Software Passport · public repository

atolcd/pentaho-gis-plugins

Observed by SPR on 2026-09-19 at commit 0790087705ca9539b3042a878ebba8acb5c98063 (master). Source: github.com/atolcd/pentaho-gis-plugins.

SBOM components46
Open findings44
Critical / high0 / 0
Evidence items49

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 44)

SeverityFindingComponentFixed in
MEDIUMLicense not observedsvg
MEDIUMLicense not observedsqlite-jdbc
MEDIUMLicense not observedspatialite
MEDIUMLicense not observedshp
MEDIUMLicense not observedsf-wkb
MEDIUMLicense not observedsf-proj
MEDIUMLicense not observedsf
MEDIUMLicense not observedsdoutl
MEDIUMLicense not observedsdoapi
MEDIUMLicense not observedproj4j
MEDIUMLicense not observedpostgis-jdbc
MEDIUMLicense not observedpentaho-gis-plugins-holder
MEDIUMLicense not observedormlite-jdbc
MEDIUMLicense not observedormlite-core
MEDIUMLicense not observedojdbc6
MEDIUMLicense not observedmifmid
MEDIUMLicense not observedmetastore
MEDIUMLicense not observedkettle-ui-swt
MEDIUMLicense not observedkettle-engine
MEDIUMLicense not observedkettle-core
MEDIUMLicense not observedkabeja
MEDIUMLicense not observedjts-core
MEDIUMLicense not observedjface
MEDIUMLicense not observedjdom2
MEDIUMLicense not observedjaxb-impl

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy