# Pypi articles

## Pages

- [SBOM Adoption on PyPI Is at 1.58%. We Can Do Better.](https://sbomify.com/2026/03/12/pypi-sbom-analysis/) (2026-03-12): We scanned 15,021 of the most popular Python packages for PEP 770 SBOMs. Only 1.58% include one, and every single SBOM is CycloneDX. Here are the full results.
- [PEP 770: SBOMs Are Now a First-Class Citizen in Python Packages](https://sbomify.com/2026/03/05/pep-770-sboms-in-python-packages/) (2026-03-05): Python's PEP 770 standardizes shipping SBOMs inside packages via .dist-info/sboms/. Here's what it means and how we adopted it in two projects with minimal effort.
- [Announcing sbomify-action v0.11: The One Where They Go to PyPI](https://sbomify.com/2026/01/20/announcing-sbomify-action-v0-11-the-one-where-they-go-to-pypi/) (2026-01-20): sbomify-action v0.11 transforms from a CI-only tool into a fully-fledged CLI available on PyPI. Major additions include audit trails for compliance, SPDX format support, a pre-computed license database covering 28 Linux distro versions, and native Rust SBOM generation.

---

From sbomify: https://sbomify.com/tags/pypi/