Software Passport · public repository

firgia/FD-Music

Observed by SPR on 2026-09-17 at commit 000ed0a071f27b9c86109c97a227c7a021599cf3 (master). Source: github.com/firgia/FD-Music.

SBOM components30
Open findings31
Critical / high0 / 1
Evidence items34

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 31)

SeverityFindingComponentFixed in
HIGHGHSA-fwr7-v2mv-hh25async@2.6.1
MEDIUMLicense not observedxml
MEDIUMLicense not observedvector_math
MEDIUMLicense not observedtyped_data
MEDIUMLicense not observedtest_api
MEDIUMLicense not observedterm_glyph
MEDIUMLicense not observedstring_scanner
MEDIUMLicense not observedstream_channel
MEDIUMLicense not observedstack_trace
MEDIUMLicense not observedsource_span
MEDIUMLicense not observedsky_engine
MEDIUMLicense not observedpetitparser
MEDIUMLicense not observedpath_parsing
MEDIUMLicense not observedpath_drawing
MEDIUMLicense not observedpath
MEDIUMLicense not observedmusic_app
MEDIUMLicense not observedmeta
MEDIUMLicense not observedmatcher
MEDIUMLicense not observedget
MEDIUMLicense not observedfont_awesome_flutter
MEDIUMLicense not observedflutter_test
MEDIUMLicense not observedflutter_svg
MEDIUMLicense not observedflutter
MEDIUMLicense not observedfake_async
MEDIUMLicense not observedcupertino_icons

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy