Software Passport · public repository

therustmonk/rust-app-engine

Observed by SPR on 2026-09-15 at commit dabd9be341e9f95b3272cd25001546f1f7ae51f9 (master). Source: github.com/therustmonk/rust-app-engine.

SBOM components63
Open findings66
Critical / high1 / 2
Evidence items67

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 66)

SeverityFindingComponentFixed in
CRITICALGHSA-75w2-qv55-x7fvopenssl@0.7.13
HIGHGHSA-wrvr-8mpx-r7ppmime@0.2.0
HIGHGHSA-wrvr-8mpx-r7ppmime@0.1.3
MEDIUMLicense not observedwinapi-build
MEDIUMLicense not observedwinapi
MEDIUMLicense not observeduuid
MEDIUMLicense not observedutf8-ranges
MEDIUMLicense not observeduser32-sys
MEDIUMLicense not observedurl
MEDIUMLicense not observedunicode-normalization
MEDIUMLicense not observedunicode-bidi
MEDIUMLicense not observedunicase
MEDIUMLicense not observedtypeable
MEDIUMLicense not observedtraitobject
MEDIUMLicense not observedtime
MEDIUMLicense not observedthread_local
MEDIUMLicense not observedthread-id
MEDIUMLicense not observedtempdir
MEDIUMLicense not observedsolicit
MEDIUMLicense not observedserde
MEDIUMLicense not observedsemver
MEDIUMLicense not observedrustful
MEDIUMLicense not observedrustc_version
MEDIUMLicense not observedrustc-serialize
MEDIUMLicense not observedregex-syntax

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy