Software Passport · public repository

pocketworks/git2pdf

Observed by SPR on 2026-09-16 at commit f180f2643901ff8bb765e5b766ddc419f59a9eb6 (master). Source: github.com/pocketworks/git2pdf.

SBOM components39
Open findings40
Critical / high0 / 1
Evidence items43

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 40)

SeverityFindingComponentFixed in
HIGHGHSA-3c6g-pvg8-gqw2json@1.8.1
MEDIUMLicense not observedtzinfo
MEDIUMLicense not observedttfunk
MEDIUMLicense not observedthread_safe
MEDIUMLicense not observedthor
MEDIUMLicense not observedsimplecov-html
MEDIUMLicense not observedsimplecov
MEDIUMLicense not observedshoulda-matchers
MEDIUMLicense not observedshoulda-context
MEDIUMLicense not observedshoulda
MEDIUMLicense not observedrdoc
MEDIUMLicense not observedrake
MEDIUMLicense not observedrack
MEDIUMLicense not observedprawn
MEDIUMLicense not observedpdf-core
MEDIUMLicense not observedoauth2
MEDIUMLicense not observednokogiri
MEDIUMLicense not observedmultipart-post
MEDIUMLicense not observedmulti_xml
MEDIUMLicense not observedmulti_json
MEDIUMLicense not observedmocha
MEDIUMLicense not observedminitest
MEDIUMLicense not observedmini_portile
MEDIUMLicense not observedmetaclass
MEDIUMLicense not observedjwt

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy