Software Passport · public repository

alperefesahin/flutter_firebase_ddd_bloc_2022

Observed by SPR on 2026-09-17 at commit 62ab4fb1392225c28b3f6d5315031a48bb34a898 (main). Source: github.com/alperefesahin/flutter_firebase_ddd_bloc_2022.

SBOM components23
Open findings23
Critical / high0 / 0
Evidence items27

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings

SeverityFindingComponentFixed in
MEDIUMLicense not observedgoogle_sign_in_ios
MEDIUMLicense not observedflutter_firebase_ddd_bloc
MEDIUMLicense not observedfirebase_core
MEDIUMLicense not observedfirebase_auth
MEDIUMLicense not observedPromisesObjC
MEDIUMLicense not observedGoogleUtilities/Reachability
MEDIUMLicense not observedGoogleUtilities/Network
MEDIUMLicense not observedGoogleUtilities/NSData+zlib
MEDIUMLicense not observedGoogleUtilities/Logger
MEDIUMLicense not observedGoogleUtilities/Environment
MEDIUMLicense not observedGoogleUtilities/AppDelegateSwizzler
MEDIUMLicense not observedGoogleSignIn
MEDIUMLicense not observedGTMSessionFetcher/Core
MEDIUMLicense not observedGTMAppAuth
MEDIUMLicense not observedFlutter
MEDIUMLicense not observedFirebaseCoreInternal
MEDIUMLicense not observedFirebaseCore
MEDIUMLicense not observedFirebaseAuth
MEDIUMLicense not observedFirebase/CoreOnly
MEDIUMLicense not observedFirebase/Auth
MEDIUMLicense not observedAppAuth/ExternalUserAgent
MEDIUMLicense not observedAppAuth/Core
MEDIUMLicense not observedAppAuth

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy