Software Passport · public repository

wenzhixin/bootstrap-table

Observed by SPR on 2026-09-13 at commit 16f934b8ae3e99f70c7b84e6f5050ce5c083cbb6 (develop). Source: github.com/wenzhixin/bootstrap-table.

SBOM components158
Open findings150
Critical / high0 / 4
Evidence items162

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 150)

SeverityFindingComponentFixed in
HIGHGHSA-73wf-gq98-2v4gbrowserslist@4.28.1
HIGHGHSA-c83g-rgw3-j3cxbrowserslist@4.28.1
HIGHGHSA-73wf-gq98-2v4gbrowserslist@4.27.0
HIGHGHSA-c83g-rgw3-j3cxbrowserslist@4.27.0
MEDIUMLicense not observedyallist
MEDIUMLicense not observedworkerpool
MEDIUMLicense not observeduri-js
MEDIUMLicense not observedupdate-browserslist-db
MEDIUMLicense not observedunicode-property-aliases-ecmascript
MEDIUMLicense not observedunicode-match-property-value-ecmascript
MEDIUMLicense not observedunicode-match-property-ecmascript
MEDIUMLicense not observedunicode-canonical-property-names-ecmascript
MEDIUMLicense not observedregjsparser
MEDIUMLicense not observedregjsgen
MEDIUMLicense not observedregexpu-core
MEDIUMLicense not observedregenerate-unicode-properties
MEDIUMLicense not observedregenerate
MEDIUMLicense not observedpunycode
MEDIUMLicense not observedpump
MEDIUMLicense not observedpath-type
MEDIUMLicense not observedpath-scurry
MEDIUMLicense not observedparent-module
MEDIUMLicense not observednumber-is-nan
MEDIUMLicense not observednode-releases
MEDIUMLicense not observedminipass

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans   Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy