Software Passport · public repository

bannable/paseto

Observed by SPR on 2026-09-25 at commit 29b077ed1a5aa2e70b9e29a662bc47f3f08cf58b (main). Source: github.com/bannable/paseto.

SBOM components84
Open findings90
Critical / high1 / 3
Evidence items88

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 90)

SeverityFindingComponentFixed in
CRITICALPrivate key material
HIGHGHSA-3c6g-pvg8-gqw2json@2.19.3
HIGHGHSA-9vvw-cc9w-f27hdebug@1.11.1
HIGHHard-coded credential assignment
MEDIUMLicense not observedzeitwerk
MEDIUMLicense not observedunicode-emoji
MEDIUMLicense not observedunicode-display_width
MEDIUMLicense not observedtsort
MEDIUMLicense not observedtimecop
MEDIUMLicense not observedthor
MEDIUMLicense not observedtapioca
MEDIUMLicense not observedstringio
MEDIUMLicense not observedspoom
MEDIUMLicense not observedsorbet-static-and-runtime
MEDIUMLicense not observedsorbet-static
MEDIUMLicense not observedsorbet-runtime
MEDIUMLicense not observedsorbet
MEDIUMLicense not observedsimplecov_json_formatter
MEDIUMLicense not observedsimplecov-html
MEDIUMLicense not observedsimplecov
MEDIUMLicense not observedrubydex
MEDIUMLicense not observedruby-progressbar
MEDIUMLicense not observedruby-paseto
MEDIUMLicense not observedrubocop-sorbet
MEDIUMLicense not observedrubocop-rspec

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy