Software Passport · public repository

Gecode/MPG

Observed by SPR on 2026-09-17 at commit 320e8b3b8cf5fa6413d3e90048c1d8712bc6952f (main). Source: github.com/Gecode/MPG.

SBOM components38
Open findings32
Critical / high0 / 0
Evidence items42

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 32)

SeverityFindingComponentFixed in
MEDIUMLicense not observedurllib3
MEDIUMLicense not observedsphinxcontrib-serializinghtml
MEDIUMLicense not observedsphinxcontrib-qthelp
MEDIUMLicense not observedsphinxcontrib-katex
MEDIUMLicense not observedsphinxcontrib-jsmath
MEDIUMLicense not observedsphinxcontrib-htmlhelp
MEDIUMLicense not observedsphinxcontrib-devhelp
MEDIUMLicense not observedsphinxcontrib-bibtex
MEDIUMLicense not observedsphinxcontrib-applehelp
MEDIUMLicense not observedsphinx
MEDIUMLicense not observedsnowballstemmer
MEDIUMLicense not observedroman-numerals-py
MEDIUMLicense not observedroman-numerals
MEDIUMLicense not observedrequests
MEDIUMLicense not observedpyyaml
MEDIUMLicense not observedpygments
MEDIUMLicense not observedpybtex-docutils
MEDIUMLicense not observedpybtex
MEDIUMLicense not observedpackaging
MEDIUMLicense not observedmpg
MEDIUMLicense not observedmarkupsafe
MEDIUMLicense not observedlatexcodec
MEDIUMLicense not observedjinja2
MEDIUMLicense not observedimagesize
MEDIUMLicense not observedidna

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy