Software Passport · public repository

bthurlow/nativescript-imagecropper

Observed by SPR on 2026-09-18 at commit c69097e31ccb951cd3f619c4080fa2528b30e28a (master). Source: github.com/bthurlow/nativescript-imagecropper.

SBOM components38
Open findings45
Critical / high0 / 7
Evidence items42

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 45)

SeverityFindingComponentFixed in
HIGHGHSA-23c5-xmqv-rm74minimatch@3.0.4
HIGHGHSA-f8q6-p94x-37v3minimatch@3.0.4
HIGHGHSA-7r86-cg39-jmmjminimatch@3.0.4
HIGHGHSA-3ppc-4f35-3m26minimatch@3.0.4
HIGHGHSA-3jxr-9vmj-r5cpbrace-expansion@1.1.11
HIGHGHSA-rgw5-rvv9-x895brace-expansion@1.1.11
HIGHGHSA-mh99-v99m-4gvgbrace-expansion@1.1.11
MEDIUMLicense not observedyn
MEDIUMLicense not observedwrappy
MEDIUMLicense not observedtypescript
MEDIUMLicense not observedtslib
MEDIUMLicense not observedts-node
MEDIUMLicense not observedsource-map-support
MEDIUMLicense not observedsource-map
MEDIUMLicense not observedreduce-css-calc
MEDIUMLicense not observedpostcss-value-parser
MEDIUMLicense not observedpath-is-absolute
MEDIUMLicense not observedonce
MEDIUMLicense not observednativescript-publish
MEDIUMLicense not observednativescript-permissions
MEDIUMLicense not observednativescript-imagecropper
MEDIUMLicense not observedmkdirp
MEDIUMLicense not observedminimatch
MEDIUMLicense not observedmdn-data
MEDIUMLicense not observedmake-error

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy