Software Passport · public repository

kapetan/repaint

Observed by SPR on 2026-09-15 at commit 2b603fae5704891a4f0102ef9ea5f353827f3604 (master). Source: github.com/kapetan/repaint.

SBOM components51
Open findings55
Critical / high0 / 2
Evidence items55

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 55)

SeverityFindingComponentFixed in
HIGHGHSA-rp65-9cf3-cjxrnth-check@1.0.2
HIGHGHSA-w573-4hg7-7wgqdecode-uri-component@0.2.0
MEDIUMLicense not observedxtend
MEDIUMLicense not observedxhr
MEDIUMLicense not observedwrappy
MEDIUMLicense not observedtuple
MEDIUMLicense not observedtext-width
MEDIUMLicense not observedtext-height
MEDIUMLicense not observedspecificity
MEDIUMLicense not observedsource-map-resolve
MEDIUMLicense not observedsource-map
MEDIUMLicense not observedrgba-regex
MEDIUMLicense not observedrgb-regex
MEDIUMLicense not observedrepeat-element
MEDIUMLicense not observedprocess
MEDIUMLicense not observedparse-unit
MEDIUMLicense not observedparse-headers
MEDIUMLicense not observedparse-color
MEDIUMLicense not observedonce
MEDIUMLicense not observednth-check
MEDIUMLicense not observedmin-document
MEDIUMLicense not observedmap-obj
MEDIUMLicense not observedis-obj
MEDIUMLicense not observedis-function
MEDIUMLicense not observedinherits

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy