Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-25 06:01 UTC

Alfresco / alfresco-java-sdk

Alfresco Out-Of-Process SDK for Java Developers

Java · MustacheApache-2.0★ 22 Sterne⑂ 9 Forksseit Jan. 2021Auf GitHub ansehen ↗

Alfresco/alfresco-java-sdk erreicht einen Gesundheitsindex von 75 von 100 und liegt damit im Bereich Gut. Am stärksten schneidet es bei Engineering Quality (90/100) ab, am schwächsten bei Community & Adoption (44/100). Zuletzt vor 1 Tag aktualisiert. 5 Mitwirkende tragen den Großteil der jüngsten Arbeit.

75
gesamt / 100
Gut

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

75
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

Alfresco SoftwareOrganisation
435 Follower137 öffentliche Reposseit Sept. 2010

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlicht
Mavenorg.alfresco:alfresco-java-rest-api-common7.3.3-A.2-5vor 3 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

84Gut · 22 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 1 Tagen
15.2/36Commit-Rhythmus — 22/52 Wochen mit Commits
18/18Commit-Volumen — 100 Commits im letzten Jahr
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Verwendete Eingangsdaten
commits_last_year100
human_commit_share0,97
days_since_last_push1
active_weeks_last_year22
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 27 Releases veröffentlicht
36/36Release-Aktualität — letztes Release vor 50 Tagen
19.8/27Release-Rhythmus — ein Release etwa alle 95,7 Tage
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count27
latest_release_tag7.3.2
releases_from_tagsnein
days_since_latest_release50
mean_days_between_releases95,7
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

44Gefährdet · 18 % des Gesamtindex
Wie die Bewertung erfolgt
21.4/60Stars — 22 Stars
7.5/25Forks — 9 Forks
9.2/15Watcher — 47 Watcher
Verwendete Eingangsdaten
forks9
stars22
watchers47
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
22.5/22.5Lizenz — anerkannte Lizenz (Apache-2.0)
0/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingnein
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templatenein

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

79Gut · 24 % des Gesamtindex
Wie die Bewertung erfolgt
45.9/54Bus-Faktor — 5 Beitragende decken die Hälfte aller Commits ab
19.3/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 14 % der Commits
13.5/13.5Breite der Beitragenden — 46 Beitragende
10/10OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations
Verwendete Eingangsdaten
bus_factor5
contributors_sampled46
top_contributor_share0,144
Wie die Bewertung erfolgt
20.1/46.8Issue-Lösungsquote — 43 % der Issues geschlossen
26.2/38.3PR-Annahme — 269/393 entschiedene PRs gemergt
7.5/15OpenSSF Scorecard: Code-Review — Found 14/28 approved changesets -- score normalized to 5
Verwendete Eingangsdaten
merged_prs269
open_issues12
closed_issues9
issue_closed_ratio0,429
closed_unmerged_prs124
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
19/25Reichweite des Inhabers — 435 Follower von Alfresco
25/25Kontohistorie — 137 öffentliche Repos, Kontoalter ca. 15 Jahre
Verwendete Eingangsdaten
followers435
owner_typeOrganization
is_verified
owner_loginAlfresco
public_repos137
account_age_days5.799

Paketpflege

100Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf maven
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 3 Tagen
20/20Versionshistorie — 5 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesorg.alfresco:alfresco-java-rest-api-common
ecosystemsmaven
any_deprecatednein
min_days_since_publish3

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

90Exzellent · 20 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 2 Workflow(s)
24/24Tests vorhanden
16/16Linter-Konfiguration
9.6/9.6Pre-Commit-Hooks
6.4/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 16 out of 16 merged PRs checked by a CI test -- score normalized to 10
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfigja
has_linter_configja
has_precommit_configja
Wie die Bewertung erfolgt
30/30README
25/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
10/10Repository-Beschreibung
10/10Topics — 6 Topics
0/10Wiki
Verwendete Eingangsdaten
topicsalfresco, java, sdk, events, rest-client, out-of-process
has_wikinein
homepage
has_readmeja
has_docs_dirja
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

72Gut · 16 % des Gesamtindex
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
3/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 16 out of 16 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
3.8/7.5Code-Review — Found 14/28 approved changesets -- score normalized to 5
2.5/2.5Contributors — project has 6 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Lizenz — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — keine Daten
1.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3
5/5SAST — SAST tool is run on all commits
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — keine Daten
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6.8/7.5Vulnerabilities — 1 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate6,5
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
35/35Direkte Abhängigkeiten ohne bekannte Advisories — keine direkte Abhängigkeit trägt ein bekanntes Advisory
25/25Indirekte Abhängigkeiten ohne bekannte Advisories — keine indirekte Abhängigkeit trägt ein bekanntes Advisory
0/40Keine offenen Advisories — kein Advisory trägt ein Veröffentlichungsdatum
Verwendete Eingangsdaten
sourceosv
advisories0
affected_packages0
assessed_packages58
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Keine offenen Advisories. Die verbleibenden Gewichte wurden renormalisiert. Abgeglichen wurde die Laufzeit-Abhängigkeitshülle von maven:org.alfresco:alfresco-java-rest-api-common@7.3.3-A.2 — das, was die Installation des veröffentlichten Pakets nach sich zieht — mit 58 Paketen. Erreichbarkeit wird nicht analysiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

62Mittel · 0 % des Gesamtindex
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
20.3/40Lesbare Commit-Historie — 37 von 97 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,381
agent_instruction_files
agent_instruction_max_bytes
Wie die Bewertung erfolgt
12.6/18Bootstrap mit einem Befehl — alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/alfresco-event-gateway-api-client/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-auth-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-core-rest-api/pom.xml (Toolchain-Konvention, kein Task-Runner)
22/22Automatisierte Tests
11/11Lint-/Format-Konfiguration
11/11Statische Typprüfung — Java (statisch typisiert)
10/10Reproduzierbare Umgebung — Dockerfile
10/10Belegte Agentenpraxis — 5 der letzten 100 Commits von Agenten verfasst oder ihnen zugeschrieben
8/8Automatisierte Wartung — 3 der letzten 100 Commits sind automatisierte Abhängigkeits-Updates
3/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfiles
has_dockerfileja
typed_languageja
bootstrap_files
has_devcontainernein
has_linter_configja
typecheck_configs
agent_commit_share0,05
toolchain_manifestsalfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/alfresco-event-gateway-api-client/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-auth-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-core-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-discovery-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-governance-classification-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-governance-core-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-model-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-search-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-search-sql-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-spring-boot-starter/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-spring-boot/pom.xml, alfresco-acs-java-rest-api/pom.xml, alfresco-java-event-api/alfresco-java-event-api-handling/pom.xml, alfresco-java-event-api/alfresco-java-event-api-integration/pom.xml, alfresco-java-event-api/alfresco-java-event-api-spring-boot-starter/pom.xml, alfresco-java-event-api/alfresco-java-event-api-spring-boot/pom.xml, alfresco-java-event-api/pom.xml, alfresco-java-rest-api-common/pom.xml, integration-tests/pom.xml, pom.xml, samples/event-api-handlers/pom.xml, samples/event-api-spring-integration/pom.xml, samples/extension-template/pom.xml, samples/oauth2-feign-sample/pom.xml, samples/pom.xml
dependency_bot_commit_share0,03
Wie die Bewertung erfolgt
45/45Typprüfbarer Code — Java (statisch typisiert)
55/55Handhabbare Dateigrößen — 0/121 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languageJava
largest_source_bytes9.528
source_files_sampled121
oversized_source_files0
Wie die Bewertung erfolgt
0/40API-Schema (OpenAPI/GraphQL/proto)
0/20MCP-Server
40/40Lauffähige Beispiele — sample, samples
Verwendete Eingangsdaten
example_dirssample, samples
has_mcp_signalnein
api_schema_files

Eckdaten

22GitHub-Sterne
46Mitwirkende
100Commits, letzte 12 Monate
1Tage seit letztem Push
27Releases
5Bus-Faktor
12offene Issues
MavenPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • Could not fetch maven package 'org.alfresco:integration-tests' from its registry

Weitere Details

Stern- und Fork-Verlauf 0 ★ / 9 ⇿
0Sterne
9Forks
24Releases

Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.

0246810912021-032023-062025-10
Major 3Minor 7Patch 9

Jeder Punkt umfasst 5 Tage.

OpenSSF Scorecard 6.5 / 10
6.5Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-25 06:01 UTC

10Binary-Artifactsno binaries found in the repo
4Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests16 out of 16 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
5Code-ReviewFound 14/28 approved changesets -- score normalized to 5
10Contributorsproject has 6 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
k. A.Packagingpackaging workflow not detected
3Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 3
10SASTSAST tool is run on all commits
0Security-Policysecurity policy file not detected
k. A.Signed-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
9Vulnerabilities1 existing vulnerabilities detected
Direkte Abhängigkeiten 27
RegistryPaketVersionsvorgabeManifest
Mavenorg.alfresco:alfresco-java-event-api-handling${project.version}alfresco-java-event-api/pom.xml
Mavenorg.alfresco:alfresco-java-event-api-integration${project.version}alfresco-java-event-api/pom.xml
Mavenorg.alfresco:alfresco-java-event-api-spring-boot${project.version}alfresco-java-event-api/pom.xml
Mavenorg.springframework.cloud:spring-cloud-starter-openfeignalfresco-java-rest-api-common/pom.xml
Mavenorg.springframework.boot:spring-boot-starter-security-oauth2-clientalfresco-java-rest-api-common/pom.xml
Mavenorg.springframework.security:spring-security-web${dependency.spring-security-web.version}alfresco-java-rest-api-common/pom.xml
Mavenorg.springframework.security:spring-security-configalfresco-java-rest-api-common/pom.xml
Mavencom.nimbusds:nimbus-jose-jwtalfresco-java-rest-api-common/pom.xml
Mavenorg.alfresco:alfresco-acs-java-rest-api-spring-boot-starter${project.version}integration-tests/pom.xml
Mavenorg.awaitility:awaitilityintegration-tests/pom.xml
Mavenorg.springframework.cloud:spring-cloud-dependencies${spring-cloud.version}pom.xml
Mavenio.swagger:swagger-annotations${swagger-core.version}pom.xml
Mavenorg.springframework.cloud:spring-cloud-openfeign-dependencies${spring-cloud.version}pom.xml
Mavenorg.alfresco:alfresco-java-rest-api-common${project.version}pom.xml
Mavenorg.alfresco:acs-event-model${acs-event-model.version}pom.xml
Mavencommons-fileupload:commons-fileupload${common-fileupload.version}pom.xml
Mavenorg.springframework.security:spring-security-web${dependency.spring-security-web.version}pom.xml
Mavencom.nimbusds:nimbus-jose-jwt${com.nimbusds.outh2.sdk.version}pom.xml
Mavenorg.apache.commons:commons-lang3${org.apache.common-lang-3.version}pom.xml
Mavenorg.apache.activemq:activemq-client${activemq-client.version}pom.xml
Mavenorg.bouncycastle:bcprov-jdk18on${dependency.bouncycastle.version}pom.xml
Mavencom.fasterxml.jackson.core:jackson-databind${dependency.jackson-databind.version}pom.xml
Maventools.jackson.core:jackson-databind${dependency.tools-jackson-databind.version}pom.xml
Mavencom.fasterxml.jackson.core:jackson-annotations${dependency.jackson-annotations.version}pom.xml
Mavench.qos.logback:logback-classic${dependency.logback-classic.version}pom.xml
Mavench.qos.logback:logback-core${dependency.logback-core.version}pom.xml
Mavencommons-fileupload:commons-fileuploadpom.xml
Alle Abhängigkeiten 119

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 22 direkte und 97 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
Mavench.qos.logback:logback-classic1.5.37direkt
Mavench.qos.logback:logback-core1.5.37direkt
Mavencom.fasterxml.jackson.core:jackson-annotations2.22direkt
Mavencom.fasterxml.jackson.core:jackson-databind2.22.1direkt
Mavencom.nimbusds:nimbus-jose-jwt10.5direkt
Mavencommons-fileupload:commons-fileupload1.6.0direkt
Mavenio.swagger:swagger-annotations1.5.20direkt
Mavenorg.alfresco:acs-event-model1.1.0-A.1direkt
Mavenorg.alfresco:alfresco-acs-java-rest-api-spring-boot-starter7.3.4-SNAPSHOTdirekt
Mavenorg.alfresco:alfresco-java-event-api-handling7.3.4-SNAPSHOTdirekt
Mavenorg.alfresco:alfresco-java-event-api-integration7.3.4-SNAPSHOTdirekt
Mavenorg.alfresco:alfresco-java-event-api-spring-boot7.3.4-SNAPSHOTdirekt
Mavenorg.alfresco:alfresco-java-rest-api-common7.3.4-SNAPSHOTdirekt
Mavenorg.apache.activemq:activemq-client6.2.5direkt
Mavenorg.apache.commons:commons-lang33.20.0direkt
Mavenorg.awaitility:awaitility4.3.0direkt
Mavenorg.bouncycastle:bcprov-jdk18on1.84direkt
Mavenorg.springframework.boot:spring-boot-starter-security-oauth2-client4.0.6direkt
Mavenorg.springframework.cloud:spring-cloud-starter-openfeign5.0.1direkt
Mavenorg.springframework.security:spring-security-config7.0.5direkt
Mavenorg.springframework.security:spring-security-web7.0.5direkt
Maventools.jackson.core:jackson-databind3.2.0direkt
Mavencom.fasterxml.jackson.core:jackson-core2.21.2indirekt
Mavencom.fasterxml.jackson.datatype:jackson-datatype-jsr3102.21.2indirekt
Mavencom.github.stephenc.jcip:jcip-annotations1.0-1indirekt
Mavencom.nimbusds:content-type2.3indirekt
Mavencom.nimbusds:lang-tag1.7indirekt
Mavencom.nimbusds:oauth2-oidc-sdk11.26.1indirekt
Mavencommons-codec:commons-codec1.19.0indirekt
Mavencommons-io:commons-io2.19.0indirekt
Mavencommons-logging:commons-logging1.3.6indirekt
Mavenio.github.openfeign:feign-core13.6indirekt
Mavenio.github.openfeign:feign-form13.6indirekt
Mavenio.github.openfeign:feign-form-spring13.6indirekt
Mavenio.github.openfeign:feign-httpclient13.6indirekt
Mavenio.github.openfeign:feign-slf4j13.6indirekt
Mavenio.micrometer:micrometer-commons1.16.5indirekt
Mavenio.micrometer:micrometer-observation1.16.5indirekt
Mavenio.projectreactor:reactor-core3.8.5indirekt
Mavenjakarta.annotation:jakarta.annotation-api3.0.0indirekt
Mavenjakarta.jms:jakarta.jms-api3.1.0indirekt
Mavennet.minidev:accessors-smart2.6.0indirekt
Mavennet.minidev:json-smart2.6.0indirekt
Mavenorg.alfresco:alfresco-acs-java-rest-api-spring-boot7.3.4-SNAPSHOTindirekt
Mavenorg.alfresco:alfresco-auth-rest-api7.3.4-SNAPSHOTindirekt
Mavenorg.alfresco:alfresco-core-rest-api7.3.4-SNAPSHOTindirekt
Mavenorg.alfresco:alfresco-discovery-rest-api7.3.4-SNAPSHOTindirekt
Mavenorg.alfresco:alfresco-event-gateway-api-client7.3.4-SNAPSHOTindirekt
Mavenorg.alfresco:alfresco-governance-classification-rest-api7.3.4-SNAPSHOTindirekt
Mavenorg.alfresco:alfresco-governance-core-rest-api7.3.4-SNAPSHOTindirekt
Mavenorg.alfresco:alfresco-java-event-api-spring-boot-starter7.3.4-SNAPSHOTindirekt
Mavenorg.alfresco:alfresco-model-rest-api7.3.4-SNAPSHOTindirekt
Mavenorg.alfresco:alfresco-search-rest-api7.3.4-SNAPSHOTindirekt
Mavenorg.alfresco:alfresco-search-sql-rest-api7.3.4-SNAPSHOTindirekt
Mavenorg.apache.commons:commons-text1.13.0indirekt
Mavenorg.apache.httpcomponents:httpclient4.5.14indirekt
Mavenorg.apache.httpcomponents:httpcore4.4.16indirekt
Mavenorg.apache.logging.log4j:log4j-api2.25.4indirekt
Mavenorg.apache.logging.log4j:log4j-to-slf4j2.25.4indirekt
Mavenorg.apache.tomcat.embed:tomcat-embed-core11.0.22indirekt
Mavenorg.apache.tomcat.embed:tomcat-embed-el11.0.22indirekt
Mavenorg.apache.tomcat.embed:tomcat-embed-websocket11.0.22indirekt
Mavenorg.fusesource.hawtbuf:hawtbuf1.11indirekt
Mavenorg.hamcrest:hamcrest3.0indirekt
Mavenorg.jspecify:jspecify1.0.0indirekt
Mavenorg.ow2.asm:asm9.7.1indirekt
Mavenorg.reactivestreams:reactive-streams1.0.4indirekt
Mavenorg.slf4j:jul-to-slf4j2.0.17indirekt
Mavenorg.slf4j:slf4j-api2.0.17indirekt
Mavenorg.springframework.boot:spring-boot4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-activemq4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-autoconfigure4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-configuration-processor4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-http-client4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-http-converter4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-integration4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-jackson4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-jms4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-persistence4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-restclient4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-security4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-security-oauth2-client4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-servlet4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-starter4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-starter-activemq4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-starter-integration4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-starter-jackson4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-starter-logging4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-starter-security4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-starter-tomcat4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-starter-tomcat-runtime4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-starter-webmvc4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-tomcat4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-transaction4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-web-server4.0.6indirekt
Mavenorg.springframework.boot:spring-boot-webmvc4.0.6indirekt
Mavenorg.springframework.cloud:spring-cloud-commons5.0.1indirekt
Mavenorg.springframework.cloud:spring-cloud-context5.0.1indirekt
Mavenorg.springframework.cloud:spring-cloud-openfeign-core5.0.1indirekt
Mavenorg.springframework.cloud:spring-cloud-starter5.0.1indirekt
Mavenorg.springframework.integration:spring-integration-core7.0.4indirekt
Mavenorg.springframework.integration:spring-integration-jms7.0.4indirekt
Mavenorg.springframework.security:spring-security-core7.0.5indirekt
Mavenorg.springframework.security:spring-security-crypto7.0.5indirekt
Mavenorg.springframework.security:spring-security-oauth2-client7.0.5indirekt
Mavenorg.springframework.security:spring-security-oauth2-core7.0.5indirekt
Mavenorg.springframework.security:spring-security-oauth2-jose7.0.5indirekt
Mavenorg.springframework:spring-aop7.0.7indirekt
Mavenorg.springframework:spring-beans7.0.7indirekt
Mavenorg.springframework:spring-context7.0.7indirekt
Mavenorg.springframework:spring-core7.0.7indirekt
Mavenorg.springframework:spring-expression7.0.7indirekt
Mavenorg.springframework:spring-jms7.0.7indirekt
Mavenorg.springframework:spring-messaging7.0.7indirekt
Mavenorg.springframework:spring-tx7.0.7indirekt
Mavenorg.springframework:spring-web7.0.7indirekt
Mavenorg.springframework:spring-webmvc7.0.7indirekt
Mavenorg.yaml:snakeyaml2.5indirekt
Maventools.jackson.core:jackson-core3.1.2indirekt
Abhängigkeits-Advisories 0

Die Installation von maven:org.alfresco:alfresco-java-rest-api-common@7.3.3-A.2 zieht 58 Pakete nach sich, direkt und transitiv: 0 tragen bekannte Advisories, davon 0 direkte Abhängigkeiten.

Keine bekannten Advisories betreffen die bewerteten Abhängigkeiten.

Ein Advisory bedeutet, dass die im Abhängigkeitsgraphen erfasste Version in den betroffenen Bereich eines Advisories fällt. Erreichbarkeit wird nicht analysiert, und der Graph enthält Entwicklungs- und Test-Pins — ein Fund kann das Werkzeug betreffen und nicht die ausgelieferte Software.

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [
        "alfresco",
        "java",
        "sdk",
        "events",
        "rest-client",
        "out-of-process"
      ],
      "is_fork": false,
      "size_kb": 3915,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Java": 277807,
        "Scala": 521,
        "Shell": 8020,
        "Mustache": 50417
      },
      "pushed_at": "2026-07-23T21:03:26Z",
      "created_at": "2021-01-19T17:02:13Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T07:45:29Z",
      "description": "Alfresco Out-Of-Process SDK for Java Developers",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "develop",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Java",
      "significant_languages": [
        "Java",
        "Mustache"
      ]
    },
    "owner": {
      "blog": "https://www.alfresco.com",
      "name": "Alfresco Software",
      "type": "Organization",
      "login": "Alfresco",
      "company": null,
      "location": null,
      "followers": 435,
      "avatar_url": "https://avatars.githubusercontent.com/u/391127?v=4",
      "created_at": "2010-09-07T20:28:19Z",
      "is_verified": null,
      "public_repos": 137,
      "account_age_days": 5799
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "7.3.2",
          "kind": "patch",
          "published_at": "2026-06-04T09:23:57Z"
        },
        {
          "tag": "7.3.1",
          "kind": "patch",
          "published_at": "2026-04-23T10:43:33Z"
        },
        {
          "tag": "7.1.0",
          "kind": "minor",
          "published_at": "2025-03-18T06:12:53Z"
        },
        {
          "tag": "7.0.0",
          "kind": "major",
          "published_at": "2024-12-11T12:22:56Z"
        },
        {
          "tag": "6.4.0",
          "kind": "minor",
          "published_at": "2024-11-22T10:18:57Z"
        },
        {
          "tag": "6.3.0",
          "kind": "minor",
          "published_at": "2024-11-05T11:15:24Z"
        },
        {
          "tag": "6.2.0",
          "kind": "minor",
          "published_at": "2024-04-18T10:52:38Z"
        },
        {
          "tag": "6.2-M1",
          "kind": "other",
          "published_at": "2024-04-03T10:59:34Z"
        },
        {
          "tag": "v6.1.0",
          "kind": "minor",
          "published_at": "2024-03-06T13:20:54Z"
        },
        {
          "tag": "6.1-M3",
          "kind": "other",
          "published_at": "2024-01-25T09:12:50Z"
        },
        {
          "tag": "6.1-M2",
          "kind": "other",
          "published_at": "2024-01-09T15:38:58Z"
        },
        {
          "tag": "6.1-M1",
          "kind": "other",
          "published_at": "2023-12-27T16:03:46Z"
        },
        {
          "tag": "6.0.0",
          "kind": "major",
          "published_at": "2023-11-10T10:00:49Z"
        },
        {
          "tag": "6.0-M1",
          "kind": "other",
          "published_at": "2023-07-19T06:13:35Z"
        },
        {
          "tag": "v5.0.5",
          "kind": "patch",
          "published_at": "2022-07-05T14:59:48Z"
        },
        {
          "tag": "v5.2.0",
          "kind": "minor",
          "published_at": "2022-06-09T14:01:04Z"
        },
        {
          "tag": "v5.1.4",
          "kind": "patch",
          "published_at": "2022-06-09T11:28:51Z"
        },
        {
          "tag": "v5.1.3",
          "kind": "patch",
          "published_at": "2022-01-20T11:13:35Z"
        },
        {
          "tag": "v5.1.2",
          "kind": "patch",
          "published_at": "2021-11-15T13:25:55Z"
        },
        {
          "tag": "v5.1.1",
          "kind": "patch",
          "published_at": "2021-10-06T12:19:25Z"
        },
        {
          "tag": "v5.1.0",
          "kind": "minor",
          "published_at": "2021-10-04T10:40:08Z"
        },
        {
          "tag": "v5.0.4",
          "kind": "patch",
          "published_at": "2021-09-10T11:40:01Z"
        },
        {
          "tag": "v5.0.3",
          "kind": "patch",
          "published_at": "2021-08-26T09:50:28Z"
        },
        {
          "tag": "v5.0.2",
          "kind": "patch",
          "published_at": "2021-07-06T13:38:01Z"
        },
        {
          "tag": "v5.0.1",
          "kind": "patch",
          "published_at": "2021-05-21T10:23:27Z"
        },
        {
          "tag": "v5.0.0",
          "kind": "major",
          "published_at": "2021-03-19T15:33:59Z"
        },
        {
          "tag": "v5.0.0-M1",
          "kind": "prerelease",
          "published_at": "2021-03-18T17:38:44Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "42094adc9742f203a3bc34da3135dc9f5bce66f2",
          "body": "* Add workflow_dispatch inputs to trigger Maven Central release step independently\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n* Add tag existence validation for workflow_dispatch publishing\n\n* Handle Maven Ce\n[…]\nred-by: Abhra Poddar <abhra.poddar@hyland.com>\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\nCo-authored-by: Giovanni Toraldo <giovanni.toraldo@hyland.com>",
          "is_bot": false,
          "headline": "Enhancing workflow_dispatch to include input for release (#432)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-07-23T07:45:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a5cd2bd05a9865ebb3d480da1158fe95e38f6654",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-21T12:46:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30ff404b826d5a57ea31ce79ae71dafe582b224b",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.3",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-21T12:46:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "353aa119e50536adf31ae5e63d5a4a36c0638737",
          "body": "Please [release] and [publish] Alfresco OOP SDK 7.3.3 GA",
          "is_bot": false,
          "headline": "ACS-12198 : Please [release] and [publish] Alfresco OOP SDK 7.3.3 GA",
          "author_name": "Abhra Poddar",
          "author_login": "AbhraPoddar",
          "committed_at": "2026-07-21T12:39:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00d5b0c91da64ef584b4bd378f93bb1710a24a4b",
          "body": "ACS-12198 : Please [release] and [publish] Alfresco Out-of-Process SDK 7.3.3 GA",
          "is_bot": false,
          "headline": "ACS-12198 : Please [release] and [publish] Alfresco OOP SDK 7.3.3 GA",
          "author_name": "Abhra Poddar",
          "author_login": "AbhraPoddar",
          "committed_at": "2026-07-21T11:38:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a165e2c57f51c32d891557a166e7d2e16dda2798",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-13T10:20:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1af875cff9770c5b29754128ad876327a7f2578d",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.3-A.2",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-13T10:20:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5612325fbf69ba693786091a20be9a82dea37853",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-12157]: [release] [publish] Alfresco OOP SDK 7.3.3-A.2",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-07-13T10:14:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2651dabb17d8da4f695cb504acc17e3555d9535",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-13T08:31:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83ae9a5c4e4ea088b725cd9624cf5129c9884db2",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.3-A.1",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-13T08:31:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89f1d76c995507cd0765351a7ee767c89097122f",
          "body": "…(#425)",
          "is_bot": false,
          "headline": "[ACS-12157]: 7.3.3-A.1-SNAPSHOT [release] [publish] Alfresco OOP SDK …",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-07-13T08:24:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ebbe66478cbb51d0d927d54ddb23463fef901092",
          "body": "* Bump logback-core 1.5.37\n\n* Bump logback-classic to 1.5.37",
          "is_bot": false,
          "headline": "Bump logback-core 1.5.37 (#421)",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-07-09T09:07:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a48809fa4caf303afc10fe3fd956334670550ac",
          "body": "…1 (#420)\n\nBumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.22.0 to 2.22.1.\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n  dependency-version: 2.22.1\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.fasterxml.jackson.core:jackson-databind from 2.22.0 to 2.22.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-09T07:10:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b9d3b2bbeb3ed546a874c8963e586a3bcdd002b0",
          "body": "…n.core) (#419)\n\n* Bump jackson-databind to 2.22 (com.fatserxml) and 3.2.0 (tools.jackson.core)",
          "is_bot": false,
          "headline": "Bump jackson-databind to 2.22 (com.fasterxml) and 3.2.0 (tools.jackso…",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-07-02T13:28:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab1aa2ad2e6bc4b1c925009e1c1c9aa24e0f1ca0",
          "body": null,
          "is_bot": false,
          "headline": "ACS-1194 Added workflow permissions to CI (#417)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-26T15:28:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "854d68c4b4a305e60e44e6133e9da65d471028c2",
          "body": null,
          "is_bot": false,
          "headline": "ACS-12027 Removed unused ci secrets (#416)",
          "author_name": "Sayan Bhattacharya",
          "author_login": "bsayan2",
          "committed_at": "2026-06-17T06:38:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89434c83d32273147373641793e9d0138b9ed34d",
          "body": null,
          "is_bot": false,
          "headline": "ACS-12005 Remove Veracode integration (#414)",
          "author_name": "Gerard Olenski",
          "author_login": "gerardolenski",
          "committed_at": "2026-06-11T07:51:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "771d3866139923e8a1d12c9440fde266cf0c5243",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-04T08:39:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92ef6dd2f376673a91368c69e6de9cec0794b31a",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-04T08:39:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7af0844d81530c75eb93b2d9eda9899c489a2bc",
          "body": "…#410)\n\nBump AGS version and java sdk version",
          "is_bot": false,
          "headline": "[ACS-11837] : Please [release] and [publish] Alfresco OOP SDK 7.3.2 (…",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-06-04T08:31:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fde0dcf8284cc8a80fe463c451c596824bdacfcc",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T18:25:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66ede78be4f3aef0071de194d2ff1d4a54df01af",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.12",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T18:25:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a4c76473b0290f224fc413fdbefcbda043bed18",
          "body": "…12 (#409)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T18:18:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4c79f47cbc6f8ba927f2f1860a5c117153229fc",
          "body": null,
          "is_bot": false,
          "headline": "ACS-11431 List samples by name in mvn cmd (#408)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T18:10:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e75c3d386457c7773c8d55550d69476fb72085d0",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T17:58:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c79d5b879e0cdd77a473717980ffd271d3eeced7",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.11",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T17:58:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c2b18e4db91a2e0c1bbd38dcfdc198d7cb4a8ac",
          "body": "…11 (#407)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T17:33:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e6806d10877f270ff97762a93d028e717b3984a",
          "body": "…ssword in CI (#406)",
          "is_bot": false,
          "headline": "[ACS-11431] Add description to poms and updated MAVEN_USERNAME and pa…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T17:25:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e0f2bf557a069ba9cf3f509978ab90b8909291a",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T15:23:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77ca21b3c121e26a0e40487eef667af2346b2bbb",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.10",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T15:23:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "252983823556830c1c2dd73fc06783830355d83e",
          "body": "…10 (#405)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T15:16:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4e3d196629b8a43ab3123e8eae1dd6288c8bc8d",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-11431] Updated mvn command to leave out integration tests (#404)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T15:06:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a2cf602642a8a88009bddbdeb7112ed9ebccf07",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T14:03:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6c2452239a3ace962ba5dabbc50790ef23fb8eb",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.9",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T14:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15539963409662b3af1eb341089d97fa3dc44306",
          "body": "…9 (#403)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T13:56:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "574d5c58ff07e79b928a9777b030be699ffaf1c8",
          "body": null,
          "is_bot": false,
          "headline": "ACS-11431 Update mvn comand to be fully qualified (#400)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T13:06:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5aa34832584a0c930c5e7ee16c26745008d3ff45",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T01:30:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3dba34c97a7aecb9c924d1f0054b928877eda74f",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.8",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T01:30:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "963f957bcce63a258ef6b4b88d42c1157aa4d21f",
          "body": "…8 (#399)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T01:23:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42477a0b2dcc632209918a21ec6efbcdb1b35090",
          "body": null,
          "is_bot": false,
          "headline": "ACS-11431 Updated mvn command (#398)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T01:15:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d3e2aa5c11c3fe5fa27926f5aabcc873a99ab9d",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T19:56:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4573e5e60a275f1b469c990a8f08162b8be6aeb5",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.7",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T19:56:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c94c147cb561179140e0c92516dd952e8c475ae",
          "body": "…7 (#397)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T19:50:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8b6a689ebb37f40fe4726eb1a22b63b86ef34eb",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-11431] Updated CI to not push samples to maven (#396)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T19:44:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b3ce7445ffe3f46d1023b45748616d38f212d58",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T19:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c290567ab9e947fe60be808748e65fe15d89d807",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.6",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T19:16:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "878c815e2738ab72bf469a117a092e2a3a7077fa",
          "body": "…6 (#395)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T19:09:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c22012baf87107985bdea3e2d75e7034ad9da39",
          "body": null,
          "is_bot": false,
          "headline": "ACS-11431 Added \"-Dmaven.deploy.skip=true\" to maven_release.sh (#394)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T17:54:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "594b7131474a5c558edf7542471dd18838a0775c",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T16:47:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60a13be6c4477cb0d79ac6c3aa66fa4252a97dec",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.5",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T16:47:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08aac67ee2916e5f1fd2270b11eb0a22366f0b24",
          "body": "…5 (#393)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T16:41:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c052a3406ad5e88fe0dc4296cd305bfac955d1a7",
          "body": "…4 (#392)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T15:09:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c523f3a6227b74742a6edea8d1b76a02ed248bfb",
          "body": "…o maven (#391)",
          "is_bot": false,
          "headline": "[ACS-11431] Fix issue where artifacts are still not being published t…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T14:24:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fb7548c3ba4fb7db040e8c9345ab662aaa13c79",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-01T21:26:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea57fc74d1c878906eb84dd774264f7e8ccbda65",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.4",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-01T21:26:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbdd5ae72a1251a6eca0169d53fc67d5d44ef014",
          "body": "…4 (#390)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-01T21:20:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42b3446ea20d0a56e7ab117dfe3bdf7fa93552f9",
          "body": "…ally create/upload the Central bundle for all modules (#389)",
          "is_bot": false,
          "headline": "patch the Maven Central job to run deploy lifecycle which should actu…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-01T15:48:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06c76d7ed73a60b247d318f6e940c5f8696208c1",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-29T10:16:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f908afb54ac60980b398036ad0aea41c9ead7337",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.3",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-29T10:16:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5cb1bc8060c4b5d87cb274f2dee98ff82b2195f",
          "body": "bump alpha release version",
          "is_bot": false,
          "headline": "[ACS-11836]: [release] [publish] Alfresco OOP SDK 7.3.2-A.3",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-05-29T10:10:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "873f62c54c61780f9d61acb69f65ca522a7838a3",
          "body": "* Fixed issue where GPG key failed to import\n\n* Addressed env in Init step as per Dhavl, removed Validate step for Gio, fixed mvn command\n\n* Import GPG Key now leverages ghaction-crazy-max/import-gpg\n\n* Using action I created in alfresco-build-tools for importing GPG key\n\n* removed blank space\n\n---------\n\nCo-authored-by: Dhaval Patel <pateldhaval.kanubhai@hyland.com>",
          "is_bot": false,
          "headline": "ACS-11431 Fixing issue where GPG key failed to import (#386)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-05-29T09:05:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbb9f8f6cacac440a05e6b7ae8d86f01586f5da2",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-25T13:26:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef07b9d83bf04101ec2cb9451fbad394c40753ab",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.2",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-25T13:26:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "923a77c98557b83bea5385c51772d053f1068d2f",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-11836]: [release] [publish] Alfresco OOP SDK 7.3.2-A.2",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-05-25T13:20:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64cb1a3774f6d58b6154c3cd4369514cf45669a9",
          "body": "* Bump tomcat-embed-core and related artifacts to resolve CVE\n\nNow under dependency tree we can see it is updated\n\n+- org.apache.tomcat.embed:tomcat-embed-core:jar:11.0.22:compile\n+- org.apache.tomcat.embed:tomcat-embed-el:jar:11.0.22:compile\n+- org.apache.tomcat.embed:tomcat-embed-websocket:jar:11.\n[…]\n/appendix/dependency-versions/properties.html\n\n* Updating comments on xml file as suggested in PR\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: Upgrade Tomcat to 11.0.22 to resolve critical CVEs (#384)",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-05-25T12:09:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "32f1226c54da74196ee2d32c913d0040dc98cefe",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-25T07:20:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d3da17293b317fed4119887f64ef3ac67031af8",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.1",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-25T07:20:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7bc1e1ca8f52872451c07131154faffcc7c6015",
          "body": "* Adding env variables back to ci to resolve release error\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n* moved env variable from job level to step level as those only needed there\n\n* Potential fix for pull req\n[…]\n: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n* Removing comments\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "[ACS-11836]: [release] [publish] Alfresco OOP SDK 7.3.2-A.1",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-05-25T07:10:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d4c29d125633b8a2883b3a2a52bd654f80b45c43",
          "body": "* remove check_version block from ci\n\n* Removed needs: check_version",
          "is_bot": false,
          "headline": "ACS-11431 Remove unnecessary check_version block (#383)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-05-25T06:00:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "390731e5cb2a18f032e86c6a50f668cf30839619",
          "body": "*[ACS-11836]: [release] Alfresco OOP SDK 7.3.2-A.1\n\n* bump ags version",
          "is_bot": false,
          "headline": "[ACS-11836]: [release] Alfresco OOP SDK 7.3.2-A.1",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-05-22T11:22:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e17c1404a2d9517739515e1f049dda892287bf68",
          "body": "* Added an sdk-release Maven profile with the Sonatype Central publishing plugin plus source and GPG signing, added Central credentials to the CI settings template, and added workflow logic to gate Central publication to GA versions only and publish them to Maven Central after the existing release j\n[…]\nd the workflow so it no longer uses envsubst in ci.yml and instead just installs the static settings template, because the template now uses Maven’s ${env.*} notation consistently in .ci.settings.xml.",
          "is_bot": false,
          "headline": "ACS-11431 Fixed publishing to Maven Central upon release",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-05-21T15:05:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8c7126dc8f46a2b0f1e2408e9f2fb297a0332ce",
          "body": null,
          "is_bot": false,
          "headline": "Bumped spring-security-web from 7.0.4.jar → 7.0.5.jar (#380)",
          "author_name": "Sanjoy Das",
          "author_login": "SanjoyHyland2025",
          "committed_at": "2026-05-19T08:43:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8521651191ad43c810e409bbec4d849ee4927fe",
          "body": "This resolves the vulnerable spring-boot-security:4.0.5 pulled transitively via: alfresco-java-rest-api-common → spring-boot-starter-security-oauth2-client:4.0.5 → spring-boot-security:4.0.5",
          "is_bot": false,
          "headline": "Bumped spring-boot-starter-parent from 4.0.5 → 4.0.6 (#371)",
          "author_name": "Sanjoy Das",
          "author_login": "SanjoyHyland2025",
          "committed_at": "2026-05-14T09:12:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d68d2e5ae90af71751db725404056e1c3a4158c2",
          "body": "…e (#367)\n\nBumps [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) from 7.0.6 to 7.0.7.\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.6...v7.0.7)\n\n---\n[…]\nendency-version: 7.0.7\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.springframework:spring-webmvc in /samples/oauth2-feign-sampl…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T04:47:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bbe3ae9d808c06a767f99f9492934cce0cd7dbc",
          "body": "* ACS-11627 Migrate alfresco-java-sdk to GHAS\n\n* ACS-11627 updated groups\n\n* ACS-11627 updated ignore list\n\n* ACS-11627 removed docker ecosystem",
          "is_bot": false,
          "headline": "ACS-11627 Migrate alfresco-java-sdk to GHAS (#365)",
          "author_name": "Satyam Sah",
          "author_login": "SatyamSah5",
          "committed_at": "2026-05-13T23:55:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6de41f408b5b23330764ba561b70ecf10ea7d0da",
          "body": "* PRODSEC-11860 - Bump org.bouncycastle:bcprov-jdk18on:jar to 1.84\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472\n[…]\n28472+Copilot@users.noreply.github.com>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: AbhraPoddar <212726023+AbhraPoddar@users.noreply.github.com>",
          "is_bot": false,
          "headline": "PRODSEC-11860 - Bump org.bouncycastle:bcprov-jdk18on:jar to 1.84 (#370)",
          "author_name": "Abhra Poddar",
          "author_login": "AbhraPoddar",
          "committed_at": "2026-05-12T07:16:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "54ccbddad1e97be530d850f2e71a9ebb9e1ee243",
          "body": null,
          "is_bot": false,
          "headline": "Bump activemq-client to 6.2.5 (#360)",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-04-28T12:13:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0e084ab62c844dfff712548e07ae21adc0bf1ad",
          "body": null,
          "is_bot": false,
          "headline": "Bump to Spring Boot 4.0.6 (#359)",
          "author_name": "Shreya Saha",
          "author_login": "shsahahyland",
          "committed_at": "2026-04-24T13:34:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9cd8875d84263211b1c5553153b0aa58c1a5a83",
          "body": null,
          "is_bot": false,
          "headline": "AAE-43233 Upgrade Spring Boot from 4.0.2 to 4.0.5 (#344)",
          "author_name": "Edoardo Patti",
          "author_login": "astrologic7",
          "committed_at": "2026-04-22T14:52:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d97153bac2ba4cfdbe441299a737209473182d5",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-04-22T14:08:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8278d8e7676e7651f9d44035bd4011cec4fdf20d",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.1",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-04-22T14:08:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba6d7120de0df1d7e27150e45ad5e196fb74b3f0",
          "body": "* Release Alfresco OOP SDK 7.3.1\n\n* fix review comments\n\n---------\n\nCo-authored-by: SanjoyHyland2025 <Sanjoy.Das@hyland.com>",
          "is_bot": false,
          "headline": "Please [release] and [publish] OOP SDK 7.3.1",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-04-22T14:01:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2f9d7e8c1cb20928bcac307a129697502bc8eb7",
          "body": "* Draft SDK release",
          "is_bot": false,
          "headline": "SDK draft release (#357)",
          "author_name": "Sanjoy Das",
          "author_login": "SanjoyHyland2025",
          "committed_at": "2026-04-22T08:59:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2eadfdb0f35aed2912b1ef1571322e572ef56716",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-04-10T13:26:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bbae17781f1b9e136bc2a0510709f6b5eb86c60",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.1-A.1",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-04-10T13:26:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f38c4f434a39049789a6bbc9ba1a9e02f39e5d2e",
          "body": "… (#350)",
          "is_bot": false,
          "headline": "[ACS-11528]: 7.3.1-A.1-SNAPSHOT [release] [publish] Alfresco OOP SDK …",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-04-10T13:19:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b6f09dc6af5592a25c8be4375d2e6a215d59dd0",
          "body": "* Bump tomcat-embed-core  PRODSEC-11559\n\n* Bump spring-boot-starter  PRODSEC-11330",
          "is_bot": false,
          "headline": "Bump tomcat-embed-core  PRODSEC-11559 (#349)",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-04-10T11:53:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a71f81431174747a22febd92d9e997902f6b4001",
          "body": "…d PRODSEC-11400 (#348)\n\n* Bump spring-web-mvc and spring-security-web versions PRODSEC-11398 and PRODSEC-11400",
          "is_bot": false,
          "headline": "Bump spring-web-mvc and spring-security-web versions PRODSEC-11398 an…",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-04-10T04:03:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a42de03171d7927b0e80282d64cff20bd30fc49e",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-03-10T16:03:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e89b79b0db4db3f92bef7eea42dd2af23d1162d8",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.0",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-03-10T16:03:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4c38a8e99aee9083caa175b7a3b299b07941faa",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-11186] Please [release] and [publish] OOP SDK 7.3.0 (#342)",
          "author_name": "Kacper Magdziarz",
          "author_login": "kmagdziarz",
          "committed_at": "2026-03-10T15:56:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5546eef5d9805623cd5a4fac810902cf382832d",
          "body": "Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 12.4.3 to 15.7.1.\n- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)\n- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/v12.4.3...v15.7.1)\n\n---\nupdated-dependencie\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump Alfresco/alfresco-build-tools from 12.4.3 to 15.7.1 (#340)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-04T09:28:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3b49c6f0f14dd02e7ee1a27d57162167111fd914",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-11187] Releasing OOP SDK 7.3.0-A.1-SNAPSHOT (#339)",
          "author_name": "Grzegorz Oleksy",
          "author_login": "goleksyalfresco",
          "committed_at": "2026-02-27T13:32:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd8d9af6dc9c9302ad9d4e62212e5c68a501cfd4",
          "body": null,
          "is_bot": false,
          "headline": "ACS-10901 bump ags.version to 26.1.0.58 (#338)",
          "author_name": "Sayan Bhattacharya",
          "author_login": "bsayan2",
          "committed_at": "2026-02-27T12:41:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "424e573e73abc28c93d63fecea7fb5f880b3e01c",
          "body": "* [ACS-11053] Bump Spring Boot to 4\n\n* [ACS-11053] CI Improvements\n\n* [ACS-11053] Remove Password Grant Flow\n\n* [ACS-11053] Update README.md with properties for ActiveMQ\n\n* [ACS-11053] Add OAuth sample\n\n* [ACS-11053] Add basic ACS compose for integration tests",
          "is_bot": false,
          "headline": "[ACS-11053] Bump Spring Boot to 4 (#337)",
          "author_name": "Kacper Magdziarz",
          "author_login": "kmagdziarz",
          "committed_at": "2026-02-16T15:48:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a8f152abb36ba0f74115bf1b5441d28054f314f",
          "body": "…24 (#326)\n\n* [PRODSEC-10611]: bump commons-lang3 to 3.20.0 in parent and in independent sub module\n\n* comment added to explain adding dependency in samples\n\n* Update samples/pom.xml\n\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "[PRODSEC-10611]: Bump commons-lang3 to 3.20.0 to address CVE-2025-489…",
          "author_name": "Vivek Kumar",
          "author_login": "Vivekkr0311",
          "committed_at": "2025-11-21T10:15:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "acbb40a2610365a2f6bab76f67a6da0521672888",
          "body": null,
          "is_bot": false,
          "headline": "AAE-39573 Bump Spring Boot to 3.5.7 (#321)",
          "author_name": "mikolajbrzezinski",
          "author_login": "mikolajbrzezinski",
          "committed_at": "2025-11-05T08:59:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea752b89121b77a9fdf4f9548657371d230993a2",
          "body": null,
          "is_bot": false,
          "headline": "AAE-36465 Bump Spring Boot to 3.5.6 (#319)",
          "author_name": "Aleksandra Onych",
          "author_login": "aonych",
          "committed_at": "2025-10-23T09:51:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67c077ecb41d856f56b1272055a30b3799bc8ce7",
          "body": "…9.37.3.jar in Alfresco Java SDK fix (#314)\n\n* [PRODSEC-10532]: nimbus-jose-jwt explicilty bump to fix vuln",
          "is_bot": false,
          "headline": "[PRODSEC-10532]: CVE Vulnerability CVE-2025-53864 in nimbus-jose-jwt-…",
          "author_name": "Vivek",
          "author_login": "Vivekkr0311",
          "committed_at": "2025-10-22T09:48:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a643ccc3bcf12e9608bd2206dcead7b26227f9f",
          "body": null,
          "is_bot": false,
          "headline": "AAE-37781 Update Spring Boot 3.4.9 (#310)",
          "author_name": "Giovanni Fertuso",
          "author_login": "Giovanni007",
          "committed_at": "2025-09-03T07:42:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 27,
      "commits_last_year": 100,
      "latest_release_at": "2026-06-04T09:23:57Z",
      "latest_release_tag": "7.3.2",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 22,
      "days_since_latest_release": 50,
      "mean_days_between_releases": 95.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "org.alfresco:alfresco-java-rest-api-common",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/org.alfresco/alfresco-java-rest-api-common",
          "is_deprecated": false,
          "latest_version": "7.3.3-A.2",
          "repository_url": null,
          "versions_count": 5,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-21T14:46:02Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 3
        }
      ]
    },
    "popularity": {
      "forks": 9,
      "stars": 22,
      "watchers": 47,
      "fork_history": {
        "days": [
          {
            "date": "2021-03-19",
            "count": 1
          },
          {
            "date": "2021-04-14",
            "count": 1
          },
          {
            "date": "2021-05-25",
            "count": 1
          },
          {
            "date": "2021-06-04",
            "count": 1
          },
          {
            "date": "2022-01-31",
            "count": 1
          },
          {
            "date": "2022-02-19",
            "count": 1
          },
          {
            "date": "2025-05-16",
            "count": 1
          },
          {
            "date": "2025-07-10",
            "count": 1
          },
          {
            "date": "2025-10-11",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 9,
        "total_forks": 9
      },
      "star_history": null,
      "open_issues_and_prs": 30
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "sample",
        "samples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/alfresco-event-gateway-api-client/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-auth-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-core-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-discovery-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-governance-classification-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-governance-core-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-model-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-search-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-search-sql-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-spring-boot-starter/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-spring-boot/pom.xml",
        "alfresco-acs-java-rest-api/pom.xml",
        "alfresco-java-event-api/alfresco-java-event-api-handling/pom.xml",
        "alfresco-java-event-api/alfresco-java-event-api-integration/pom.xml",
        "alfresco-java-event-api/alfresco-java-event-api-spring-boot-starter/pom.xml",
        "alfresco-java-event-api/alfresco-java-event-api-spring-boot/pom.xml",
        "alfresco-java-event-api/pom.xml",
        "alfresco-java-rest-api-common/pom.xml",
        "integration-tests/pom.xml",
        "pom.xml",
        "samples/event-api-handlers/pom.xml",
        "samples/event-api-spring-integration/pom.xml",
        "samples/extension-template/pom.xml",
        "samples/oauth2-feign-sample/pom.xml",
        "samples/pom.xml"
      ],
      "largest_source_bytes": 9528,
      "source_files_sampled": 121,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "alfresco-acs-java-rest-api/pom.xml",
        "alfresco-java-event-api/pom.xml",
        "alfresco-java-rest-api-common/pom.xml",
        "integration-tests/pom.xml",
        "pom.xml",
        "samples/pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 58,
        "malicious_count": 0,
        "assessed_package": "maven:org.alfresco:alfresco-java-rest-api-common@7.3.3-A.2",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "org.alfresco:alfresco-java-event-api-handling",
          "manifest": "alfresco-java-event-api/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.alfresco:alfresco-java-event-api-integration",
          "manifest": "alfresco-java-event-api/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.alfresco:alfresco-java-event-api-spring-boot",
          "manifest": "alfresco-java-event-api/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.springframework.cloud:spring-cloud-starter-openfeign",
          "manifest": "alfresco-java-rest-api-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.springframework.boot:spring-boot-starter-security-oauth2-client",
          "manifest": "alfresco-java-rest-api-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.springframework.security:spring-security-web",
          "manifest": "alfresco-java-rest-api-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.spring-security-web.version}"
        },
        {
          "name": "org.springframework.security:spring-security-config",
          "manifest": "alfresco-java-rest-api-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.nimbusds:nimbus-jose-jwt",
          "manifest": "alfresco-java-rest-api-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.alfresco:alfresco-acs-java-rest-api-spring-boot-starter",
          "manifest": "integration-tests/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.awaitility:awaitility",
          "manifest": "integration-tests/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.springframework.cloud:spring-cloud-dependencies",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${spring-cloud.version}"
        },
        {
          "name": "io.swagger:swagger-annotations",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${swagger-core.version}"
        },
        {
          "name": "org.springframework.cloud:spring-cloud-openfeign-dependencies",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${spring-cloud.version}"
        },
        {
          "name": "org.alfresco:alfresco-java-rest-api-common",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.alfresco:acs-event-model",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${acs-event-model.version}"
        },
        {
          "name": "commons-fileupload:commons-fileupload",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${common-fileupload.version}"
        },
        {
          "name": "org.springframework.security:spring-security-web",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.spring-security-web.version}"
        },
        {
          "name": "com.nimbusds:nimbus-jose-jwt",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${com.nimbusds.outh2.sdk.version}"
        },
        {
          "name": "org.apache.commons:commons-lang3",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${org.apache.common-lang-3.version}"
        },
        {
          "name": "org.apache.activemq:activemq-client",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${activemq-client.version}"
        },
        {
          "name": "org.bouncycastle:bcprov-jdk18on",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.bouncycastle.version}"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-databind",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.jackson-databind.version}"
        },
        {
          "name": "tools.jackson.core:jackson-databind",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.tools-jackson-databind.version}"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-annotations",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.jackson-annotations.version}"
        },
        {
          "name": "ch.qos.logback:logback-classic",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.logback-classic.version}"
        },
        {
          "name": "ch.qos.logback:logback-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.logback-core.version}"
        },
        {
          "name": "commons-fileupload:commons-fileupload",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "ch.qos.logback:logback-classic",
            "direct": true,
            "version": "1.5.37",
            "ecosystem": "maven"
          },
          {
            "name": "ch.qos.logback:logback-core",
            "direct": true,
            "version": "1.5.37",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-annotations",
            "direct": true,
            "version": "2.22",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": true,
            "version": "2.22.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.nimbusds:nimbus-jose-jwt",
            "direct": true,
            "version": "10.5",
            "ecosystem": "maven"
          },
          {
            "name": "commons-fileupload:commons-fileupload",
            "direct": true,
            "version": "1.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.swagger:swagger-annotations",
            "direct": true,
            "version": "1.5.20",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:acs-event-model",
            "direct": true,
            "version": "1.1.0-A.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-acs-java-rest-api-spring-boot-starter",
            "direct": true,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-java-event-api-handling",
            "direct": true,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-java-event-api-integration",
            "direct": true,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-java-event-api-spring-boot",
            "direct": true,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-java-rest-api-common",
            "direct": true,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.activemq:activemq-client",
            "direct": true,
            "version": "6.2.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": true,
            "version": "3.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.awaitility:awaitility",
            "direct": true,
            "version": "4.3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.bouncycastle:bcprov-jdk18on",
            "direct": true,
            "version": "1.84",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-security-oauth2-client",
            "direct": true,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.cloud:spring-cloud-starter-openfeign",
            "direct": true,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-config",
            "direct": true,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-web",
            "direct": true,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "tools.jackson.core:jackson-databind",
            "direct": true,
            "version": "3.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-core",
            "direct": false,
            "version": "2.21.2",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.datatype:jackson-datatype-jsr310",
            "direct": false,
            "version": "2.21.2",
            "ecosystem": "maven"
          },
          {
            "name": "com.github.stephenc.jcip:jcip-annotations",
            "direct": false,
            "version": "1.0-1",
            "ecosystem": "maven"
          },
          {
            "name": "com.nimbusds:content-type",
            "direct": false,
            "version": "2.3",
            "ecosystem": "maven"
          },
          {
            "name": "com.nimbusds:lang-tag",
            "direct": false,
            "version": "1.7",
            "ecosystem": "maven"
          },
          {
            "name": "com.nimbusds:oauth2-oidc-sdk",
            "direct": false,
            "version": "11.26.1",
            "ecosystem": "maven"
          },
          {
            "name": "commons-codec:commons-codec",
            "direct": false,
            "version": "1.19.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": false,
            "version": "2.19.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-logging:commons-logging",
            "direct": false,
            "version": "1.3.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.openfeign:feign-core",
            "direct": false,
            "version": "13.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.openfeign:feign-form",
            "direct": false,
            "version": "13.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.openfeign:feign-form-spring",
            "direct": false,
            "version": "13.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.openfeign:feign-httpclient",
            "direct": false,
            "version": "13.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.openfeign:feign-slf4j",
            "direct": false,
            "version": "13.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.micrometer:micrometer-commons",
            "direct": false,
            "version": "1.16.5",
            "ecosystem": "maven"
          },
          {
            "name": "io.micrometer:micrometer-observation",
            "direct": false,
            "version": "1.16.5",
            "ecosystem": "maven"
          },
          {
            "name": "io.projectreactor:reactor-core",
            "direct": false,
            "version": "3.8.5",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.annotation:jakarta.annotation-api",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.jms:jakarta.jms-api",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "net.minidev:accessors-smart",
            "direct": false,
            "version": "2.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "net.minidev:json-smart",
            "direct": false,
            "version": "2.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-acs-java-rest-api-spring-boot",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-auth-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-core-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-discovery-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-event-gateway-api-client",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-governance-classification-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-governance-core-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-java-event-api-spring-boot-starter",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-model-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-search-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-search-sql-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-text",
            "direct": false,
            "version": "1.13.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpclient",
            "direct": false,
            "version": "4.5.14",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpcore",
            "direct": false,
            "version": "4.4.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-api",
            "direct": false,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-to-slf4j",
            "direct": false,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.tomcat.embed:tomcat-embed-core",
            "direct": false,
            "version": "11.0.22",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.tomcat.embed:tomcat-embed-el",
            "direct": false,
            "version": "11.0.22",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.tomcat.embed:tomcat-embed-websocket",
            "direct": false,
            "version": "11.0.22",
            "ecosystem": "maven"
          },
          {
            "name": "org.fusesource.hawtbuf:hawtbuf",
            "direct": false,
            "version": "1.11",
            "ecosystem": "maven"
          },
          {
            "name": "org.hamcrest:hamcrest",
            "direct": false,
            "version": "3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.jspecify:jspecify",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.ow2.asm:asm",
            "direct": false,
            "version": "9.7.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.reactivestreams:reactive-streams",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:jul-to-slf4j",
            "direct": false,
            "version": "2.0.17",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": false,
            "version": "2.0.17",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-activemq",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-autoconfigure",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-configuration-processor",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-http-client",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-http-converter",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-integration",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-jackson",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-jms",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-persistence",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-restclient",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-security",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-security-oauth2-client",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-servlet",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-activemq",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-integration",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-jackson",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-logging",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-security",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-tomcat",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-tomcat-runtime",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-webmvc",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-tomcat",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-transaction",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-web-server",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-webmvc",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.cloud:spring-cloud-commons",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.cloud:spring-cloud-context",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.cloud:spring-cloud-openfeign-core",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.cloud:spring-cloud-starter",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.integration:spring-integration-core",
            "direct": false,
            "version": "7.0.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.integration:spring-integration-jms",
            "direct": false,
            "version": "7.0.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-core",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-crypto",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-oauth2-client",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-oauth2-core",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-oauth2-jose",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-aop",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-beans",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-context",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-core",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-expression",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-jms",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-messaging",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-tx",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-web",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-webmvc",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.yaml:snakeyaml",
            "direct": false,
            "version": "2.5",
            "ecosystem": "maven"
          },
          {
            "name": "tools.jackson.core:jackson-core",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "maven"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 119,
        "direct_count": 22,
        "indirect_count": 97
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 18,
        "merged_prs": 269,
        "open_issues": 12,
        "closed_ratio": 0.429,
        "closed_issues": 9,
        "closed_unmerged_prs": 124
      },
      "bus_factor": 5,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "alfresco-build",
          "commits": 42,
          "avatar_url": "https://avatars.githubusercontent.com/u/8039454?v=4"
        },
        {
          "type": "User",
          "login": "zoltanpalfi",
          "commits": 40,
          "avatar_url": "https://avatars.githubusercontent.com/u/32622330?v=4"
        },
        {
          "type": "User",
          "login": "miguelruizdev",
          "commits": 38,
          "avatar_url": "https://avatars.githubusercontent.com/u/32025234?v=4"
        },
        {
          "type": "User",
          "login": "adecatur72",
          "commits": 23,
          "avatar_url": "https://avatars.githubusercontent.com/u/82901628?v=4"
        },
        {
          "type": "User",
          "login": "josorno-ccc",
          "commits": 18,
          "avatar_url": "https://avatars.githubusercontent.com/u/269237685?v=4"
        },
        {
          "type": "User",
          "login": "igdianov",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/20428629?v=4"
        },
        {
          "type": "User",
          "login": "code4uuuu",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/110275771?v=4"
        },
        {
          "type": "User",
          "login": "SathishK-T",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/166369440?v=4"
        },
        {
          "type": "User",
          "login": "Somnath-Deshmukh",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/224557454?v=4"
        },
        {
          "type": "User",
          "login": "purusothaman-mm",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/164840115?v=4"
        }
      ],
      "contributors_sampled": 46,
      "top_contributor_share": 0.144
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "dependency-graph.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 4,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "16 out of 16 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 5,
            "reason": "Found 14/28 approved changesets -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 6 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "42094adc9742f203a3bc34da3135dc9f5bce66f2",
        "ran_at": "2026-07-25T06:01:11Z",
        "aggregate_score": 6.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T21:03:24Z",
      "oldest_open_prs": [
        {
          "number": 353,
          "created_at": "2026-04-16T09:56:07Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 362,
          "created_at": "2026-04-29T20:45:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 363,
          "created_at": "2026-04-29T20:45:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 368,
          "created_at": "2026-05-07T10:55:48Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 372,
          "created_at": "2026-05-13T23:56:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 374,
          "created_at": "2026-05-13T23:57:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 375,
          "created_at": "2026-05-13T23:57:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 377,
          "created_at": "2026-05-14T02:24:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 379,
          "created_at": "2026-05-14T04:55:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 402,
          "created_at": "2026-06-03T08:24:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 413,
          "created_at": "2026-06-10T21:03:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 415,
          "created_at": "2026-06-16T21:03:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 418,
          "created_at": "2026-06-29T21:02:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 422,
          "created_at": "2026-07-09T21:02:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 423,
          "created_at": "2026-07-09T21:03:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 424,
          "created_at": "2026-07-10T21:02:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 427,
          "created_at": "2026-07-21T09:09:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 433,
          "created_at": "2026-07-22T07:04:34Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-23T07:45:24Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 58,
          "created_at": "2021-05-13T19:13:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 96,
          "created_at": "2021-10-29T04:06:30Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 97,
          "created_at": "2021-10-29T08:31:56Z",
          "last_comment_at": "2022-04-27T08:49:43Z",
          "last_comment_author": "jlosornogil"
        },
        {
          "number": 127,
          "created_at": "2022-01-11T07:31:48Z",
          "last_comment_at": "2022-05-12T07:43:44Z",
          "last_comment_author": "XPOHUK"
        },
        {
          "number": 128,
          "created_at": "2022-01-11T07:36:35Z",
          "last_comment_at": "2022-05-05T13:07:08Z",
          "last_comment_author": "jlosornogil"
        },
        {
          "number": 130,
          "created_at": "2022-01-14T14:55:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 137,
          "created_at": "2022-02-08T01:33:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 171,
          "created_at": "2022-12-23T20:05:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 191,
          "created_at": "2023-03-22T12:11:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 220,
          "created_at": "2024-01-02T10:39:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 223,
          "created_at": "2024-02-26T13:36:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 236,
          "created_at": "2024-05-17T10:19:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/Alfresco/alfresco-java-sdk",
    "host": "github.com",
    "name": "alfresco-java-sdk",
    "owner": "Alfresco"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 75,
      "inputs": {
        "security": 72,
        "vitality": 84,
        "community": 44,
        "governance": 79,
        "engineering": 90
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 84,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "commits_last_year": 100,
              "human_commit_share": 0.97,
              "days_since_last_push": 1,
              "active_weeks_last_year": 22
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "22/52 weeks with commits",
                "points": 15.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 22
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "100 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "releases_count": 27,
              "latest_release_tag": "7.3.2",
              "releases_from_tags": false,
              "days_since_latest_release": 50,
              "mean_days_between_releases": 95.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "27 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 27
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 50 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 50
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~95.7 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 95.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 1 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 44,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 38,
            "inputs": {
              "forks": 9,
              "stars": 22,
              "watchers": 47,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "22 stars",
                "points": 21.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 22
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "9 forks",
                "points": 7.5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "47 watchers",
                "points": 9.2,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 47
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 79,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "bus_factor": 5,
              "contributors_sampled": 46,
              "top_contributor_share": 0.144
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "5 contributor(s) cover half of all commits",
                "points": 45.9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 14% of commits",
                "points": 19.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 14
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "46 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 46
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "merged_prs": 269,
              "open_issues": 12,
              "closed_issues": 9,
              "issue_closed_ratio": 0.429,
              "closed_unmerged_prs": 124
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "43% of issues closed",
                "points": 20.1,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 43
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "269/393 decided PRs merged",
                "points": 26.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 269,
                      "decided": 393
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 14/28 approved changesets -- score normalized to 5",
                "points": 7.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "followers": 435,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "Alfresco",
              "public_repos": 137,
              "account_age_days": 5799
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "435 followers of Alfresco",
                "points": 19,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 435,
                      "login": "Alfresco"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "137 public repos, account ~15 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 137
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "org.alfresco:alfresco-java-rest-api-common"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 3
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 3 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "5 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 90,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 16,
                "status": "met",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "16 out of 16 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "alfresco",
                "java",
                "sdk",
                "events",
                "rest-client",
                "out-of-process"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "6 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 72,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 65,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 6.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "16 out of 16 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 14/28 approved changesets -- score normalized to 5",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:org.alfresco:alfresco-java-rest-api-common@7.3.3-A.2 runtime dependency closure — what installing the published package pulls in — 58 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:org.alfresco:alfresco-java-rest-api-common@7.3.3-A.2",
                  "assessed": 58
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 58,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 58,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 62,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.381,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "37 of 97 human commits state their intent (structured subject or explanatory body)",
                "points": 20.3,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 37,
                      "sampled": 97
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 88,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.05,
              "toolchain_manifests": [
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/alfresco-event-gateway-api-client/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-auth-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-core-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-discovery-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-governance-classification-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-governance-core-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-model-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-search-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-search-sql-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-spring-boot-starter/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-spring-boot/pom.xml",
                "alfresco-acs-java-rest-api/pom.xml",
                "alfresco-java-event-api/alfresco-java-event-api-handling/pom.xml",
                "alfresco-java-event-api/alfresco-java-event-api-integration/pom.xml",
                "alfresco-java-event-api/alfresco-java-event-api-spring-boot-starter/pom.xml",
                "alfresco-java-event-api/alfresco-java-event-api-spring-boot/pom.xml",
                "alfresco-java-event-api/pom.xml",
                "alfresco-java-rest-api-common/pom.xml",
                "integration-tests/pom.xml",
                "pom.xml",
                "samples/event-api-handlers/pom.xml",
                "samples/event-api-spring-integration/pom.xml",
                "samples/extension-template/pom.xml",
                "samples/oauth2-feign-sample/pom.xml",
                "samples/pom.xml"
              ],
              "dependency_bot_commit_share": 0.03
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/alfresco-event-gateway-api-client/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-auth-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-core-rest-api/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/alfresco-event-gateway-api-client/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-auth-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-core-rest-api/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 11,
                "status": "met",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "5 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 5,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "3 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 3,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 9528,
              "source_files_sampled": 121,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/121 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 121,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "sample",
                "samples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "sample, samples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "sample, samples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch maven package 'org.alfresco:integration-tests' from its registry"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T06:01:52.227377Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/Alfresco/alfresco-java-sdk.svg",
  "full_name": "Alfresco/alfresco-java-sdk",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte StatistikenMaven.