Software Passport · public repository

ttimpe/homebridge-midea

Observed by SPR on 2026-09-17 at commit 3595c63106d1446123aaf9847d9d825c65586d30 (main). Source: github.com/ttimpe/homebridge-midea.

SBOM components40
Open findings52
Critical / high0 / 6
Evidence items44

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 52)

SeverityFindingComponentFixed in
HIGHGHSA-hmw2-7cc7-3qxxform-data@4.0.5
HIGHGHSA-j5f8-grm9-p9fcaxios@0.31.1
HIGHGHSA-gcfj-64vw-6mp9axios@0.31.1
HIGHGHSA-pjwm-pj3p-43mvaxios@0.31.1
HIGHGHSA-hfxv-24rg-xrqfaxios@0.31.1
HIGHGHSA-p92q-9vqr-4j8vaxios@0.31.1
MEDIUMLicense not observedurl-parse
MEDIUMLicense not observeduniversalify
MEDIUMLicense not observedtunnel
MEDIUMLicense not observedtraverse
MEDIUMLicense not observedtough-cookie
MEDIUMLicense not observedrequires-port
MEDIUMLicense not observedquerystringify
MEDIUMLicense not observedquerystring
MEDIUMLicense not observedpunycode
MEDIUMLicense not observedpsl
MEDIUMLicense not observedproxy-from-env
MEDIUMLicense not observedpify
MEDIUMLicense not observednode-tunnel
MEDIUMLicense not observedmime-types
MEDIUMLicense not observedmime-db
MEDIUMLicense not observedmath-intrinsics
MEDIUMLicense not observedis-redirect
MEDIUMLicense not observedhasown
MEDIUMLicense not observedhas-tostringtag

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy