Software Passport · public repository

Humanizr/Humanizer

Observed by SPR on 2026-09-24 at commit ffc2b77c0f30d2fb176875841424379319d0ae9b (main). Source: github.com/Humanizr/Humanizer.

SBOM components1238
Open findings1139
Critical / high0 / 11
Evidence items1242

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 1139)

SeverityFindingComponentFixed in
HIGHGHSA-w27v-7q3p-w38rsvgo@3.3.4
HIGHGHSA-2v37-7h3g-55p8nanoid@3.3.16
HIGHGHSA-5p4m-2wfm-xmqjjs-yaml@4.3.0
HIGHGHSA-2883-xcg3-v3hhjs-yaml@4.3.0
HIGHGHSA-w3rx-r6r6-pgprimage-size@2.0.2
HIGHGHSA-5p2g-fcmc-qvqqimage-size@2.0.2
HIGHGHSA-5jgf-p345-68v8fast-uri@3.1.4
HIGHGHSA-7p8r-x3mc-p8w7fast-uri@3.1.4
HIGHGHSA-jqff-g426-hqxpfast-uri@3.1.4
HIGHGHSA-fph4-wmhf-6fwffast-uri@3.1.4
HIGHGHSA-f65p-4m7j-42xcfast-uri@3.1.4
MEDIUMLicense not observedzwitch
MEDIUMLicense not observedyocto-queue
MEDIUMLicense not observedyallist
MEDIUMLicense not observedxml-js
MEDIUMLicense not observedxdg-basedir
MEDIUMLicense not observedwsl-utils
MEDIUMLicense not observedws
MEDIUMLicense not observedwrite-file-atomic
MEDIUMLicense not observedwrap-ansi
MEDIUMLicense not observedwildcard
MEDIUMLicense not observedwidest-line
MEDIUMLicense not observedwhich
MEDIUMLicense not observedwhatwg-mimetype
MEDIUMLicense not observedwhatwg-encoding

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy