d2f48
- Sigstore transparency entry: 2875440046
- Sigstore integration time: Sep 17, 2026
Source repository:
- Permalink: JunHwan-Kwon/deepbom@133860b79b941aff0c327fa95813e13fb03c4ce6
- Branch / Tag: refs/tags/channels-v1.103.0
- Owner: https://github.com/JunHwan-Kwon
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-channels.yml@133860b79b941aff0c327fa95813e13fb03c4ce6
- Trigger Event: workflow_dispatch

File details

Details for the file deepbom-1.103.0-py3-none-manylinux_2_28_x86_64.whl.

File metadata

Download URL: deepbom-1.103.0-py3-none-manylinux_2_28_x86_64.whl
Upload date: Sep 17, 2026
Size: 43.2 MB
Tags: Python 3, manylinux: glibc 2.28+ x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for deepbom-1.103.0-py3-none-manylinux_2_28_x86_64.whl
Algorithm	Hash digest
SHA256	`7bfb1b77f38990e4586ee7b106b5132ee49e1f4e6c08f1c425d0c1c766565a2f`
MD5	`10e18ea24cac2d05c49ac0bc2009a671`
BLAKE2b-256	`67a69f2af7fe447e94b31f9aa8d5e68836868e4f9d6c28aad676cf2ea7d64b25`

See more details on using hashes here.

Provenance

The following attestation bundles were made for deepbom-1.103.0-py3-none-manylinux_2_28_x86_64.whl:

Publisher: release-channels.yml on JunHwan-Kwon/deepbom

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: deepbom-1.103.0-py3-none-manylinux_2_28_x86_64.whl
- Subject digest: 7bfb1b77f38990e4586ee7b106b5132ee49e1f4e6c08f1c425d0c1c766565a2f
- Sigstore transparency entry: 2875439657
- Sigstore integration time: Sep 17, 2026
Source repository:
- Permalink: JunHwan-Kwon/deepbom@133860b79b941aff0c327fa95813e13fb03c4ce6
- Branch / Tag: refs/tags/channels-v1.103.0
- Owner: https://github.com/JunHwan-Kwon
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-channels.yml@133860b79b941aff0c327fa95813e13fb03c4ce6
- Trigger Event: workflow_dispatch

File details

Details for the file deepbom-1.103.0-py3-none-manylinux_2_28_aarch64.whl.

File metadata

Download URL: deepbom-1.103.0-py3-none-manylinux_2_28_aarch64.whl
Upload date: Sep 17, 2026
Size: 43.0 MB
Tags: Python 3, manylinux: glibc 2.28+ ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for deepbom-1.103.0-py3-none-manylinux_2_28_aarch64.whl
Algorithm	Hash digest
SHA256	`894ebcc61f1e2d7d35b15925a742eea1f6932cab774a7c88901aaf44eb941ca4`
MD5	`8199b3e7e99365d07146b132bef6e38a`
BLAKE2b-256	`9502743c26467dfc0d4de74a5e868214fdf319e056fe4ae8761048c1da0aed98`

See more details on using hashes here.

Provenance

The following attestation bundles were made for deepbom-1.103.0-py3-none-manylinux_2_28_aarch64.whl:

Publisher: release-channels.yml on JunHwan-Kwon/deepbom

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: deepbom-1.103.0-py3-none-manylinux_2_28_aarch64.whl
- Subject digest: 894ebcc61f1e2d7d35b15925a742eea1f6932cab774a7c88901aaf44eb941ca4
- Sigstore transparency entry: 2875439788
- Sigstore integration time: Sep 17, 2026
Source repository:
- Permalink: JunHwan-Kwon/deepbom@133860b79b941aff0c327fa95813e13fb03c4ce6
- Branch / Tag: refs/tags/channels-v1.103.0
- Owner: https://github.com/JunHwan-Kwon
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-channels.yml@133860b79b941aff0c327fa95813e13fb03c4ce6
- Trigger Event: workflow_dispatch

File details

Details for the file deepbom-1.103.0-py3-none-macosx_14_0_x86_64.whl.

File metadata

Download URL: deepbom-1.103.0-py3-none-macosx_14_0_x86_64.whl
Upload date: Sep 17, 2026
Size: 40.5 MB
Tags: Python 3, macOS 14.0+ x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for deepbom-1.103.0-py3-none-macosx_14_0_x86_64.whl
Algorithm	Hash digest
SHA256	`ce1905ae5278cd24053373e081251edcba1507b09ecc1a8c4be3ac1efb596b2b`
MD5	`c3780b1bd5a4dbc56a13e9ccbb95239b`
BLAKE2b-256	`cc18ba194541c37f13d5a0d0bb5ac45ef0795a95c01d174febc0a55a028c883f`

See more details on using hashes here.

Provenance

The following attestation bundles were made for deepbom-1.103.0-py3-none-macosx_14_0_x86_64.whl:

Publisher: release-channels.yml on JunHwan-Kwon/deepbom

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: deepbom-1.103.0-py3-none-macosx_14_0_x86_64.whl
- Subject digest: ce1905ae5278cd24053373e081251edcba1507b09ecc1a8c4be3ac1efb596b2b
- Sigstore transparency entry: 2875440182
- Sigstore integration time: Sep 17, 2026
Source repository:
- Permalink: JunHwan-Kwon/deepbom@133860b79b941aff0c327fa95813e13fb03c4ce6
- Branch / Tag: refs/tags/channels-v1.103.0
- Owner: https://github.com/JunHwan-Kwon
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-channels.yml@133860b79b941aff0c327fa95813e13fb03c4ce6
- Trigger Event: workflow_dispatch

File details

Details for the file deepbom-1.103.0-py3-none-macosx_14_0_arm64.whl.

File metadata

Download URL: deepbom-1.103.0-py3-none-macosx_14_0_arm64.whl
Upload date: Sep 17, 2026
Size: 39.3 MB
Tags: Python 3, macOS 14.0+ ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for deepbom-1.103.0-py3-none-macosx_14_0_arm64.whl
Algorithm	Hash digest
SHA256	`baf0ea4660196d6b429e33f390320ae82dfd164bc79e115d9a7f92252102259d`
MD5	`4b8ec6c4ed39186c2e473ad5d35adf52`
BLAKE2b-256	`b486dc99201f594a1ba2126e1fdc5b1e264c2992b3f77062752d518f38956017`

See more details on using hashes here.

Provenance

The following attestation bundles were made for deepbom-1.103.0-py3-none-macosx_14_0_arm64.whl:

Publisher: release-channels.yml on JunHwan-Kwon/deepbom

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: deepbom-1.103.0-py3-none-macosx_14_0_arm64.whl
- Subject digest: baf0ea4660196d6b429e33f390320ae82dfd164bc79e115d9a7f92252102259d
- Sigstore transparency entry: 2875439556
- Sigstore integration time: Sep 17, 2026
Source repository:
- Permalink: JunHwan-Kwon/deepbom@133860b79b941aff0c327fa95813e13fb03c4ce6
- Branch / Tag: refs/tags/channels-v1.103.0
- Owner: https://github.com/JunHwan-Kwon
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: release-channels.yml@133860b79b941aff0c327fa95813e13fb03c4ce6
- Trigger Event: workflow_dispatch