Software Passport · public repository

Ucoon/flutter_app_template

Observed by SPR on 2026-09-17 at commit aa64ef3feb293616d0787208171c035a4252633a (main). Source: github.com/Ucoon/flutter_app_template.

SBOM components213
Open findings192
Critical / high0 / 0
Evidence items215

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 192)

SeverityFindingComponentFixed in
MEDIUMLicense not observedxdg_directories
MEDIUMLicense not observedwin32_registry
MEDIUMLicense not observedwin32
MEDIUMLicense not observedweibo_kit/vendor
MEDIUMLicense not observedweibo_kit
MEDIUMLicense not observedwechat_picker_library
MEDIUMLicense not observedwechat_camera_picker
MEDIUMLicense not observedwechat_assets_picker
MEDIUMLicense not observedwebview_flutter_wkwebview
MEDIUMLicense not observedwebview_flutter_platform_interface
MEDIUMLicense not observedwebview_flutter_android
MEDIUMLicense not observedwebview_flutter
MEDIUMLicense not observedweb
MEDIUMLicense not observedwaterfall_flow
MEDIUMLicense not observedvm_service
MEDIUMLicense not observedvideo_player_web
MEDIUMLicense not observedvideo_player_platform_interface
MEDIUMLicense not observedvideo_player_avfoundation
MEDIUMLicense not observedvideo_player_android
MEDIUMLicense not observedvideo_player
MEDIUMLicense not observedvideo_compress
MEDIUMLicense not observedvector_math
MEDIUMLicense not observeduuid
MEDIUMLicense not observedtyped_data
MEDIUMLicense not observedtuple

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy