What Python does
Python is a programming language; CPython is the Python Software Foundation's reference implementation and the distribution linked here. This record pins CPython 3.14.7, the current 3.14 maintenance release on the review date. The 3.14 branch is in bug-fix support under PEP 745 and later moves to security-only source releases, so teams should track the published lifecycle rather than treating this package as indefinitely maintained. Language and standard-library behavior also changes across feature releases, and project compatibility depends on the packages and native libraries in use.
Python.org publishes traditional Windows x64, x86, and experimental ARM64 installers, a universal2 macOS installer for supported Intel and Apple-silicon Macs, and source archives. The Linux rows here are source code, not a universal Linux binary or distribution package; most Linux users should use their distribution's packages or deliberately build from source. Python is transitioning Windows users to Python Install Manager, whose normal workflow obtains runtimes separately; the traditional installers remain available during the 3.14 and 3.15 series but are deprecated.
Installer contents and choices are package-specific. The traditional Windows installer offers optional components such as pip, Tcl/Tk and IDLE, documentation, launcher behavior, and PATH changes; these should not be assumed for unattended or customized installs. The Windows embeddable distribution is a different, minimal application-embedding package and is not represented as an end-user environment. On macOS, the publisher's certificate bootstrap command retrieves certifi, so that follow-up action needs connectivity unless separately prepared.
The recorded artifacts have publisher SHA-256 values, SBOM links for applicable files, and sibling Sigstore bundles; Python 3.14 no longer publishes PGP signatures for these release files. The values below are transcribed from the release page, and this audit did not perform Sigstore verification or execute the packages. CPython can run local programs without an account, but PyPI packages, install-manager catalogs, certificate bootstrap, documentation updates, remote services, and source-control dependencies need network access unless approved copies are staged. PyPI packages and native extensions are separately maintained code with their own licenses, support ranges, install scripts, system dependencies, and supply-chain risk.