Software Passport Registry

Observed software passports

164 public repositories reviewed by SPR's own scanners. Each entry is backed by observed evidence at a specific commit; registry identity, freshness and observation history are maintained separately from tenant passports. The registry grows continuously and refreshes previously observed software instead of treating a first scan as permanent truth.

Review a public repository free

All reviewed software

RepositorySBOM componentsOpen findingsEvidence itemsRegistry stateReviewed
lencx/ChatGPT739752 (3 critical) (39 high)743observed2026-10-26
expressjs/express581 (1 high)15observed2026-10-25
lissy93/web-check973806 (12 high)959observed2026-10-25
AhmadHassan-BTed/SilentSniffer919observed2026-10-23
OWASP/NodeGoat407381 (9 critical) (49 high)391observed2026-10-23
termio-sh/termio13951292 (6 high)1390observed2026-10-22
BARGHEST-ngo/MESH828859 (5 critical) (64 high)825observed2026-10-22
digininja/DVWA21021observed2026-10-22
camping/camping443647observed2026-10-22
palkan/isolator8010observed2026-10-22
madeintandem/jsonb_accessor8011observed2026-10-22
samg/diffy206observed2026-10-22
reenhanced/gitreflow787681observed2026-10-22
sidekiq-scheduler/sidekiq-scheduler508observed2026-10-22
greasyfork-org/greasyfork254273 (2 critical) (5 high)254observed2026-10-22
rails/bootsnap519observed2026-10-22
openblockchains/awesome-blockchains107observed2026-10-22
lostisland/faraday11667 (2 high)116observed2026-10-22
jekyll/jekyll302 (2 high)22observed2026-10-22
StamusNetworks/scirius763693 (2 critical) (43 high)685observed2026-10-21
smicallef/spiderfoot3221 (2 high)29observed2026-10-21
axios/axios28344 (17 high)231observed2026-10-21
TheAlgorithms/Python9289 (2 critical) (8 high)89observed2026-10-21
noraj/haiti3125 (1 high)32observed2026-10-21
HotCakeX/Harden-Windows-Security25218observed2026-10-21
appleboy/gorush212155 (2 high)211observed2026-10-20
kedacore/keda417362 (1 critical) (3 high)401observed2026-10-20
hibiken/asynq704871observed2026-10-20
matryer/xbar753649observed2026-10-20
authelia/authelia11421007 (1 critical) (4 high)1111observed2026-10-20
golang/go10468 (1 high)91observed2026-10-20
huggingface/pytorch-image-models12012observed2026-10-20
pathwaycom/serviette41 (1 high)9observed2026-10-19
vinta/awesome-python302133observed2026-10-19
yaojingang/GEOFlow1472 (2 high)137observed2026-10-19
presidentbeef/brakeman11791208 (21 critical) (110 high)1176observed2026-10-19
kviklet/kviklet417221 (1 critical) (4 high)393observed2026-10-18
matomo-org/matomo1346 (3 high)109observed2026-10-18
api-platform/api-platform10012observed2026-10-18
coollabsio/coolify20623 (1 critical) (5 high)202observed2026-10-18
chatwoot/chatwoot16441501 (5 critical) (79 high)1631observed2026-10-18
DarthAffe/StableDiffusion.NET13016observed2026-10-18
iOfficeAI/OfficeCLI15013observed2026-10-18
herdrdev/herdr364289 (3 high)341observed2026-10-18
aress31/burpgpt7111observed2026-10-18
soxoj/maigret138111136observed2026-10-18
berabuddies/Semia130165 (1 critical) (40 high)130observed2026-10-18
TypeError/secure121201 (2 critical) (24 high)124observed2026-10-18
jtpereyda/boofuzz609observed2026-10-18
mitmproxy/mitmproxy251236 (1 critical) (24 high)225observed2026-10-18
public-apis/public-apis534 (8 high)10observed2026-10-18
RoseSecurity/Red-Teaming-TTPs30458 (3 critical) (32 high)307observed2026-10-17
dreamzzzz120-cell/Media-no_trust_untill_SPR1695 (1 critical) (1 high)167observed2026-10-17
Significant-Gravitas/AutoGPT26192871 (17 critical) (195 high)2585observed2026-10-16
dreamzzzz120-cell/software-passport-registry3390310observed2026-10-16
k8gege/Ladon12612observed2026-10-15
lodash/lodash45016observed2026-10-14
Shuffle/Shuffle1182231 (2 critical) (24 high)1157observed2026-10-14
algora-io/tv186187 (1 critical)188observed2026-10-14
octokit/action.js45033observed2026-10-14
ente/ente26191754 (4 critical) (27 high)2470observed2026-10-14
plausible/analytics497260 (1 critical) (12 high)447observed2026-10-14
salesforce/TransmogrifAI413742observed2026-10-14
tek/splain7010observed2026-10-13
build-server-protocol/build-server-protocol11381156 (3 critical) (67 high)1140observed2026-10-13
twitter/scrooge473143observed2026-10-13
sryza/aas412835observed2026-10-13
rawsun007/claude-notch374 (1 high)37observed2026-10-13
openclaw/Peekaboo6131 (2 high)49observed2026-10-13
SusionSuc/rabbit-client15616observed2026-10-13
MISP/MISP1614 (4 high)17observed2026-10-13
wpscanteam/wpscan29761776 (34 critical) (156 high)2112observed2026-10-13
defunkt/gist21 (1 high)6observed2026-10-13
hartator/wayback-machine-downloader207observed2026-10-13
rails/rails10911062 (7 critical) (52 high)1068observed2026-10-13
LibreHardwareMonitor/LibreHardwareMonitor102 (1 high)13observed2026-10-13
facebook/react47063379 (74 critical) (396 high)4536observed2026-10-13
cool-japan/numrs10010observed2026-10-13
victorb/dogoap546495 (2 high)548observed2026-10-13
probelabs/probe754 (2 high)26observed2026-10-13
meilisearch/meilisearch870763 (1 critical) (22 high)859observed2026-10-13
validator/validator168128 (5 high)148observed2026-10-13
coyim/coyim5340 (1 high)54observed2026-10-13
caddyserver/caddy189168 (1 critical) (1 high)186observed2026-10-13
ollama/ollama477147 (2 critical) (9 high)440observed2026-10-13
HacxGPT-Official/HacxGPT-CLI51 (1 high)9observed2026-10-13
fim-ai/fim-one13891733 (12 critical) (111 high)1389observed2026-10-13
harry0703/AudioNotes2216 (1 critical) (1 high)24observed2026-10-13
0x4m4/hexstrike-ai216observed2026-10-13
atoolz/htmx-devtools916observed2026-10-13
skills/secure-code-game340147 (4 critical) (24 high)338observed2026-10-13
mashrulhaque/EasyAppDev.Blazor.Store7010observed2026-10-12
0Chencc/CTFCrackTools871811 (1 critical) (28 high)870observed2026-10-12
bee-san/RustScan286242 (3 high)288observed2026-10-12
code4craft/netty-learning2822 (1 high)26observed2026-10-12
bluelinelabs/Conductor519observed2026-10-12
Tencent/GT22816observed2026-10-12
mock-server/mockserver-monorepo992442 (2 critical) (7 high)891observed2026-10-12
springside/springside4503645observed2026-10-12
Javen205/IJPay11151195 (19 critical) (103 high)1098observed2026-10-12
roughike/BottomBar217observed2026-10-12
ZCShou/GoGoGo19119observed2026-10-12
LMAX-Exchange/disruptor19017observed2026-10-12
pallets/flask116137 (7 high)115observed2026-10-12
laravel/laravel606observed2026-10-12
JuliusBrussee/caveman528446 (2 critical) (14 high)510observed2026-10-12
e2b-dev/E2B1005790 (5 high)980observed2026-10-12
KunalSin9h/secops983979 (3 critical) (59 high)981observed2026-10-12
liyupi/ceshiya7306observed2026-10-12
berstend/puppeteer-extra742725 (5 critical) (41 high)713observed2026-10-12
zumerlab/snapdom20312observed2026-10-12
kpdecker/jsdiff552334observed2026-10-12
easydiffusion/easydiffusion107observed2026-10-12
nightwatchjs/nightwatch322266 (1 critical) (20 high)293observed2026-10-12
openstf/stf889992 (41 critical) (239 high)840observed2026-10-12
apache/pouchdb15874118observed2026-10-12
gin-gonic/gin473348observed2026-10-12
chalk/chalk1407observed2026-10-12
pcottle/learnGitBranching563350observed2026-10-12
sindresorhus/is-plain-obj607observed2026-10-12
affaan-m/ECC385343 (2 critical) (7 high)367observed2026-10-12
vibeeval/vibecosystem546 (3 high)49observed2026-10-12
Yamato-Security/hayabusa331311 (1 critical) (4 high)328observed2026-10-12
alexellis/k3sup241826observed2026-10-12
zincsearch/zincsearch202134 (2 high)183observed2026-10-11
avelino/awesome-go211022observed2026-10-11
sherlock-project/sherlock13015observed2026-10-11
cavalle/chrome_remote207observed2026-10-11
4sval/FModel10014observed2026-10-11
SciSharp/LLamaSharp24022observed2026-10-11
cobbr/Covenant7919 (2 high)37observed2026-10-11
aalhour/C-Sharp-Algorithms9111observed2026-10-11
HangfireIO/Hangfire347228340observed2026-10-11
2dust/v2rayN216 (1 high)16observed2026-10-11
microsoft/SynapseML121533 (4 critical) (16 high)1204observed2026-10-10
WerWolv/ImHex10164 (1 high)98observed2026-10-10
square/Valet5146 (1 high)54observed2026-10-10
igorwojda/kotlin-coding-challenges9112observed2026-10-10
fankes/TSBattery9112observed2026-10-10
DUpdateSystem/UpgradeAll181 (1 high)19observed2026-10-10
allgood/OpenNoteScanner7110observed2026-10-10
lujiafa/houtu-dependencies804668observed2026-10-10
minecraft-dev/MinecraftDev15016observed2026-10-10
russhwolf/multiplatform-settings467492 (4 critical) (69 high)462observed2026-10-10
chenxiaolong/BCR8011observed2026-10-10
CYQawa/YunX103 (2 high)12observed2026-10-10
sqldelight/sqldelight639647 (4 critical) (93 high)633observed2026-10-10
2dust/v2rayNG153 (1 high)18observed2026-10-10
IzyPro/WatchDog207observed2026-10-10
openraven/magpie211144201observed2026-10-10
cryptomator/cryptomator884369observed2026-10-10
usestrix/strix310238 (2 critical) (26 high)299observed2026-10-10
mqttjs/MQTT.js15053 (1 critical) (10 high)90observed2026-10-10
cookpete/react-player851371observed2026-10-10
toss/es-toolkit509440 (10 high)462observed2026-10-10
fuergaosi233/wechat-chatgpt413488 (4 critical) (56 high)412observed2026-10-10
rmyndharis/OpenWA68417 (2 high)643observed2026-10-10
alibaba/ice18221710 (7 critical) (142 high)1722observed2026-10-10
usablica/intro.js66012observed2026-10-10
the1812/Bilibili-Evolved831837 (1 critical) (60 high)830observed2026-10-10
jestjs/jest14971168 (6 critical) (8 high)1252observed2026-10-10
freeCodeCamp/freeCodeCamp33219 (1 high)45observed2026-10-10
sj26/mailcatcher15018observed2026-10-10
Viralmaniar/BigBountyRecon928observed2026-10-10

Software Passport Registry. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy