Software Passport · public repository

elliotwutingfeng/2fas-backup-decryptor

Observed by SPR on 2026-09-22 at commit 92023c896b2d500a840e21168db1501228b2bd53 (main). Source: github.com/elliotwutingfeng/2fas-backup-decryptor.

SBOM components29
Open findings27
Critical / high0 / 1
Evidence items33

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 27)

SeverityFindingComponentFixed in
HIGHGHSA-3c6g-pvg8-gqw2json@2.21.2
MEDIUMLicense not observedunicode-emoji
MEDIUMLicense not observedunicode-display_width
MEDIUMLicense not observedsimplecov-cobertura
MEDIUMLicense not observedsimplecov
MEDIUMLicense not observedruby-progressbar
MEDIUMLicense not observedrubocop-rspec
MEDIUMLicense not observedrubocop-ast
MEDIUMLicense not observedrubocop
MEDIUMLicense not observedrspec-support
MEDIUMLicense not observedrspec-mocks
MEDIUMLicense not observedrspec-expectations
MEDIUMLicense not observedrspec-core
MEDIUMLicense not observedrspec
MEDIUMLicense not observedrexml
MEDIUMLicense not observedregexp_parser
MEDIUMLicense not observedrainbow
MEDIUMLicense not observedracc
MEDIUMLicense not observedprism
MEDIUMLicense not observedparser
MEDIUMLicense not observedparallel
MEDIUMLicense not observedlint_roller
MEDIUMLicense not observedlanguage_server-protocol
MEDIUMLicense not observedjson
MEDIUMLicense not observeddiff-lcs

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy