Software Passport · public repository

radcortez/quarkus-playground

Observed by SPR on 2026-09-18 at commit d603f42761804cdf0cdbfc3884c5565a5ab3619a (main). Source: github.com/radcortez/quarkus-playground.

SBOM components42
Open findings42
Critical / high1 / 0
Evidence items46

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 42)

SeverityFindingComponentFixed in
CRITICALPrivate key material
MEDIUMLicense not observedstandalone
MEDIUMLicense not observedsmallrye-reactive-messaging-in-memory
MEDIUMLicense not observedsimulator
MEDIUMLicense not observedservices
MEDIUMLicense not observedrest-assured
MEDIUMLicense not observedquarkus-test-security-jwt
MEDIUMLicense not observedquarkus-test-security
MEDIUMLicense not observedquarkus-test-h2
MEDIUMLicense not observedquarkus-swagger-ui
MEDIUMLicense not observedquarkus-resteasy-jsonb
MEDIUMLicense not observedquarkus-resteasy-client
MEDIUMLicense not observedquarkus-resteasy
MEDIUMLicense not observedquarkus-observability-devservices-lgtm
MEDIUMLicense not observedquarkus-microprofile
MEDIUMLicense not observedquarkus-messaging-kafka
MEDIUMLicense not observedquarkus-messaging
MEDIUMLicense not observedquarkus-mapstruct
MEDIUMLicense not observedquarkus-kubernetes
MEDIUMLicense not observedquarkus-junit-mockito
MEDIUMLicense not observedquarkus-junit-component
MEDIUMLicense not observedquarkus-junit
MEDIUMLicense not observedquarkus-jsonp
MEDIUMLicense not observedquarkus-jdbc-postgresql
MEDIUMLicense not observedquarkus-jdbc-h2

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy