Software Passport Registry

Observed software passports

95 public repositories reviewed by SPR's own scanners: SBOM generated with Syft, dependency vulnerabilities checked against OSV, secrets and licences scanned. Each page shows exactly what was observed at a specific commit.

Review a public repository free

All reviewed software

RepositorySBOM componentsOpen findingsEvidence itemsReviewed
chalk/chalk2362026-09-12
dreamzzzz120-cell/software-passport-registry49123 (3 high)4952026-09-12
MemPalace/mempalace302336 (2 critical) (20 high)3062026-09-12
ultralytics/yolov5815122026-09-12
starship/starship444424 (2 critical) (3 high)4482026-09-12
rust-lang/rustlings97101 (2 high)1012026-09-12
dani-garcia/vaultwarden678643 (1 critical) (8 high)6822026-09-12
nektos/act172156 (4 high)1762026-09-12
alacritty/alacritty294274 (3 high)2972026-09-12
BurntSushi/ripgrep8775912026-09-12
hiyouga/LlamaFactory1321 (2 high)172026-09-12
abi/screenshot-to-code9471083 (2 critical) (59 high)9512026-09-12
localsend/localsend910827 (1 critical) (8 high)9112026-09-12
addyosmani/agent-skills2362026-09-12
nvm-sh/nvm1330172026-09-12
fatedier/frp18992 (1 high)1932026-09-12
nextlevelbuilder/ui-ux-pro-max-skill6070 (2 critical) (14 high)642026-09-12
ohmyzsh/ohmyzsh1420182026-09-12
react/create-react-app14921515 (9 critical) (109 high)15542026-09-11
realworld-apps/realworld603653 (1 critical) (33 high)6082026-09-11
OpenCut-app/OpenCut706642 (1 critical) (7 high)7122026-09-11
axios/axios956870 (4 critical) (50 high)9612026-09-11
soimort/you-get24 (1 high)62026-09-11
Textualize/rich6285662026-09-11
h5bp/html5-boilerplate1523192026-09-11
karpathy/nanochat104245 (1 critical) (45 high)1082026-09-11
FoundationAgents/OpenManus431472 (3 critical) (27 high)4352026-09-11
pmndrs/zustand588548 (6 high)5922026-09-11
FiloSottile/mkcert811122026-09-11
jquery/jquery817122026-09-11
adam-p/markdown-here8632 (18 high)902026-09-11
sharkdp/bat338401 (4 critical) (25 high)3422026-09-11
termux/termux-app611102026-09-11
jingyaogong/minimind29168 (4 critical) (34 high)332026-09-11
lodash/lodash1018142026-09-11
reduxjs/redux19361732 (8 critical) (65 high)19402026-09-11
RVC-Boss/GPT-SoVITS5892026-09-11
mvanhorn/last30days-skill79 (1 high)112026-09-11
upstash/context7732734 (50 high)7362026-09-11
usestrix/strix285184 (8 high)2892026-09-11
sansan0/TrendRadar114292 (6 critical) (35 high)1182026-09-11
ChrisTitusTech/winutil48241 (1 critical) (4 high)4862026-09-11
usememos/memos743786 (15 high)7472026-09-11
jgraph/drawio-desktop9513 (1 high)992026-09-11
socketio/socket.io17751538 (9 critical) (90 high)17792026-09-11
virattt/ai-hedge-fund101119 (2 high)1052026-09-11
scrapy/scrapy79124 (14 high)832026-09-11
NanmiCoder/MediaCrawler195200 (1 critical) (28 high)1992026-09-11
TheAlgorithms/Java1826222026-09-11
leonardomso/33-js-concepts35 (1 high)72026-09-11
chartjs/Chart.js11801181 (4 critical) (66 high)11842026-09-11
Fission-AI/OpenSpec736681 (2 high)7402026-09-11
666ghj/MiroFish288514 (4 critical) (61 high)2922026-09-11
hakimel/reveal.js812122026-09-11
Asabeneh/30-Days-Of-Python638 (3 high)102026-09-11
chrislgarry/Apollo-113572026-09-11
pallets/flask114140 (2 high)1182026-09-11
caddyserver/caddy185196 (1 critical) (1 high)1892026-09-11
typicode/json-server104105 (1 critical) (1 high)1082026-09-11
nomic-ai/gpt4all589593 (1 critical) (46 high)5932026-09-11
doocs/advanced-java1681721722026-09-11
Z4nzu/hackingtool1317 (2 high)172026-09-11
Panniantong/Agent-Reach24 (1 high)62026-09-11
anuraghazra/github-readme-stats4386 (12 high)472026-09-11
rtk-ai/rtk229235 (1 critical) (5 high)2332026-09-11
D4Vinci/Scrapling1419182026-09-11
Egonex-AI/Understand-Anything765704 (2 critical) (46 high)7692026-09-11
animate-css/animate.css1012142026-09-11
junegunn/fzf3749 (2 high)412026-09-11
bregman-arie/devops-exercises26 (1 high)62026-09-11
odysseus-dev/odysseus2438 (2 high)282026-09-11
ChatGPTNextWeb/NextChat10921121 (9 critical) (77 high)10962026-09-11
gin-gonic/gin4551492026-09-11
modelcontextprotocol/servers223152 (1 critical) (20 high)2272026-09-11
louislam/uptime-kuma643115 (2 critical) (29 high)6472026-09-11
sherlock-project/sherlock910132026-09-11
iluwatar/java-design-patterns294498 (4 high)2982026-09-11
karpathy/autoresearch74124 (14 high)782026-09-11
nvbn/thefuck4682026-09-11
JuliusBrussee/caveman532509 (1 critical) (10 high)5362026-09-11
openai/whisper68102026-09-11
deepseek-ai/DeepSeek-V3574 (1 critical) (6 high)92026-09-11
TauricResearch/TradingAgents24 (1 high)62026-09-11
browser-use/browser-use1524 (2 high)192026-09-11
2dust/v2rayN1023 (1 high)142026-09-11
Graphify-Labs/graphify210269 (19 high)2142026-09-11
github/spec-kit4159 (2 high)452026-09-11
Genymobile/scrcpy5792026-09-11
AUTOMATIC1111/stable-diffusion-webui40291 (7 critical) (65 high)442026-09-11
microsoft/markitdown25 (1 high)62026-09-11
trekhleb/javascript-algorithms4582026-09-11
vuejs/vue4057 (11 high)442026-09-11
TheAlgorithms/Python92103 (2 high)962026-09-11
public-apis/public-apis540 (6 high)92026-09-11
expressjs/express914 (1 high)132026-09-10

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy