Software Passport · public repository

alexrudall/ruby-openai

Observed by SPR on 2026-09-22 at commit 62938e02bb83e9f243ad2447805bc461d5d126fe (main). Source: github.com/alexrudall/ruby-openai.

SBOM components40
Open findings40
Critical / high0 / 1
Evidence items44

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 40)

SeverityFindingComponentFixed in
HIGHGHSA-3c6g-pvg8-gqw2json@2.10.2
MEDIUMLicense not observedwebmock
MEDIUMLicense not observedvcr
MEDIUMLicense not observedunicode-emoji
MEDIUMLicense not observedunicode-display_width
MEDIUMLicense not observedruby2_keywords
MEDIUMLicense not observedruby-progressbar
MEDIUMLicense not observedruby-openai
MEDIUMLicense not observedrubocop-ast
MEDIUMLicense not observedrubocop
MEDIUMLicense not observedrspec-support
MEDIUMLicense not observedrspec-mocks
MEDIUMLicense not observedrspec-expectations
MEDIUMLicense not observedrspec-core
MEDIUMLicense not observedrspec
MEDIUMLicense not observedrexml
MEDIUMLicense not observedregexp_parser
MEDIUMLicense not observedrake
MEDIUMLicense not observedrainbow
MEDIUMLicense not observedracc
MEDIUMLicense not observedpublic_suffix
MEDIUMLicense not observedparser
MEDIUMLicense not observedparallel
MEDIUMLicense not observedmultipart-post
MEDIUMLicense not observedlint_roller

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy