DEEPBOM Python launcher
This package is a zero-analysis-logic launcher for the same platform-specific DEEPBOM engine used by the npm CLI release. Each wheel binds its operating system, architecture, engine SHA-256, and canonical TFLite WASM SHA-256 in an installed manifest. No parser or numerical rule is reimplemented in Python.
An experimental typed facade invokes that same verified engine and converts its JSON and exit-code contracts into Python values and exceptions:
from deepbom import (
DeepBomPolicyBlocked, audit, capabilities, capture_contract, diff,
tensor_inventory, tensors, verify_bom, verify_contract,
)
caps = capabilities()
envelope = audit("model.gguf")
selected = audit("model.gguf", sections=["summary", "findings"])
try:
gated = audit("model.safetensors", gate="defects")
except DeepBomPolicyBlocked as blocked:
gated = blocked.document
rows = tensors("model.gguf")
inventory = tensor_inventory("model.gguf")
comparison = diff("baseline.gguf", "candidate.gguf", tensors=True)
baseline = capture_contract("model.onnx")
contract_result = verify_contract("candidate.onnx", "baseline.interface-contract.json")
bom_result = verify_bom("model.onnx", "supplied.cdx.json")
audit() defaults to the canonical envelope, or to analysis selection when
sections are supplied without an explicit output. It accepts the CLI-equivalent
gate="defects" and policy="engineering"|"regulatory" controls plus explicit
timeout and maximum-output-byte bounds. gate and policy are mutually exclusive.
Exit 1 raises DeepBomInvocationError, exit 2
raises DeepBomPolicyBlocked, and exit 3 raises
DeepBomIncompleteBinding; exit 4 raises DeepBomIdentityMismatch. Policy
exceptions retain any completed JSON result
as .document. tensors() converts exact counts to Python int and decimal
ratios to decimal.Decimal; tensor_inventory() preserves the raw JSON document.
The facade is experimental in 1.96.x, and the CLI schemas remain
the compatibility contract.
deepbom audit model.tflite --compact
deepbom audit model.onnx --format cyclonedx
deepbom audit model.onnx --format sarif --output deepbom.sarif --fail-on high
deepbom capabilities --compact
deepbom audit Model.mlpackage --compact
deepbom audit safetensors-repository/ --compact
deepbom audit model.pte --executorch-build deepbom.executorch-build.json --compact
deepbom verify model.onnx --bom supplied.cdx.json --render markdown
deepbom contract capture model.onnx -o baseline.interface-contract.json
deepbom capabilities --format agent-text
ONNX external data next to the model is discovered only from safe serialized
references. Use --external-data-dir to bind a different explicit root.
ExecuTorch PTE audits can additionally bind a selected source/build and binary
inventory with --executorch-build; backend execution remains unobserved.
Set DEEPBOM_ENGINE only for a deliberately supplied engine build and bind it
with DEEPBOM_ENGINE_SHA256. TensorRT options import configuration or observed
parser evidence; NVIDIA runtime libraries are not bundled.
For the installed version, deepbom --help and deepbom capabilities --compact
are authoritative. The current source inventory is maintained in the
generated CLI reference.
This public channel package is licensed under Apache-2.0. Protected analyzers and private rulepack-generation sources are not included.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distributions
Built Distributions
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file deepbom-1.99.2-py3-none-win_arm64.whl.
File metadata
- Download URL: deepbom-1.99.2-py3-none-win_arm64.whl
- Upload date:
- Size: 31.3 MB
- Tags: Python 3, Windows ARM64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
4b0482c3b0f2e1a247a24bc07d0a053c7fd09b58e4ef1740002a49458aa48b4c
|
|
| MD5 |
1d2ffa20585943059e4a6f6f7ae553f6
|
|
| BLAKE2b-256 |
c676e3adcb494a6ff64b7642d8db3f8b0ea788de334743117644663072600c6c
|
Provenance
The following attestation bundles were made for deepbom-1.99.2-py3-none-win_arm64.whl:
Publisher:
release-channels.yml on JunHwan-Kwon/deepbom
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
deepbom-1.99.2-py3-none-win_arm64.whl -
Subject digest:
4b0482c3b0f2e1a247a24bc07d0a053c7fd09b58e4ef1740002a49458aa48b4c - Sigstore transparency entry: 2830105827
- Sigstore integration time:
-
Permalink:
JunHwan-Kwon/deepbom@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Branch / Tag:
refs/tags/channels-v1.99.2 - Owner: https://github.com/JunHwan-Kwon
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-channels.yml@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file deepbom-1.99.2-py3-none-win_amd64.whl.
File metadata
- Download URL: deepbom-1.99.2-py3-none-win_amd64.whl
- Upload date:
- Size: 35.1 MB
- Tags: Python 3, Windows x86-64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
b12dc3f7673c28e67bdbdf8c8e3f877fdfed9b86c79314807c2aecc5973612c0
|
|
| MD5 |
5ce468875ee4091c58e565ff8e052c55
|
|
| BLAKE2b-256 |
5d6028ef6af5803a2f5bf6b7ef5de2a3347eee9a807c19c648c92a0b5c2c4dab
|
Provenance
The following attestation bundles were made for deepbom-1.99.2-py3-none-win_amd64.whl:
Publisher:
release-channels.yml on JunHwan-Kwon/deepbom
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
deepbom-1.99.2-py3-none-win_amd64.whl -
Subject digest:
b12dc3f7673c28e67bdbdf8c8e3f877fdfed9b86c79314807c2aecc5973612c0 - Sigstore transparency entry: 2830105650
- Sigstore integration time:
-
Permalink:
JunHwan-Kwon/deepbom@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Branch / Tag:
refs/tags/channels-v1.99.2 - Owner: https://github.com/JunHwan-Kwon
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-channels.yml@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file deepbom-1.99.2-py3-none-manylinux_2_28_x86_64.whl.
File metadata
- Download URL: deepbom-1.99.2-py3-none-manylinux_2_28_x86_64.whl
- Upload date:
- Size: 43.2 MB
- Tags: Python 3, manylinux: glibc 2.28+ x86-64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
fcdfe0934c900c1a39e50ed148b2c70572722b64053641322f6e55115f7602c5
|
|
| MD5 |
a4d72bd73f6c8f64160ed77022010144
|
|
| BLAKE2b-256 |
3c2ea2af4f30ba10b027313e7f94ea9d7cf36d734da73782e7be8070e506d202
|
Provenance
The following attestation bundles were made for deepbom-1.99.2-py3-none-manylinux_2_28_x86_64.whl:
Publisher:
release-channels.yml on JunHwan-Kwon/deepbom
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
deepbom-1.99.2-py3-none-manylinux_2_28_x86_64.whl -
Subject digest:
fcdfe0934c900c1a39e50ed148b2c70572722b64053641322f6e55115f7602c5 - Sigstore transparency entry: 2830105711
- Sigstore integration time:
-
Permalink:
JunHwan-Kwon/deepbom@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Branch / Tag:
refs/tags/channels-v1.99.2 - Owner: https://github.com/JunHwan-Kwon
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-channels.yml@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file deepbom-1.99.2-py3-none-manylinux_2_28_aarch64.whl.
File metadata
- Download URL: deepbom-1.99.2-py3-none-manylinux_2_28_aarch64.whl
- Upload date:
- Size: 43.0 MB
- Tags: Python 3, manylinux: glibc 2.28+ ARM64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
b8c3792488ffbf82a17837f497fa0f0d423b9d351da2ce63aab8190d92148529
|
|
| MD5 |
1d47cbf25d3f3a5f8e7d286fda90f81e
|
|
| BLAKE2b-256 |
df023a5f943cf04e4872a2f0d3c627f525bc7c3861a07a1bab9c45ee59f3a712
|
Provenance
The following attestation bundles were made for deepbom-1.99.2-py3-none-manylinux_2_28_aarch64.whl:
Publisher:
release-channels.yml on JunHwan-Kwon/deepbom
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
deepbom-1.99.2-py3-none-manylinux_2_28_aarch64.whl -
Subject digest:
b8c3792488ffbf82a17837f497fa0f0d423b9d351da2ce63aab8190d92148529 - Sigstore transparency entry: 2830105778
- Sigstore integration time:
-
Permalink:
JunHwan-Kwon/deepbom@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Branch / Tag:
refs/tags/channels-v1.99.2 - Owner: https://github.com/JunHwan-Kwon
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-channels.yml@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file deepbom-1.99.2-py3-none-macosx_14_0_x86_64.whl.
File metadata
- Download URL: deepbom-1.99.2-py3-none-macosx_14_0_x86_64.whl
- Upload date:
- Size: 40.5 MB
- Tags: Python 3, macOS 14.0+ x86-64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
3a88255d29f0b6eec78b85c9cbdd0447827602e9ac0b4d338128593c281a8b2b
|
|
| MD5 |
71e43292208e8e6547c5e60d03a681cf
|
|
| BLAKE2b-256 |
2a6994a2d2002554fbfb72d929ec75ca5619df9b2ebf99e0756850fc2c5c8171
|
Provenance
The following attestation bundles were made for deepbom-1.99.2-py3-none-macosx_14_0_x86_64.whl:
Publisher:
release-channels.yml on JunHwan-Kwon/deepbom
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
deepbom-1.99.2-py3-none-macosx_14_0_x86_64.whl -
Subject digest:
3a88255d29f0b6eec78b85c9cbdd0447827602e9ac0b4d338128593c281a8b2b - Sigstore transparency entry: 2830105580
- Sigstore integration time:
-
Permalink:
JunHwan-Kwon/deepbom@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Branch / Tag:
refs/tags/channels-v1.99.2 - Owner: https://github.com/JunHwan-Kwon
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-channels.yml@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file deepbom-1.99.2-py3-none-macosx_14_0_arm64.whl.
File metadata
- Download URL: deepbom-1.99.2-py3-none-macosx_14_0_arm64.whl
- Upload date:
- Size: 39.3 MB
- Tags: Python 3, macOS 14.0+ ARM64
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
af3d8b58a04a56cfaf4ce7372a09eb648b8d0907f86542d563311792d6c5b50e
|
|
| MD5 |
1cecce9fb4ebb6244b21029d12f9d92c
|
|
| BLAKE2b-256 |
4e5b14d99a56ad8e68431740649f01ded896efdfc1de0d6cf3c0b572daf25cd5
|
Provenance
The following attestation bundles were made for deepbom-1.99.2-py3-none-macosx_14_0_arm64.whl:
Publisher:
release-channels.yml on JunHwan-Kwon/deepbom
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
deepbom-1.99.2-py3-none-macosx_14_0_arm64.whl -
Subject digest:
af3d8b58a04a56cfaf4ce7372a09eb648b8d0907f86542d563311792d6c5b50e - Sigstore transparency entry: 2830105874
- Sigstore integration time:
-
Permalink:
JunHwan-Kwon/deepbom@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Branch / Tag:
refs/tags/channels-v1.99.2 - Owner: https://github.com/JunHwan-Kwon
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release-channels.yml@d5bd6ab2e7b2e599ac4a82cf1deb7cfa4d7a8cac -
Trigger Event:
workflow_dispatch
-
Statement type:
