Software Passport · public repository

ricardoccpaiva/barragenspt

Observed by SPR on 2026-09-17 at commit 299c31f892d47f9034f62d68b4a21e67591a61ac (master). Source: github.com/ricardoccpaiva/barragenspt.

SBOM components225
Open findings234
Critical / high1 / 5
Evidence items229

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 234)

SeverityFindingComponentFixed in
CRITICALGHSA-wr5g-q49g-548wexpo@0.5.2
HIGHGHSA-7f2v-3qq3-vvjfvega@5.25.0
HIGHGHSA-829q-m3qg-ph8rvega-selections@5.4.1
HIGHGHSA-7f2v-3qq3-vvjfvega-interpreter@1.0.5
HIGHGHSA-m9rg-mr6g-75gmvega-functions@5.13.2
HIGHGHSA-7f2v-3qq3-vvjfvega-expression@5.1.0
MEDIUMLicense not observedyargs-parser
MEDIUMLicense not observedyargs
MEDIUMLicense not observedyallist
MEDIUMLicense not observedy18n
MEDIUMLicense not observedxxhash
MEDIUMLicense not observedxlsxir
MEDIUMLicense not observedwrap-ansi
MEDIUMLicense not observedwhatwg-url
MEDIUMLicense not observedwebsock_adapter
MEDIUMLicense not observedwebsock
MEDIUMLicense not observedwebidl-conversions
MEDIUMLicense not observedvega_lite
MEDIUMLicense not observedvega-wordcloud
MEDIUMLicense not observedvega-voronoi
MEDIUMLicense not observedvega-view-transforms
MEDIUMLicense not observedvega-view
MEDIUMLicense not observedvega-util
MEDIUMLicense not observedvega-typings
MEDIUMLicense not observedvega-transforms

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy