Öffentliches RegisterMittel
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-25 09:59 UTC
bcgit / bc-java
Bouncy Castle Java Distribution (Mirror)
bcgit/bc-java erreicht einen Gesundheitsindex von 66 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Community & Adoption (82/100) ab, am schwächsten bei Sustainability & Governance (52/100). Zuletzt heute aktualisiert. Ein einzelner Mitwirkender trägt den Großteil der jüngsten Arbeit.
66
gesamt / 100Software-Gesundheitsindex
Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.
66
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
Bewertungsprofil
Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.
Eigentümerschaft
Legion of the Bouncy Castle IncOrganisation
296 Follower9 öffentliche Reposseit Mai 2013
Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.
Metriken nach Kategorie
Vitalität
Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?
60
Entwicklungsaktivität
100Exzellent
Wie die Bewertung erfolgt
| 36/36 | Push-Aktualität — letzter Push vor 0 Tagen |
| 36/36 | Commit-Rhythmus — 52/52 Wochen mit Commits |
| 18/18 | Commit-Volumen — 1.693 Commits im letzten Jahr |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
Verwendete Eingangsdaten
| commits_last_year | 1.693 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 52 |
Release-Disziplin
1Kritisch
Wie die Bewertung erfolgt
| 0/27 | Liefert Releases aus — keine Releases veröffentlicht |
| 0/36 | Release-Aktualität — keine Releases |
| 0/27 | Release-Rhythmus — keine Releases |
| 0/10 | OpenSSF Scorecard: Signed-Releases — keine Daten |
Verwendete Eingangsdaten
| releases_count | 0 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.
Community & Verbreitung
Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?
82
Popularität & Verbreitung
92Exzellent
Wie die Bewertung erfolgt
| 55.6/60 | Stars — 2.670 Stars |
| 25/25 | Forks — 1.264 Forks |
| 11.8/15 | Watcher — 135 Watcher |
Verwendete Eingangsdaten
| forks | 1.264 |
| stars | 2.670 |
| watchers | 135 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community-Gesundheit
70Gut
Wie die Bewertung erfolgt
| 22.5/22.5 | README |
| 22.5/22.5 | Lizenz — anerkannte Lizenz (MIT) |
| 18/18 | CONTRIBUTING-Leitfaden |
| 0/13.5 | Verhaltenskodex |
| 0/7.2 | Issue-Vorlage |
| 0/6.3 | PR-Vorlage |
Verwendete Eingangsdaten
| has_readme | ja |
| has_license | ja |
| has_contributing | ja |
| has_issue_template | nein |
| has_code_of_conduct | nein |
| has_pull_request_template | nein |
Nachhaltigkeit & Governance
Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?
52
Maintainer-Resilienz (Bus-Faktor)
42Gefährdet
Wie die Bewertung erfolgt
| 9/54 | Bus-Faktor — 1 Beitragende decken die Hälfte aller Commits ab |
| 9.7/22.5 | Commit-Verteilung — wichtigste beitragende Person verfasste 57 % der Commits |
| 13.5/13.5 | Breite der Beitragenden — 100 Beitragende |
| 10/10 | OpenSSF Scorecard: Contributors — project has 34 contributing companies or organizations |
Verwendete Eingangsdaten
| bus_factor | 1 |
| contributors_sampled | 100 |
| top_contributor_share | 0,568 |
Reaktionsfähigkeit bei Issues & PRs
48Gefährdet
Wie die Bewertung erfolgt
| 44.9/46.8 | Issue-Lösungsquote — 96 % der Issues geschlossen |
| 2.9/38.3 | PR-Annahme — 43/561 entschiedene PRs gemergt |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Verwendete Eingangsdaten
| merged_prs | 43 |
| open_issues | 64 |
| closed_issues | 1.548 |
| issue_closed_ratio | 0,96 |
| closed_unmerged_prs | 518 |
Eigentümerschaft & Trägerschaft
67Mittel
Wie die Bewertung erfolgt
| 30/30 | Organisatorische Trägerschaft — im Besitz einer Organisation |
| 0/20 | Verifizierte Domain |
| 17.8/25 | Reichweite des Inhabers — 296 Follower von bcgit |
| 19.3/25 | Kontohistorie — 9 öffentliche Repos, Kontoalter ca. 13 Jahre |
Verwendete Eingangsdaten
| followers | 296 |
| owner_type | Organization |
| is_verified | — |
| owner_login | bcgit |
| public_repos | 9 |
| account_age_days | 4.804 |
Engineering-Qualität
Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?
76
Engineering-Praktiken
60Mittel
Wie die Bewertung erfolgt
| 24/24 | CI-Workflows — 1 Workflow(s) |
| 24/24 | Tests vorhanden |
| 0/16 | Linter-Konfiguration |
| 0/9.6 | Pre-Commit-Hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — keine Daten |
Verwendete Eingangsdaten
| has_ci | ja |
| has_tests | ja |
| has_editorconfig | nein |
| has_linter_config | nein |
| has_precommit_config | nein |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: CI-Tests. Die verbleibenden Gewichte wurden renormalisiert.
Dokumentation
100Exzellent
Wie die Bewertung erfolgt
| 30/30 | README |
| 25/25 | Dokumentationsverzeichnis |
| 15/15 | Dokumentations-/Homepage-Site — https://www.bouncycastle.org/download/bouncy-castle-java/ |
| 10/10 | Repository-Beschreibung |
| 10/10 | Topics — 6 Topics |
| 10/10 | Wiki |
Verwendete Eingangsdaten
| topics | crypto, java, openpgp, dtls, post-quantum-cryptography, tls |
| has_wiki | ja |
| homepage | https://www.bouncycastle.org/download/bouncy-castle-java/ |
| has_readme | ja |
| has_docs_dir | ja |
| has_description | ja |
Sicherheit
Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?
63
Sicherheitslage
63Mittel
Wie die Bewertung erfolgt
| 0/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — keine Daten |
| 0/2.5 | CI-Tests — keine Daten |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 34 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | Lizenz — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — keine Daten |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool detected: CodeQL |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — keine Daten |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Verwendete Eingangsdaten
| source | openssf_scorecard |
| checks_evaluated | 14 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 4 |
| scorecard_aggregate | 6,3 |
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): branch_protection, ci_tests, packaging, signed_releases. Die verbleibenden Gewichte wurden renormalisiert.
AI Readiness
Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.
70
Wie die Bewertung erfolgt
| 45/45 | Agentenanweisungen — CLAUDE.md |
| 0/15 | Maschinenlesbare Doku (llms.txt) |
| 25.1/40 | Lesbare Commit-Historie — 47 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text) |
Verwendete Eingangsdaten
| has_llms_txt | nein |
| legible_history_share | 0,47 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 1.407 |
Wie die Bewertung erfolgt
| 12.6/18 | Bootstrap mit einem Befehl — bom/build.gradle, build.gradle, core/build.gradle (Toolchain-Konvention, kein Task-Runner) |
| 22/22 | Automatisierte Tests |
| 0/11 | Lint-/Format-Konfiguration |
| 11/11 | Statische Typprüfung — Java (statisch typisiert) |
| 10/10 | Reproduzierbare Umgebung — Dockerfile |
| 0/10 | Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 100 |
| 0/8 | Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Verwendete Eingangsdaten
| has_nix | nein |
| has_tests | ja |
| lockfiles | — |
| has_dockerfile | ja |
| typed_language | ja |
| bootstrap_files | — |
| has_devcontainer | nein |
| has_linter_config | nein |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | bom/build.gradle, build.gradle, core/build.gradle, jmail/build.gradle, mail/build.gradle, misc/build.gradle, mls/build.gradle, pg/build.gradle, pkix/build.gradle, prov/build.gradle, test/build.gradle, tls/build.gradle, util/build.gradle |
| dependency_bot_commit_share | 0 |
AI-Code-Lesbarkeit für Modelle
99Exzellent
Wie die Bewertung erfolgt
| 45/45 | Typprüfbarer Code — Java (statisch typisiert) |
| 54.3/55 | Handhabbare Dateigrößen — 101/7.893 Quelldateien über 60 KB |
Verwendete Eingangsdaten
| primary_language | Java |
| largest_source_bytes | 1.866.290 |
| source_files_sampled | 7.893 |
| oversized_source_files | 101 |
Wie die Bewertung erfolgt
| 40/40 | API-Schema (OpenAPI/GraphQL/proto) — mls/src/main/proto/mls_client.proto |
| 0/20 | MCP-Server |
| 40/40 | Lauffähige Beispiele — example, examples |
Verwendete Eingangsdaten
| example_dirs | example, examples |
| has_mcp_signal | nein |
| api_schema_files | mls/src/main/proto/mls_client.proto |
Eckdaten
2.670GitHub-Sterne
100Mitwirkende
1.693Commits, letzte 12 Monate
0Tage seit letztem Push
0Releases
1Bus-Faktor
64offene Issues
MavenPaket-Ökosysteme
Warnungen zur Datenerhebung
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Weitere Details
Stern- und Fork-Verlauf 0 ★ / 1.264 ⇿
0Sterne
1.264Forks
Wann jeder Stern und Fork hinzugefügt wurde, von GitHub erfasst und nach Tagen gruppiert. Das kumulierte Wachstum steht direkt über den täglichen Zugängen, aus denen es besteht, sodass beide gegeneinander lesbar sind: stetiger organischer Zuwachs sieht ganz anders aus als ein abrupter, kurzlebiger Ausschlag. Wo dieser Unterschied messbar ist, wird er als Wachstumsauthentizität ausgewiesen.
Es wird nur die jüngste Historie angezeigt — dieses Repository überschreitet das Erfassungsfenster, sodass die früheste Historie nicht erfasst wird.
Jeder Punkt umfasst 11 Tage.
OpenSSF Scorecard 6.3 / 10
6.3Gesamtwert
Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).
| 0 | Binary-Artifacts | binaries present in source code |
| k. A. | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| k. A. | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 34 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| k. A. | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool detected: CodeQL |
| 10 | Security-Policy | security policy file detected |
| k. A. | Signed-Releases | no releases found |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Alle Abhängigkeiten 0
Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 0 direkte und 0 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.
| Registry | Paket | Version | Beziehung |
|---|
Abhängigkeits-Advisories nicht bewertet
Der Advisory-Abgleich konnte für diesen Bericht nicht ausgeführt werden: No resolved dependencies to assess
JSON-Rohbericht maschinenlesbar
{
"data": {
"repo": {
"topics": [
"crypto",
"java",
"openpgp",
"dtls",
"post-quantum-cryptography",
"tls"
],
"is_fork": false,
"size_kb": 662118,
"has_wiki": true,
"homepage": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"languages": {
"HTML": 88615,
"Java": 58921612,
"Shell": 161034,
"Batchfile": 12956,
"Dockerfile": 1544
},
"pushed_at": "2026-07-25T01:10:51Z",
"created_at": "2013-06-01T02:38:42Z",
"owner_type": "Organization",
"updated_at": "2026-07-25T01:11:02Z",
"description": "Bouncy Castle Java Distribution (Mirror)",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Java",
"significant_languages": [
"Java"
]
},
"owner": {
"blog": "https://www.bouncycastle.org",
"name": "Legion of the Bouncy Castle Inc",
"type": "Organization",
"login": "bcgit",
"company": null,
"location": "Melbourne, Australia",
"followers": 296,
"avatar_url": "https://avatars.githubusercontent.com/u/4566970?v=4",
"created_at": "2013-05-30T05:06:58Z",
"is_verified": null,
"public_repos": 9,
"account_age_days": 4804
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "fdc5011e1d54cb5f9687ceda5dbeefea13528bdb",
"body": "SM9: reject non-positive key lengths in SM9KEMGenerator / SM9KEMExtractor -...\n\nSee merge request root/bc-java!281",
"is_bot": false,
"headline": "Merge branch 'sm9-kem-keylen' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T11:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d40a00b3effd9a7483f6242d4ee7c2b2e10f6fc2",
"body": "…ctor -...",
"is_bot": false,
"headline": "SM9: reject non-positive key lengths in SM9KEMGenerator / SM9KEMExtra…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T11:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe1167ff2e82e5661df20d3c8447955c048921cc",
"body": "SM9: add the identity-based digital signature algorithm (Signature.SM3withSM9, GM/T 0044.2)\n\nSee merge request root/bc-java!280",
"is_bot": false,
"headline": "Merge branch 'sm9-sign' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T10:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "014486a5428ef1e80958da5f4260a9b0167a91b9",
"body": "…3withSM9, GM/T 0044.2)",
"is_bot": false,
"headline": "SM9: add the identity-based digital signature algorithm (Signature.SM…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T10:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6d7ec272b6bca4a13fc5026cc7e93f1ed3b68e8",
"body": "…SSParameterSpec) when an alternate provider such as SunMSCAPI registers no digest-specific PSS algorithm, fixing RSA-PSS CertificateVerify with Windows smart-card (Windows-MY/CPrivateKey) client keys under TLS 1.2 and 1.3",
"is_bot": false,
"headline": "TLS: fall back to the generic RSASSA-PSS signature name (digest via P…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-24T03:42:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d10b2f6ae9817f4ddcc392a5240da59a76b2142c",
"body": "…it/processBlock, ParametersWithRandom), fixed the non-terminating retry loop when stream-mode encrypting an empty message, and classified Cipher.SM9 as pke in generateCbom.",
"is_bot": false,
"headline": "Reshaped SM9Engine to the SM2Engine API pattern (Mode constructor, in…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-24T02:49:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba1943558d6322e8d25e873b333c4eae6b725507",
"body": "…key + SM9ParameterSpec - Cipher.SM9 in ENCRYPT_MODE now takes the key from SM9EncMasterPublicKey.getUserPublicKey(id), the same recipient key the SM9-KEM encapsulates to, and SM9ParameterSpec is removed; an AlgorithmParameterSpec or a master public key at encrypt init is rejected with a pointer to getUserPublicKey",
"is_bot": false,
"headline": "SM9: encrypt to the recipient's public key rather than master public …",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T01:38:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eeb3c6c66136201c61aaf733f6cf3ca7a0c8b440",
"body": "Adds the SM9 public-key encryption algorithm on top of the merged KEM, reusing its\nencryption master/user key infrastructure: SM9Engine (org.bouncycastle.crypto.engines)\nand the GM/T 0080-2020 SM9Cipher ASN.1 structure, exposed as Cipher.SM9 through the\nprovider. A sender encrypts to a recipient's i\n[…]\nm cipher; the ciphertext is\nself-describing, so one Cipher.SM9 decrypts either mode. Verified against the official\nGM/T 0044.5-2016 Annex D worked example. Includes SM9CipherExample and SM9CipherTest.",
"is_bot": false,
"headline": "SM9: add identity-based public-key encryption (Cipher.SM9, GM/T 0044.4)",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T01:02:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c40059a6a23e97c728c01867816a2a6fe6b1505",
"body": "…9-KEM, following the ML-KEM KEMSpi pattern (jdk17 overlay, SpiUtil.hasKEM() gated). By default (null spec or withNoKdf) the shared secret is the mechanism's own GM/T 0044.4 KDF output at the requested size - the interoperable form; a KTSParameterSpec KDF can optionally be layered on top for generic use, taking a 256-bit GM/T 0044.4 shared secret as input",
"is_bot": false,
"headline": "SM9: expose the KEM through the JDK 21 javax.crypto.KEM API as KEM.SM…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T00:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee551da960bb6d097184276b2bba154ba8278b7e",
"body": "…roy() drops the master secret ke / the user key point de and zeroizes the carried identity, isDestroyed() reflects the state, and the secret-bearing operations (getEncoded, generateUserKeyPair, decapsulation) throw IllegalStateException afterwards; a destroyed master key no longer serializes, and the published master public key is unaffected",
"is_bot": false,
"headline": "SM9: implement the Destroyable pattern on the SM9 private keys - dest…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T00:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "080adad68e424561a5cc435cecbb9d3c8b3a297f",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:59:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5b049888e9f06862fdd9bc2f4f0a49dac4b64f4",
"body": "…inventory.",
"is_bot": false,
"headline": "Classify the SM9-ENC master keypair asset as kem in the generateCbom …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:59:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cd9a3e93d4274b246d10b93656ba8469e098e3d",
"body": "… SM9 user key derivation, replacing the SM9UserKeyParameterSpec KeyPairGenerator path, and minimised visibility in the sm9 provider package.",
"is_bot": false,
"headline": "Added SM9EncMasterPrivateKey and SM9EncMasterPublicKey interfaces for…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:59:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71b8e3657adce9828102d33772f290bfc60a1004",
"body": "…L<<(chunkSize+6) buffer: chunkSize 24 → 1 GiB alloc (memory-DoS), 25 → NegativeArraySizeException. Concrete sibling asymmetry: v5 AEADEncDataPacket:51 has if (chunkSize > 16) throw (CVE-2026-3505) but v6 SymmetricEncIntegrityPacket:54 reads chunkSize=in.read() with no bound — the missed sibling. Attacker needs only the recipient's public key.\"\n\nThis reverts commit 1299519c70c21b4b56296762295528124f5825a7.",
"is_bot": false,
"headline": "Revert \"OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T23:51:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1299519c70c21b4b56296762295528124f5825a7",
"body": "…kSize+6) buffer: chunkSize 24 → 1 GiB alloc (memory-DoS), 25 → NegativeArraySizeException. Concrete sibling asymmetry: v5 AEADEncDataPacket:51 has if (chunkSize > 16) throw (CVE-2026-3505) but v6 SymmetricEncIntegrityPacket:54 reads chunkSize=in.read() with no bound — the missed sibling. Attacker needs only the recipient's public key.",
"is_bot": false,
"headline": "OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1L<<(chun…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T23:38:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c36de642b1d88011d540ac4567bf2723f5d0cea",
"body": "# Conflicts:\n#\tdocs/releasenotes.html",
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:05:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2969846ae7241c5402ba1ce4fe5eeca67ac4202",
"body": null,
"is_bot": false,
"headline": "Merge branch 'cbom-lightweight-api'",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:01:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9c0d2929a6c58ec9f080609670eb6e6da25701a",
"body": "…ed algorithms (Elephant, ISAP, Photon-Beetle, Romulus, Schwaemm, cSHAKE, SHA-512/t - one asset per named variant), distinguishing generic constructions by primitive-taking constructors instead of missing no-arg constructors, and moved the lightweight-sweep release note from the shipped 1.85 block to 1.86.",
"is_bot": false,
"headline": "Extended the generateCbom lightweight sweep to standalone parameteris…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T22:58:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "999c4e7bca7b7b3b25b7a6e6fc9bb9d897b3b1f0",
"body": "SM9-KEM: add the SM9 identity-based key encapsulation mechanism (GM/T 0044.4)\n\nSee merge request root/bc-java!273",
"is_bot": false,
"headline": "Merge branch 'sm9-kem' into 'main'",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T22:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f42c92c61c588ef15378f2c4c32fbf6ce53333a",
"body": "… 0044.4)",
"is_bot": false,
"headline": "SM9-KEM: add the SM9 identity-based key encapsulation mechanism (GM/T…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T22:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf32e2f1143ab7b5d70358d92ccc9078ee67c23e",
"body": "…ates to github #2372",
"is_bot": false,
"headline": "Fall back to CRL checking when the OCSP responder is unreachable, rel…",
"author_name": "royb",
"author_login": null,
"committed_at": "2026-07-23T17:59:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f34c210b7669dc815a56240851bdc856eb15e4d",
"body": "…castle.crypto.*) for algorithms with no JCA registration, tagging every CBOM asset with a bc:api property and lightweight assets with their defining classes.",
"is_bot": false,
"headline": "Extended generateCbom to sweep the public lightweight API (org.bouncy…",
"author_name": "mwcw",
"author_login": "mwcw",
"committed_at": "2026-07-23T10:52:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e5c0c5f21c789ed7659a11a1ec20a0fd5d31114",
"body": "… increments that carry across 0xFF IV bytes, and skip() for backward moves smaller than the current intra-block offset.",
"is_bot": false,
"headline": "Corrected SICBlockCipher.getPosition() borrow propagation for counter…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T10:25:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91a78e831dd0960fd59991e8d6d00148a0f6c0eb",
"body": "Cap the PBMAC1 PBKDF2 iteration count in JcePBMac1CalculatorBuilder (pre-auth CPU DoS)\n\nSee merge request root/bc-java!268",
"is_bot": false,
"headline": "Merge branch 'pkcs-pbmac1-iteration-cap' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T10:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ab15c2b41fdb46cfd085eae400cc3ffbb915aad",
"body": "…pre-auth CPU DoS)",
"is_bot": false,
"headline": "Cap the PBMAC1 PBKDF2 iteration count in JcePBMac1CalculatorBuilder (…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T10:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c3972f46d4e712e62ab1af9084807e9a297be7f",
"body": "…onstants instead of ML-DSA's",
"is_bot": false,
"headline": "Corrected BCMLKEMPrivateKey to use MLKEMPrivateKeyParameters format c…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T03:49:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b743b8955a694425a0a2b457c8a40f78049d7c9",
"body": "Corrected an always-false OID comparison so JceKeyTransRecipient key-size...\n\nSee merge request root/bc-java!275",
"is_bot": false,
"headline": "Merge branch 'cms-cek-hkdf-keysize-validation' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T02:57:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44bfa07302475214db483f0a7dcf148e78cd69f7",
"body": "…size...",
"is_bot": false,
"headline": "Corrected an always-false OID comparison so JceKeyTransRecipient key-…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T02:57:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfd38945748b716c734a3da1d2c6fc804e8361d3",
"body": null,
"is_bot": false,
"headline": "Refactoring in bcpg",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T07:00:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72789cd894f8b2b0f1e71036c2c15d0140138971",
"body": null,
"is_bot": false,
"headline": "Explicit string conversion instead of MemoryStream.toString",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:58:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0732e80416e6a8bc613fe567916facc01851954d",
"body": null,
"is_bot": false,
"headline": "Delete unused method",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:56:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20ea13123f169ccc4732726921a2859393e15ef5",
"body": null,
"is_bot": false,
"headline": "Reference property name constant",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:55:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2121327d66720560bdf8dcbdf39e603cfa1c98f2",
"body": null,
"is_bot": false,
"headline": "Rewrite SignatureCheck parsing constructor",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:52:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c20b0cc53f37c19466e3d36caf1e99fa388c4559",
"body": null,
"is_bot": false,
"headline": "Fix hasRevocation for enc alg primary",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2bfbf733e1c3bda33b06d9cdcc9da45774b8955",
"body": null,
"is_bot": false,
"headline": "pg: javadoc fixes and test cleanup",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T05:05:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "119b1b36e924c0c29d4c3e7fd173b9619dd9b4c3",
"body": null,
"is_bot": false,
"headline": "Give BlockPool imlpementations access to Block.clear()",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T04:29:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d471c20c2059c6199fb2373c6704ff3ce87836a",
"body": "…alueExact is missing on Android below API 33, relates to github #2369.",
"is_bot": false,
"headline": "Open-code BigIntegers value-exact range checks again, BigInteger.intV…",
"author_name": "royb",
"author_login": null,
"committed_at": "2026-07-21T19:02:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5123fbbe8fe30cffe4d27afa0d34dc5d285d3e89",
"body": "…module",
"is_bot": false,
"headline": "updated the javadoc for the mozilla and tsp packages within the pkix …",
"author_name": "oreste",
"author_login": null,
"committed_at": "2026-07-21T11:08:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bac2ac4df7f2d7562e6c38164b84feb121583818",
"body": null,
"is_bot": false,
"headline": "Javadoc",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-21T10:42:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bd6a1d9d5a7b1581241ed7ea7cf438dd04547d0",
"body": "…ys so destroy() zeroizes key material, relates to github #2366.",
"is_bot": false,
"headline": "Support Destroyable on ML-DSA/ML-KEM/SLH-DSA/FrodoKEM/CMCE private ke…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-21T09:59:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c47e8a83a74cfd42014499e8f9f3c590ec3ac3e7",
"body": "…n v3/checkout v4, use build-mode none (Gradle needs JDK 25 so autobuild cannot compile)",
"is_bot": false,
"headline": "Fix CodeQL workflow: trigger on main not master, bump to codeql-actio…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T09:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "575a62316ca237201a6d134b0f72421c0d6b13cc",
"body": null,
"is_bot": false,
"headline": "added doc on 1.85.1",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T07:40:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52407d891f3dce8c4d8d8999bfb355973cae54ae",
"body": "…complete encoding and nothing extra; add byte[]/InputStream constructors to CMSEncryptedData",
"is_bot": false,
"headline": "Document CMS container constructors, noting byte[] input must be the …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T07:37:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b424634d27905ada44b859acae8a96dc7d6fca8",
"body": null,
"is_bot": false,
"headline": "fixed JavaDoc",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T07:30:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d4fe40ac77b297db7f4cc59f84604aacb1fd2de",
"body": "…ing the full draft-ietf-lamps-cms-composite-kem wrap/KDF/KEM mapping",
"is_bot": false,
"headline": "Assert the AES-256-KW wrap OID in the Composite ML-KEM CMS test, pinn…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T06:20:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dd651e37af09f33862d5c5bbc37640a99425d9f",
"body": "…th CMS AuthEnvelopedData AEAD content, with ML-KEM/FrodoKEM/Composite round-trip tests",
"is_bot": false,
"headline": "Add JceKEMAuthEnvelopedRecipient so KEM (RFC 9629) recipients work wi…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T06:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8831e2b1e98fc38d750bba6d2268af04130a7d0c",
"body": "…ng NoSuchAlgorithmException throws through it so the cause is chained (and stays Java 4 safe), across the KEM CipherSpis, X509CRL/Certificate, BCFKS and JcaPKCS10CertificationRequest",
"is_bot": false,
"headline": "Add SecurityExceptions.noSuchAlgorithmException and route cause-foldi…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:47:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b0e00d4ab23e7082b6226c1bff569bb79c2872f",
"body": "…rough SecurityExceptions.illegalBlockSizeException so the cause is chained, matching the sibling KEM CipherSpis",
"is_bot": false,
"headline": "Route the RSA-KEM CipherSpi wrap-failure IllegalBlockSizeException th…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:37:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "657daa1ad47780f5fe8200d3ed8c65f6f029cc69",
"body": "…ssage through SecurityExceptions.invalidKeyException so the cause is chained (and stays Java 4 safe), across the KEM CipherSpis and the RSA/ElGamal/Falcon/Dilithium/composite paths",
"is_bot": false,
"headline": "Route InvalidKeyException throws that fold in a caught exception's me…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:36:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eac0b55fdb3673adace418013cdfd34547c89bf2",
"body": "…n CMS EnvelopedData, add the twelve composite encapsulation lengths, with a round-trip test over all parameter sets",
"is_bot": false,
"headline": "Register a Composite ML-KEM KEM Cipher so composite recipients work i…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:36:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dfefa653f349a60d4b93c1970e83987d0df0216",
"body": "…ntInfo generate side, binding the ukm field into the KDF otherInfo, with round-trip and tamper tests",
"is_bot": false,
"headline": "Add user keying material (UKM) support to the CMS RFC 9629 KEMRecipie…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-18T11:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b2a164e6dfe6cb49e87c981d17c7baf8ba3f681",
"body": "…tering its encapsulation lengths, with a round-trip test covering the AES-Wrap-192/256 mappings from draft-chen-lamps-cms-frodokem",
"is_bot": false,
"headline": "Enable FrodoKEM as a CMS RFC 9629 KEMRecipientInfo recipient by regis…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-18T10:34:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "606a9590f269b70b544de7a1f182610cc1cf5066",
"body": "… and register it in the cert test AllTests suite",
"is_bot": false,
"headline": "Add PQCCertTest exercising ML-KEM and FrodoKEM certificate generation…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-18T10:20:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfbf497c0b3c9d3b6a6104ce01b3d843e6471ce3",
"body": null,
"is_bot": false,
"headline": "minor cleanup.",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T03:52:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaeab5dda3bd0e1c8d421e67c1a6c09640416898",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T03:39:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3001351723cddb06c5dc429f8efc06f42c24090a",
"body": null,
"is_bot": false,
"headline": "fixed typo in CVE number",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T03:39:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9762d373b800d3a5a7cc15f1c1284d22c973651",
"body": "…ith destroy() throws DestroyFailedException resolved via the jce/src backport on the build-lw classpath, plus jdk14-parity cades excludes and jce/lcrypto test-contamination excludes",
"is_bot": false,
"headline": "Advance the jdk1.3 full build: re-introduce SecretWithEncapsulation w…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T02:23:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff7b7610a748b4bffc078c58e859626829921f9a",
"body": "…ed NPE/AIOOBE\n\nConsolidates the empty/missing-content parser-robustness fixes into one review unit.\nEach entry point converts an unchecked runtime exception (NullPointerException,\nArrayIndexOutOfBoundsException, IllegalStateException or ArithmeticException) that\nescaped on empty / content-less / tr\n[…]\nwith no nonce extension)\n\nAudit findings F16, F23, F24, F26, F28, F29, F30, F32, F52 plus the\nparse-empty-input-null-guards, tsp-empty-stream-parse-guard and\ncrl-reasoncode-crlreasons-aioobe branches.",
"is_bot": false,
"headline": "Guard empty/missing-content and out-of-range parse paths against leak…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-17T02:12:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "924fd937df02bc0ceb79ff97de7f6efff364f3b0",
"body": null,
"is_bot": false,
"headline": "added back PQC list",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T13:16:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e57eda2c40095ac19ee0ed3bab8fe9fa54c620e0",
"body": "…09CRLEntryObject/RFC3280/X509CertificateObject/BaseBlockCipher, new PQC KeyPairGeneratorSpi overlays with NoSuchProviderException catch, SM2Signer/Utils), the Falcon FPREngine JLS2 forward-reference fix, and drop the KEM cipher families so bcprov-jdk13 compiles clean",
"is_bot": false,
"headline": "Revive the jdk1.3 (build1-3) provider build: sync rotted overlays (X5…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T13:15:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38f563abe459bb7c46f72370552fc3767f7bd3bb",
"body": "…aging to avoid the OwlUtilTest bcprov signer-info clash, matching the lms/mayo/est/keybox pattern",
"is_bot": false,
"headline": "Drop crypto.agreement.owl.AllTests from the signed legacy Ant test st…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T09:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1271da1eeba1fa7a185380979eed644fe45e265",
"body": "…jar junit test-sweeping OSGi gotcha in docs/claude/build-jdk14.md",
"is_bot": false,
"headline": "Document the jdk1.3->jdk1.4 overlay layering and the legacy provider-…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T08:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3406b620442b345ed2a5ea81a19ab96312756c91",
"body": "…e *Test classes from the bcprov copy, and relocate OwlUtilTest to its own AllTests so it builds under bctest",
"is_bot": false,
"headline": "Keep junit out of the legacy provider jars by excluding main-namespac…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T08:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23b67126abaf8d26043585f442a574417fc5f8c5",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T04:45:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4df1c5fc437899b1f42208b031ae25f25acd159",
"body": "… configurable node limit (org.bouncycastle.x509.max_cert_path_build_nodes)",
"is_bot": false,
"headline": "Bound the PKIX certification-path builder's depth-first search with a…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T04:44:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "272fb32d4f66e7aafb1d60c408c1722a17da6869",
"body": null,
"is_bot": false,
"headline": "Add ML-KEM and X-Wing KEM support to HPKE, relates to github #2351",
"author_name": "royb",
"author_login": null,
"committed_at": "2026-07-15T22:06:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09cb1ed32ee5f22d1e288688c706bb930619b4ae",
"body": "…dule so examples compile and smoke-test under CI without shipping in the bc jars",
"is_bot": false,
"headline": "Add the misc examples tree to the Gradle build as a non-publishing mo…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T21:47:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6ae24643e7ba7cfdf9267656ce83bb656ab9777",
"body": "…e with a commonName longer than the RFC 5280 64-character bound",
"is_bot": false,
"headline": "Add an X500NameStyle example showing how to parse a Distinguished Nam…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T21:26:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ca5bc0b66200a2f8c13f508bf74d58e09b7bff7",
"body": "# Conflicts:\n#\tdocs/releasenotes.html",
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T02:13:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81ca96812a79b5c61d7638a808096c5ff23b543d",
"body": "…ULT_VERSION stamp) in docs/claude/conventions.md",
"is_bot": false,
"headline": "Document the full version-bump file set (incl. the OpenPGP armor DEFA…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T02:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f492e5ad6eb983dc5328dc0fbb858854e604b72",
"body": "…on via update() does not throw ShortBufferException, relates to github #2354.",
"is_bot": false,
"headline": "Return 0 from KCCMBlockCipher.getUpdateOutputSize so JCA CCM decrypti…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T02:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b19c2729262db6f81ebb1e27432704eb67a8491a",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:54:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ad436664aefe970dc5e5e54d641669e0bbd8b3f",
"body": "… recipient ids",
"is_bot": false,
"headline": "Add a strict equals() to KEMRecipientId for parity with the other CMS…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6b8f75c71e339777e352c7f05b2f7fb75f1ec2a",
"body": null,
"is_bot": false,
"headline": "Use ASN1BitString.getBytes() for composite signature components",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ba0153799f2749519d046cdca197ee50dda0094",
"body": "…on the module path",
"is_bot": false,
"headline": "Fall back to a module-safe ResourceBundle lookup in LocalizedMessage …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d0ad7cddd081f6470106e9cf2ad75b440db9660",
"body": "…t guards",
"is_bot": false,
"headline": "Reject a negative PBKDF2 iteration count in the CMS password-recipien…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6a05505d7a1ce47d526e827c3f34ac606c08247",
"body": "…not block forever",
"is_bot": false,
"headline": "Bound the 204/404 body drain in ESTService.getCSRAttributes so it can…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a3d831ce949d125b94d659d2288edbc62486ce1",
"body": "… guards",
"is_bot": false,
"headline": "Bound the scrypt parallelization parameter p in the PKCS8/PKCS12 cost…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2b3a3994bd1e03071f37e1067c3f25688f60c34",
"body": null,
"is_bot": false,
"headline": "Guard CMSUtils.getAEADMacLength against malformed AEAD parameters",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bad0fa997af23389a76d88f4175877c34a6632e6",
"body": null,
"is_bot": false,
"headline": "Validate untrusted RSASSA-PSS parameters in BcRsaPssUtil.createSigner",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0802cf1a3f9fbbb3bf2e568a307d29cac2ef3db1",
"body": null,
"is_bot": false,
"headline": "Accept an empty passphrase on the JCE ARGON2 SecretKeyFactory path",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b9c104c002584d7c6dc3f0936aeac229d5ba4a8",
"body": "…hrase",
"is_bot": false,
"headline": "Reach the Argon2 s2kCalculator null-guard in PGPUtil.makeKeyFromPassP…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3464fe6af9f23c80506fa18ece3955fcb71f4960",
"body": "…ery candidate",
"is_bot": false,
"headline": "Fix KeyIdentifier.matches(List, KeyIdentifier, boolean) to examine ev…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca363deee793c78150f180d6d1828c9d713b91a8",
"body": "…rs, relates to github #2356.",
"is_bot": false,
"headline": "Stop bundling org.bouncycastle.asn1.iana into the Ant-built bcutil ja…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f09046951f4b5ed90a649785a9cacdadcda95f2d",
"body": "IANAObjectIdentifiers was consolidated to a single home in core (shipped in\nbcprov) in 1.85 (github #2176), but ant/bc+-build.xml's build-util target still\ncopied org/bouncycastle/asn1/iana/** into bcutil, so the Ant distributions\n(bcutil-jdk15to18, bcutil-jdk14) duplicated the class already present\n[…]\nblicly by core, and no\nutil class references it, so dropping the include removes the duplicate while\nleaving the class in bcprov. The Gradle jdk18on jars were already correct.\nRelates to github #2356.",
"is_bot": false,
"headline": "Stop bundling org.bouncycastle.asn1.iana into the Ant-built bcutil jars",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T00:57:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fa70011dbc4ecc4225d9f341579adb99e4aa1ae5",
"body": "…erage for overlaid behaviour, in docs/claude/architecture.md",
"is_bot": false,
"headline": "Document checking for MR overlays and adding JVM-specific (testN) cov…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T00:51:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1f64e77ff6e3f26e9a2c8a527f60079dbb39990",
"body": "…i-release overlays and normalise OpenSSH KeyFactory error handling\n\nThe edec KeyFactorySpi jdk1.11/jdk1.15 overlays had drifted from base on the\nOpenSSH private-key path: they used the no-passphrase parsePrivateKeyBlob\noverload (so passphrase-encrypted openssh-key-v1 Ed25519 keys failed on JDK 11+)\n[…]\ned. Adds OpenSSHKeyFactoryMRTest under src/test/jdk1.11 and jdk1.15\n(wired into AllTests11/AllTests15) so test11/test15 run the OpenSSH key specs\nagainst the multi-release jar and catch overlay drift.",
"is_bot": false,
"headline": "Sync the Ed25519 KeyFactorySpi OpenSSH path across the JDK 11/15 mult…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T00:51:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58cc1fdb27902d6bb35b3f4bf218469e68ba6ce8",
"body": null,
"is_bot": false,
"headline": "updated section numbers, added 1.86",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:41:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7572561af457c877992bc484be1e2c9ac518d5fa",
"body": "…-SNAPSHOT (release.suffix/version 1.85.99), and the BC and BCPQC provider info strings to v1.86-SNAPSHOT with provider version 1.8599 across the base, jdk1.1 and jdk1.4 copies",
"is_bot": false,
"headline": "Bump versions for the 1.86 development cycle: gradle/bc-build to 1.86…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:35:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb8cfe7959913ef5b997974f664673ee9ce19ba7",
"body": "…overlay resync (partial: the provider does not yet build clean)\n\nReviving the long-rotted jdk1.3 legacy build. A genuine 32-bit Sun JDK 1.3.1 no\nlonger runs on a modern host, so the build-jdk13-docker skill runs it inside a\ndebian/eol:etch (i386, glibc 2.3.6) container: glibc < 2.4 avoids the PTR_M\n[…]\ntale X509CertificateObject\noverlays for the new hasFriendlyName(); the symmetric AES/Camellia/SEED/Serpent/LEA\nunresolved symbol; and jdk1.4-style overlays (or excludes) for Falcon, SDitH and SQIsign.",
"is_bot": false,
"headline": "Add a Docker-based jdk1.3 (build1-3) build path and begin the jdk1.3 …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:33:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57fbd3c501f7a369f64eda311d6a709fc0bcae84",
"body": null,
"is_bot": false,
"headline": "Set the 1.85 release date to 2026, July 12th in the release notes",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:13:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecee534efd1d617b1882a6eb9c0b5ae61fefe51e",
"body": "run_mtt.sh extracted the release version with `fgrep version`, an\nunanchored substring match. The debug-build comment added to\ngradle.properties in 10056f56b6 contains \"version\" (in <version>), so\nfgrep matched it too and $version became a two-line string, garbling\nevery -scan jar path and failing the CI module-dependency step with a\nspurious \"File not found: .../bcjmail-jdk18on-1.85\\n# A debug build...\".\nMatch only the line starting with version= instead.",
"is_bot": false,
"headline": "Anchor run_mtt.sh's gradle.properties version parse to the version= line",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-12T02:10:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f24982e4c606755888d260aa85589b378b2b144",
"body": "…Debug builds subsection under Building explaining that -Prelease.debug=true (or release.debug=true in gradle.properties) labels every module's jars/artifacts <module>-debug-jdk18on-<version> and compiles with debug symbols, with clean build / copyJars examples.",
"is_bot": false,
"headline": "Document the release.debug Gradle build property in README.md: add a …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T01:41:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d826de9c92a6a9dce78697e4cd5eb2d375d9165",
"body": "…Cipher (DSTU 7624 CCM), incorporating github PR #2350: init zero-extends a short nonce to the block size and processAssociatedText zero-pads a trailing partial AAD block instead of throwing \"padding not supported\". Corrects the PR's AAD MAC loop, whose bound byteIndex < authLen - assocOff double-su\n[…]\nassociated data; the bound is byteIndex < authLen. Adds DSTU7624Test cases locking the multi-block AAD MAC to its pre-PR value and round-tripping partial AAD and short nonces; relates to github #2350.",
"is_bot": false,
"headline": "Support variable-length associated data and short nonces in KCCMBlock…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T00:56:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10056f56b60bbe4fccac22aa8bf5b7a9732005b5",
"body": "… (or -debug-jdk15to18- on a Java <= 8 daemon) and compile with debug symbols when release.debug is true, mirroring the jdk14.xml / jdk15+.xml debug-label change: build.gradle reads release.debug (via -Prelease.debug or gradle.properties, default false) and prefixes the shared vmrange, so every module's jar archiveBaseName/appendix and Maven artifactId pick up the debug label, and options.debug follows the flag; default (release.debug=false) output is unchanged.",
"is_bot": false,
"headline": "Name the Gradle-build jars/artifacts <module>-debug-jdk18on-<version>…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T00:26:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b73cf4da8b85ee4f32aface1ff62ff2af77a0c58",
"body": "… a re-initialised cipher does not carry the previous operation's associated data into the authentication tag, incorporating github PR #2349 (converting its tab indentation to spaces) and adding a DSTU7624Test regression case that a re-init matches a freshly constructed cipher; relates to github #2349.",
"is_bot": false,
"headline": "Reset the KGCM associated-text accumulator in KGCMBlockCipher.init so…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T00:26:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b43e928214ac4670b1b2ae8fb8ed0212e0a9568",
"body": "… the public X509Certificate type, not cert.getClass(): the BC cert impl (X509CertificateImpl/X509CertificateObject) is package-private, so a Method obtained from the runtime class failed invoke() with IllegalAccessException and broke cert.test.AllTests testSimpleTests after the jdk15to18 reflective-call change.",
"is_bot": false,
"headline": "Resolve CertTest's reflective verify(PublicKey,Provider) call through…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T21:52:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a7332a93870fc2a65fe092192b35d1957c45502",
"body": "… @Override/@FunctionalInterface source strip that jdk15+.xml lacked (ant/jdk14.xml preprocesses it away), exclude the tests using JDK 7/8-only APIs (PKIXRevocationChecker, Cipher.updateAAD, java.nio.file.Files, JSSE SNI/ExtendedSSLSession, PipedInputStream(,int), cert.plants generics) with matching\n[…]\nAllTests / jce RegressionTest overlays, and route three guarded Java 8 test calls (CertTest verify(pub,Provider), operator GCMParameterSpec, BouncyCastleProviderTest String.join) through 1.5-safe code",
"is_bot": false,
"headline": "Restore the jdk15to18 Ant test build under genuine javac 1.5: add the…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T14:33:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e128162db6ced97073e067f6f80f72d6a5414f9e",
"body": "…t-build step reaches debug jars: the fixed 'bcprov-jdk15to18*.jar' / 'bcprov-ext-jdk15to18*.jar' globs did not match a release.debug build's 'bcprov-debug-jdk15to18-*.jar' names, so debug provider jars shipped without the JCA auto-registration file. Replaced the tar/mv/rm dance with a loop over 'bcprov*jdk15to18*.jar' (matches prov and ext, debug and non-debug) using jar uf -C prov/src/main/resources META-INF.",
"is_bot": false,
"headline": "Fix build1-5to1-8 so the META-INF/services/java.security.Provider pos…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T13:49:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f360f23bfab40c9c237615511aa10a50a256496f",
"body": "…ars left at the top level (e.g. bctest-*.jar) cannot be accidentally staged and committed.",
"is_bot": false,
"headline": "Ignore repository-root *.jar files (/*.jar) so stray build-artifact j…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T12:44:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 1693,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 52,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 1264,
"stars": 2670,
"watchers": 135,
"fork_history": {
"days": [
{
"date": "2015-06-02",
"count": 1
},
{
"date": "2015-06-08",
"count": 1
},
{
"date": "2015-06-16",
"count": 1
},
{
"date": "2015-06-23",
"count": 1
},
{
"date": "2015-06-24",
"count": 1
},
{
"date": "2015-07-17",
"count": 1
},
{
"date": "2015-07-20",
"count": 1
},
{
"date": "2015-07-28",
"count": 1
},
{
"date": "2015-08-01",
"count": 1
},
{
"date": "2015-08-10",
"count": 1
},
{
"date": "2015-08-14",
"count": 1
},
{
"date": "2015-08-19",
"count": 1
},
{
"date": "2015-08-27",
"count": 1
},
{
"date": "2015-09-01",
"count": 1
},
{
"date": "2015-09-03",
"count": 1
},
{
"date": "2015-09-17",
"count": 1
},
{
"date": "2015-10-18",
"count": 1
},
{
"date": "2015-10-19",
"count": 1
},
{
"date": "2015-10-20",
"count": 1
},
{
"date": "2015-10-22",
"count": 1
},
{
"date": "2015-11-05",
"count": 2
},
{
"date": "2015-11-20",
"count": 1
},
{
"date": "2015-12-01",
"count": 1
},
{
"date": "2015-12-05",
"count": 1
},
{
"date": "2015-12-14",
"count": 1
},
{
"date": "2015-12-27",
"count": 1
},
{
"date": "2015-12-28",
"count": 1
},
{
"date": "2016-01-04",
"count": 1
},
{
"date": "2016-01-22",
"count": 1
},
{
"date": "2016-02-08",
"count": 1
},
{
"date": "2016-02-10",
"count": 1
},
{
"date": "2016-02-16",
"count": 1
},
{
"date": "2016-02-22",
"count": 1
},
{
"date": "2016-02-26",
"count": 1
},
{
"date": "2016-03-06",
"count": 1
},
{
"date": "2016-03-22",
"count": 2
},
{
"date": "2016-03-23",
"count": 1
},
{
"date": "2016-03-28",
"count": 1
},
{
"date": "2016-03-31",
"count": 1
},
{
"date": "2016-04-11",
"count": 1
},
{
"date": "2016-04-16",
"count": 1
},
{
"date": "2016-04-19",
"count": 1
},
{
"date": "2016-04-22",
"count": 1
},
{
"date": "2016-05-03",
"count": 1
},
{
"date": "2016-05-09",
"count": 1
},
{
"date": "2016-05-10",
"count": 2
},
{
"date": "2016-05-11",
"count": 1
},
{
"date": "2016-05-14",
"count": 1
},
{
"date": "2016-05-20",
"count": 1
},
{
"date": "2016-05-25",
"count": 1
},
{
"date": "2016-06-19",
"count": 1
},
{
"date": "2016-06-20",
"count": 1
},
{
"date": "2016-06-29",
"count": 1
},
{
"date": "2016-07-05",
"count": 1
},
{
"date": "2016-07-08",
"count": 1
},
{
"date": "2016-07-11",
"count": 1
},
{
"date": "2016-07-12",
"count": 1
},
{
"date": "2016-07-21",
"count": 1
},
{
"date": "2016-07-28",
"count": 1
},
{
"date": "2016-07-30",
"count": 1
},
{
"date": "2016-08-09",
"count": 1
},
{
"date": "2016-08-12",
"count": 1
},
{
"date": "2016-08-14",
"count": 1
},
{
"date": "2016-08-21",
"count": 1
},
{
"date": "2016-09-05",
"count": 1
},
{
"date": "2016-09-19",
"count": 1
},
{
"date": "2016-10-03",
"count": 1
},
{
"date": "2016-10-06",
"count": 1
},
{
"date": "2016-10-11",
"count": 1
},
{
"date": "2016-10-14",
"count": 2
},
{
"date": "2016-10-17",
"count": 2
},
{
"date": "2016-11-04",
"count": 1
},
{
"date": "2016-11-09",
"count": 1
},
{
"date": "2016-11-13",
"count": 1
},
{
"date": "2016-11-14",
"count": 2
},
{
"date": "2016-11-15",
"count": 1
},
{
"date": "2016-11-20",
"count": 1
},
{
"date": "2016-12-20",
"count": 1
},
{
"date": "2016-12-29",
"count": 1
},
{
"date": "2017-01-03",
"count": 1
},
{
"date": "2017-01-05",
"count": 1
},
{
"date": "2017-01-17",
"count": 1
},
{
"date": "2017-01-20",
"count": 1
},
{
"date": "2017-01-23",
"count": 1
},
{
"date": "2017-02-02",
"count": 1
},
{
"date": "2017-02-03",
"count": 2
},
{
"date": "2017-02-09",
"count": 1
},
{
"date": "2017-02-15",
"count": 1
},
{
"date": "2017-02-17",
"count": 2
},
{
"date": "2017-03-10",
"count": 1
},
{
"date": "2017-03-13",
"count": 2
},
{
"date": "2017-03-23",
"count": 2
},
{
"date": "2017-03-24",
"count": 1
},
{
"date": "2017-03-26",
"count": 1
},
{
"date": "2017-03-31",
"count": 1
},
{
"date": "2017-04-04",
"count": 1
},
{
"date": "2017-04-06",
"count": 1
},
{
"date": "2017-04-07",
"count": 1
},
{
"date": "2017-04-12",
"count": 1
},
{
"date": "2017-04-19",
"count": 1
},
{
"date": "2017-04-24",
"count": 1
},
{
"date": "2017-04-27",
"count": 1
},
{
"date": "2017-05-04",
"count": 1
},
{
"date": "2017-05-19",
"count": 1
},
{
"date": "2017-05-24",
"count": 1
},
{
"date": "2017-06-01",
"count": 1
},
{
"date": "2017-06-02",
"count": 1
},
{
"date": "2017-06-06",
"count": 1
},
{
"date": "2017-06-07",
"count": 2
},
{
"date": "2017-06-10",
"count": 1
},
{
"date": "2017-06-16",
"count": 1
},
{
"date": "2017-06-20",
"count": 2
},
{
"date": "2017-07-03",
"count": 1
},
{
"date": "2017-07-06",
"count": 2
},
{
"date": "2017-07-10",
"count": 1
},
{
"date": "2017-07-13",
"count": 1
},
{
"date": "2017-07-27",
"count": 2
},
{
"date": "2017-08-03",
"count": 1
},
{
"date": "2017-08-07",
"count": 1
},
{
"date": "2017-08-10",
"count": 1
},
{
"date": "2017-08-21",
"count": 1
},
{
"date": "2017-08-25",
"count": 1
},
{
"date": "2017-08-28",
"count": 2
},
{
"date": "2017-09-07",
"count": 1
},
{
"date": "2017-09-17",
"count": 1
},
{
"date": "2017-09-20",
"count": 1
},
{
"date": "2017-09-21",
"count": 1
},
{
"date": "2017-09-27",
"count": 1
},
{
"date": "2017-09-28",
"count": 1
},
{
"date": "2017-09-29",
"count": 1
},
{
"date": "2017-10-10",
"count": 1
},
{
"date": "2017-10-11",
"count": 1
},
{
"date": "2017-10-16",
"count": 2
},
{
"date": "2017-10-18",
"count": 1
},
{
"date": "2017-10-19",
"count": 1
},
{
"date": "2017-10-23",
"count": 2
},
{
"date": "2017-10-27",
"count": 1
},
{
"date": "2017-10-31",
"count": 1
},
{
"date": "2017-11-09",
"count": 1
},
{
"date": "2017-11-10",
"count": 1
},
{
"date": "2017-11-13",
"count": 1
},
{
"date": "2017-11-16",
"count": 1
},
{
"date": "2017-11-21",
"count": 1
},
{
"date": "2017-11-29",
"count": 1
},
{
"date": "2017-11-30",
"count": 2
},
{
"date": "2017-12-02",
"count": 1
},
{
"date": "2017-12-07",
"count": 1
},
{
"date": "2017-12-11",
"count": 1
},
{
"date": "2017-12-12",
"count": 1
},
{
"date": "2017-12-13",
"count": 1
},
{
"date": "2017-12-18",
"count": 1
},
{
"date": "2017-12-20",
"count": 1
},
{
"date": "2017-12-22",
"count": 2
},
{
"date": "2017-12-27",
"count": 3
},
{
"date": "2017-12-28",
"count": 1
},
{
"date": "2018-01-02",
"count": 1
},
{
"date": "2018-01-03",
"count": 3
},
{
"date": "2018-01-07",
"count": 1
},
{
"date": "2018-01-10",
"count": 1
},
{
"date": "2018-01-14",
"count": 1
},
{
"date": "2018-01-17",
"count": 1
},
{
"date": "2018-01-18",
"count": 1
},
{
"date": "2018-01-19",
"count": 1
},
{
"date": "2018-01-26",
"count": 1
},
{
"date": "2018-01-31",
"count": 1
},
{
"date": "2018-02-01",
"count": 1
},
{
"date": "2018-02-05",
"count": 1
},
{
"date": "2018-02-07",
"count": 1
},
{
"date": "2018-02-08",
"count": 1
},
{
"date": "2018-02-13",
"count": 2
},
{
"date": "2018-02-14",
"count": 1
},
{
"date": "2018-02-22",
"count": 1
},
{
"date": "2018-02-24",
"count": 1
},
{
"date": "2018-02-26",
"count": 1
},
{
"date": "2018-03-05",
"count": 1
},
{
"date": "2018-03-07",
"count": 1
},
{
"date": "2018-03-19",
"count": 1
},
{
"date": "2018-03-28",
"count": 1
},
{
"date": "2018-04-05",
"count": 1
},
{
"date": "2018-04-23",
"count": 1
},
{
"date": "2018-04-26",
"count": 1
},
{
"date": "2018-05-01",
"count": 1
},
{
"date": "2018-05-02",
"count": 1
},
{
"date": "2018-05-07",
"count": 2
},
{
"date": "2018-05-12",
"count": 1
},
{
"date": "2018-05-15",
"count": 1
},
{
"date": "2018-05-16",
"count": 1
},
{
"date": "2018-05-18",
"count": 1
},
{
"date": "2018-05-27",
"count": 1
},
{
"date": "2018-05-29",
"count": 1
},
{
"date": "2018-06-05",
"count": 1
},
{
"date": "2018-06-06",
"count": 1
},
{
"date": "2018-06-14",
"count": 1
},
{
"date": "2018-06-15",
"count": 2
},
{
"date": "2018-06-20",
"count": 1
},
{
"date": "2018-06-21",
"count": 1
},
{
"date": "2018-06-26",
"count": 1
},
{
"date": "2018-07-03",
"count": 1
},
{
"date": "2018-07-04",
"count": 1
},
{
"date": "2018-07-06",
"count": 1
},
{
"date": "2018-07-13",
"count": 1
},
{
"date": "2018-07-17",
"count": 1
},
{
"date": "2018-07-24",
"count": 1
},
{
"date": "2018-07-25",
"count": 2
},
{
"date": "2018-08-01",
"count": 1
},
{
"date": "2018-08-02",
"count": 1
},
{
"date": "2018-08-05",
"count": 1
},
{
"date": "2018-08-06",
"count": 1
},
{
"date": "2018-08-07",
"count": 1
},
{
"date": "2018-08-10",
"count": 1
},
{
"date": "2018-08-13",
"count": 2
},
{
"date": "2018-08-17",
"count": 1
},
{
"date": "2018-08-29",
"count": 1
},
{
"date": "2018-08-31",
"count": 2
},
{
"date": "2018-09-05",
"count": 1
},
{
"date": "2018-09-07",
"count": 1
},
{
"date": "2018-09-22",
"count": 1
},
{
"date": "2018-10-02",
"count": 1
},
{
"date": "2018-10-03",
"count": 1
},
{
"date": "2018-10-05",
"count": 1
},
{
"date": "2018-10-08",
"count": 2
},
{
"date": "2018-10-10",
"count": 1
},
{
"date": "2018-10-16",
"count": 1
},
{
"date": "2018-10-17",
"count": 1
},
{
"date": "2018-10-24",
"count": 1
},
{
"date": "2018-10-25",
"count": 1
},
{
"date": "2018-11-01",
"count": 1
},
{
"date": "2018-11-08",
"count": 1
},
{
"date": "2018-11-13",
"count": 1
},
{
"date": "2018-11-17",
"count": 1
},
{
"date": "2018-11-18",
"count": 1
},
{
"date": "2018-11-26",
"count": 1
},
{
"date": "2018-12-03",
"count": 1
},
{
"date": "2018-12-06",
"count": 2
},
{
"date": "2018-12-11",
"count": 1
},
{
"date": "2019-01-03",
"count": 1
},
{
"date": "2019-01-04",
"count": 1
},
{
"date": "2019-01-06",
"count": 1
},
{
"date": "2019-01-18",
"count": 1
},
{
"date": "2019-01-29",
"count": 1
},
{
"date": "2019-01-30",
"count": 2
},
{
"date": "2019-02-06",
"count": 2
},
{
"date": "2019-02-09",
"count": 1
},
{
"date": "2019-02-10",
"count": 1
},
{
"date": "2019-02-11",
"count": 1
},
{
"date": "2019-02-13",
"count": 1
},
{
"date": "2019-02-14",
"count": 1
},
{
"date": "2019-02-21",
"count": 1
},
{
"date": "2019-02-27",
"count": 1
},
{
"date": "2019-03-01",
"count": 1
},
{
"date": "2019-03-05",
"count": 1
},
{
"date": "2019-03-07",
"count": 1
},
{
"date": "2019-03-08",
"count": 1
},
{
"date": "2019-03-11",
"count": 1
},
{
"date": "2019-03-28",
"count": 1
},
{
"date": "2019-04-01",
"count": 1
},
{
"date": "2019-04-03",
"count": 1
},
{
"date": "2019-04-06",
"count": 1
},
{
"date": "2019-04-08",
"count": 2
},
{
"date": "2019-04-11",
"count": 1
},
{
"date": "2019-04-14",
"count": 1
},
{
"date": "2019-04-15",
"count": 1
},
{
"date": "2019-04-17",
"count": 1
},
{
"date": "2019-04-18",
"count": 1
},
{
"date": "2019-04-23",
"count": 2
},
{
"date": "2019-04-25",
"count": 1
},
{
"date": "2019-04-26",
"count": 1
},
{
"date": "2019-04-28",
"count": 1
},
{
"date": "2019-04-29",
"count": 2
},
{
"date": "2019-05-04",
"count": 1
},
{
"date": "2019-05-06",
"count": 1
},
{
"date": "2019-05-09",
"count": 1
},
{
"date": "2019-05-10",
"count": 1
},
{
"date": "2019-05-17",
"count": 2
},
{
"date": "2019-05-20",
"count": 1
},
{
"date": "2019-05-26",
"count": 1
},
{
"date": "2019-05-28",
"count": 3
},
{
"date": "2019-05-29",
"count": 1
},
{
"date": "2019-06-05",
"count": 1
},
{
"date": "2019-06-08",
"count": 1
},
{
"date": "2019-06-11",
"count": 1
},
{
"date": "2019-06-13",
"count": 1
},
{
"date": "2019-06-14",
"count": 1
},
{
"date": "2019-06-18",
"count": 1
},
{
"date": "2019-06-19",
"count": 1
},
{
"date": "2019-06-20",
"count": 1
},
{
"date": "2019-06-21",
"count": 1
},
{
"date": "2019-06-24",
"count": 2
},
{
"date": "2019-06-26",
"count": 1
},
{
"date": "2019-06-28",
"count": 1
},
{
"date": "2019-06-30",
"count": 1
},
{
"date": "2019-07-02",
"count": 1
},
{
"date": "2019-07-03",
"count": 3
},
{
"date": "2019-07-04",
"count": 1
},
{
"date": "2019-07-09",
"count": 1
},
{
"date": "2019-07-10",
"count": 2
},
{
"date": "2019-07-22",
"count": 1
},
{
"date": "2019-07-23",
"count": 1
},
{
"date": "2019-07-26",
"count": 1
},
{
"date": "2019-07-29",
"count": 1
},
{
"date": "2019-08-01",
"count": 1
},
{
"date": "2019-08-02",
"count": 1
},
{
"date": "2019-08-03",
"count": 1
},
{
"date": "2019-08-05",
"count": 1
},
{
"date": "2019-08-11",
"count": 1
},
{
"date": "2019-08-17",
"count": 1
},
{
"date": "2019-08-20",
"count": 1
},
{
"date": "2019-08-22",
"count": 1
},
{
"date": "2019-08-27",
"count": 1
},
{
"date": "2019-08-28",
"count": 1
},
{
"date": "2019-09-11",
"count": 1
},
{
"date": "2019-09-12",
"count": 1
},
{
"date": "2019-09-16",
"count": 1
},
{
"date": "2019-09-19",
"count": 1
},
{
"date": "2019-09-22",
"count": 1
},
{
"date": "2019-09-27",
"count": 1
},
{
"date": "2019-10-03",
"count": 1
},
{
"date": "2019-10-09",
"count": 1
},
{
"date": "2019-10-14",
"count": 1
},
{
"date": "2019-10-17",
"count": 2
},
{
"date": "2019-10-19",
"count": 1
},
{
"date": "2019-10-23",
"count": 1
},
{
"date": "2019-10-28",
"count": 1
},
{
"date": "2019-11-02",
"count": 1
},
{
"date": "2019-11-04",
"count": 1
},
{
"date": "2019-11-05",
"count": 1
},
{
"date": "2019-11-11",
"count": 2
},
{
"date": "2019-11-15",
"count": 1
},
{
"date": "2019-11-20",
"count": 1
},
{
"date": "2019-11-21",
"count": 1
},
{
"date": "2019-11-26",
"count": 1
},
{
"date": "2019-11-28",
"count": 2
},
{
"date": "2019-11-29",
"count": 2
},
{
"date": "2019-12-05",
"count": 2
},
{
"date": "2019-12-10",
"count": 2
},
{
"date": "2019-12-12",
"count": 1
},
{
"date": "2019-12-13",
"count": 1
},
{
"date": "2019-12-17",
"count": 1
},
{
"date": "2019-12-19",
"count": 1
},
{
"date": "2019-12-20",
"count": 1
},
{
"date": "2019-12-24",
"count": 1
},
{
"date": "2019-12-27",
"count": 1
},
{
"date": "2019-12-28",
"count": 1
},
{
"date": "2020-01-06",
"count": 1
},
{
"date": "2020-01-13",
"count": 2
},
{
"date": "2020-01-16",
"count": 2
},
{
"date": "2020-01-17",
"count": 1
},
{
"date": "2020-01-20",
"count": 2
},
{
"date": "2020-01-23",
"count": 1
},
{
"date": "2020-01-24",
"count": 1
},
{
"date": "2020-01-30",
"count": 1
},
{
"date": "2020-02-05",
"count": 1
},
{
"date": "2020-02-08",
"count": 1
},
{
"date": "2020-02-09",
"count": 1
},
{
"date": "2020-02-11",
"count": 1
},
{
"date": "2020-02-12",
"count": 1
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-02-22",
"count": 1
},
{
"date": "2020-02-25",
"count": 1
},
{
"date": "2020-03-04",
"count": 2
},
{
"date": "2020-03-05",
"count": 1
},
{
"date": "2020-03-06",
"count": 1
},
{
"date": "2020-03-16",
"count": 3
},
{
"date": "2020-03-18",
"count": 1
},
{
"date": "2020-03-19",
"count": 2
},
{
"date": "2020-03-26",
"count": 1
},
{
"date": "2020-04-02",
"count": 1
},
{
"date": "2020-04-15",
"count": 1
},
{
"date": "2020-04-20",
"count": 3
},
{
"date": "2020-04-21",
"count": 1
},
{
"date": "2020-04-22",
"count": 1
},
{
"date": "2020-05-06",
"count": 1
},
{
"date": "2020-05-07",
"count": 1
},
{
"date": "2020-05-12",
"count": 1
},
{
"date": "2020-05-14",
"count": 1
},
{
"date": "2020-05-18",
"count": 1
},
{
"date": "2020-05-22",
"count": 1
},
{
"date": "2020-05-26",
"count": 2
},
{
"date": "2020-06-01",
"count": 1
},
{
"date": "2020-06-09",
"count": 1
},
{
"date": "2020-06-15",
"count": 1
},
{
"date": "2020-06-16",
"count": 1
},
{
"date": "2020-06-17",
"count": 1
},
{
"date": "2020-06-22",
"count": 1
},
{
"date": "2020-06-23",
"count": 1
},
{
"date": "2020-06-30",
"count": 2
},
{
"date": "2020-07-08",
"count": 1
},
{
"date": "2020-07-16",
"count": 1
},
{
"date": "2020-07-17",
"count": 1
},
{
"date": "2020-07-18",
"count": 1
},
{
"date": "2020-07-19",
"count": 1
},
{
"date": "2020-07-21",
"count": 1
},
{
"date": "2020-07-23",
"count": 1
},
{
"date": "2020-07-26",
"count": 1
},
{
"date": "2020-07-27",
"count": 1
},
{
"date": "2020-07-29",
"count": 2
},
{
"date": "2020-07-31",
"count": 1
},
{
"date": "2020-08-06",
"count": 1
},
{
"date": "2020-08-12",
"count": 1
},
{
"date": "2020-08-14",
"count": 1
},
{
"date": "2020-08-17",
"count": 1
},
{
"date": "2020-08-21",
"count": 1
},
{
"date": "2020-08-22",
"count": 1
},
{
"date": "2020-08-28",
"count": 2
},
{
"date": "2020-09-01",
"count": 2
},
{
"date": "2020-09-03",
"count": 1
},
{
"date": "2020-09-09",
"count": 1
},
{
"date": "2020-09-10",
"count": 1
},
{
"date": "2020-09-15",
"count": 2
},
{
"date": "2020-09-28",
"count": 1
},
{
"date": "2020-10-02",
"count": 1
},
{
"date": "2020-10-04",
"count": 1
},
{
"date": "2020-10-12",
"count": 1
},
{
"date": "2020-10-13",
"count": 1
},
{
"date": "2020-10-17",
"count": 1
},
{
"date": "2020-10-19",
"count": 1
},
{
"date": "2020-10-20",
"count": 1
},
{
"date": "2020-10-21",
"count": 1
},
{
"date": "2020-10-22",
"count": 2
},
{
"date": "2020-10-23",
"count": 1
},
{
"date": "2020-10-27",
"count": 1
},
{
"date": "2020-10-29",
"count": 1
},
{
"date": "2020-11-10",
"count": 1
},
{
"date": "2020-11-12",
"count": 1
},
{
"date": "2020-11-21",
"count": 1
},
{
"date": "2020-12-03",
"count": 1
},
{
"date": "2020-12-13",
"count": 1
},
{
"date": "2020-12-15",
"count": 2
},
{
"date": "2020-12-17",
"count": 1
},
{
"date": "2021-01-04",
"count": 1
},
{
"date": "2021-01-13",
"count": 1
},
{
"date": "2021-01-18",
"count": 1
},
{
"date": "2021-01-19",
"count": 1
},
{
"date": "2021-01-20",
"count": 1
},
{
"date": "2021-01-25",
"count": 1
},
{
"date": "2021-02-09",
"count": 1
},
{
"date": "2021-02-10",
"count": 1
},
{
"date": "2021-02-12",
"count": 1
},
{
"date": "2021-02-15",
"count": 1
},
{
"date": "2021-02-22",
"count": 1
},
{
"date": "2021-02-25",
"count": 1
},
{
"date": "2021-03-01",
"count": 1
},
{
"date": "2021-03-02",
"count": 1
},
{
"date": "2021-03-04",
"count": 2
},
{
"date": "2021-03-08",
"count": 1
},
{
"date": "2021-03-09",
"count": 2
},
{
"date": "2021-03-10",
"count": 1
},
{
"date": "2021-03-15",
"count": 1
},
{
"date": "2021-03-23",
"count": 4
},
{
"date": "2021-03-31",
"count": 1
},
{
"date": "2021-04-03",
"count": 1
},
{
"date": "2021-04-07",
"count": 1
},
{
"date": "2021-04-08",
"count": 2
},
{
"date": "2021-04-09",
"count": 1
},
{
"date": "2021-04-12",
"count": 1
},
{
"date": "2021-04-15",
"count": 1
},
{
"date": "2021-04-22",
"count": 1
},
{
"date": "2021-04-23",
"count": 2
},
{
"date": "2021-04-25",
"count": 1
},
{
"date": "2021-05-01",
"count": 1
},
{
"date": "2021-05-02",
"count": 1
},
{
"date": "2021-05-04",
"count": 1
},
{
"date": "2021-05-07",
"count": 1
},
{
"date": "2021-05-14",
"count": 1
},
{
"date": "2021-05-17",
"count": 1
},
{
"date": "2021-05-18",
"count": 1
},
{
"date": "2021-05-20",
"count": 1
},
{
"date": "2021-05-22",
"count": 1
},
{
"date": "2021-05-27",
"count": 1
},
{
"date": "2021-06-03",
"count": 1
},
{
"date": "2021-06-07",
"count": 1
},
{
"date": "2021-06-11",
"count": 1
},
{
"date": "2021-06-14",
"count": 1
},
{
"date": "2021-06-17",
"count": 2
},
{
"date": "2021-07-07",
"count": 1
},
{
"date": "2021-07-08",
"count": 1
},
{
"date": "2021-07-09",
"count": 1
},
{
"date": "2021-07-11",
"count": 1
},
{
"date": "2021-07-13",
"count": 1
},
{
"date": "2021-07-26",
"count": 1
},
{
"date": "2021-07-28",
"count": 1
},
{
"date": "2021-07-29",
"count": 1
},
{
"date": "2021-08-02",
"count": 1
},
{
"date": "2021-08-06",
"count": 1
},
{
"date": "2021-08-10",
"count": 1
},
{
"date": "2021-08-11",
"count": 1
},
{
"date": "2021-08-16",
"count": 1
},
{
"date": "2021-08-19",
"count": 1
},
{
"date": "2021-08-25",
"count": 1
},
{
"date": "2021-08-27",
"count": 1
},
{
"date": "2021-09-02",
"count": 1
},
{
"date": "2021-09-05",
"count": 1
},
{
"date": "2021-09-07",
"count": 2
},
{
"date": "2021-09-23",
"count": 1
},
{
"date": "2021-09-29",
"count": 1
},
{
"date": "2021-10-06",
"count": 2
},
{
"date": "2021-10-08",
"count": 2
},
{
"date": "2021-10-13",
"count": 1
},
{
"date": "2021-10-16",
"count": 1
},
{
"date": "2021-10-20",
"count": 1
},
{
"date": "2021-10-24",
"count": 1
},
{
"date": "2021-10-26",
"count": 1
},
{
"date": "2021-10-27",
"count": 1
},
{
"date": "2021-11-02",
"count": 1
},
{
"date": "2021-11-09",
"count": 1
},
{
"date": "2021-11-10",
"count": 1
},
{
"date": "2021-11-11",
"count": 1
},
{
"date": "2021-11-15",
"count": 1
},
{
"date": "2021-11-25",
"count": 1
},
{
"date": "2021-11-26",
"count": 1
},
{
"date": "2021-12-11",
"count": 1
},
{
"date": "2021-12-19",
"count": 1
},
{
"date": "2021-12-22",
"count": 2
},
{
"date": "2021-12-23",
"count": 1
},
{
"date": "2021-12-28",
"count": 1
},
{
"date": "2022-01-03",
"count": 1
},
{
"date": "2022-01-11",
"count": 1
},
{
"date": "2022-01-12",
"count": 1
},
{
"date": "2022-01-17",
"count": 1
},
{
"date": "2022-01-18",
"count": 2
},
{
"date": "2022-01-20",
"count": 2
},
{
"date": "2022-01-21",
"count": 2
},
{
"date": "2022-01-23",
"count": 1
},
{
"date": "2022-01-24",
"count": 1
},
{
"date": "2022-01-27",
"count": 1
},
{
"date": "2022-02-03",
"count": 2
},
{
"date": "2022-02-08",
"count": 1
},
{
"date": "2022-02-11",
"count": 1
},
{
"date": "2022-02-23",
"count": 2
},
{
"date": "2022-02-24",
"count": 1
},
{
"date": "2022-03-20",
"count": 1
},
{
"date": "2022-03-22",
"count": 1
},
{
"date": "2022-03-23",
"count": 1
},
{
"date": "2022-03-28",
"count": 1
},
{
"date": "2022-03-30",
"count": 1
},
{
"date": "2022-03-31",
"count": 2
},
{
"date": "2022-04-01",
"count": 1
},
{
"date": "2022-04-03",
"count": 1
},
{
"date": "2022-04-06",
"count": 1
},
{
"date": "2022-04-07",
"count": 3
},
{
"date": "2022-04-11",
"count": 1
},
{
"date": "2022-04-13",
"count": 1
},
{
"date": "2022-04-16",
"count": 1
},
{
"date": "2022-04-23",
"count": 1
},
{
"date": "2022-04-24",
"count": 1
},
{
"date": "2022-04-28",
"count": 1
},
{
"date": "2022-05-06",
"count": 1
},
{
"date": "2022-05-09",
"count": 1
},
{
"date": "2022-05-11",
"count": 1
},
{
"date": "2022-05-20",
"count": 1
},
{
"date": "2022-05-22",
"count": 1
},
{
"date": "2022-05-23",
"count": 1
},
{
"date": "2022-05-26",
"count": 1
},
{
"date": "2022-06-01",
"count": 1
},
{
"date": "2022-06-14",
"count": 1
},
{
"date": "2022-06-15",
"count": 1
},
{
"date": "2022-06-16",
"count": 2
},
{
"date": "2022-06-22",
"count": 1
},
{
"date": "2022-06-23",
"count": 2
},
{
"date": "2022-06-25",
"count": 1
},
{
"date": "2022-06-30",
"count": 1
},
{
"date": "2022-07-01",
"count": 1
},
{
"date": "2022-07-07",
"count": 1
},
{
"date": "2022-07-21",
"count": 1
},
{
"date": "2022-07-23",
"count": 1
},
{
"date": "2022-07-26",
"count": 1
},
{
"date": "2022-08-01",
"count": 1
},
{
"date": "2022-08-11",
"count": 1
},
{
"date": "2022-08-16",
"count": 1
},
{
"date": "2022-08-19",
"count": 1
},
{
"date": "2022-08-31",
"count": 2
},
{
"date": "2022-09-01",
"count": 1
},
{
"date": "2022-09-11",
"count": 2
},
{
"date": "2022-09-27",
"count": 1
},
{
"date": "2022-09-30",
"count": 2
},
{
"date": "2022-10-04",
"count": 1
},
{
"date": "2022-10-07",
"count": 1
},
{
"date": "2022-10-10",
"count": 1
},
{
"date": "2022-10-14",
"count": 1
},
{
"date": "2022-10-17",
"count": 1
},
{
"date": "2022-10-18",
"count": 1
},
{
"date": "2022-10-19",
"count": 1
},
{
"date": "2022-10-21",
"count": 1
},
{
"date": "2022-10-22",
"count": 1
},
{
"date": "2022-11-10",
"count": 1
},
{
"date": "2022-11-15",
"count": 2
},
{
"date": "2022-11-20",
"count": 2
},
{
"date": "2022-11-21",
"count": 1
},
{
"date": "2022-11-25",
"count": 1
},
{
"date": "2022-11-30",
"count": 1
},
{
"date": "2022-12-01",
"count": 2
},
{
"date": "2022-12-02",
"count": 1
},
{
"date": "2022-12-06",
"count": 1
},
{
"date": "2022-12-14",
"count": 1
},
{
"date": "2022-12-15",
"count": 1
},
{
"date": "2022-12-16",
"count": 1
},
{
"date": "2022-12-27",
"count": 1
},
{
"date": "2023-01-04",
"count": 1
},
{
"date": "2023-01-18",
"count": 1
},
{
"date": "2023-01-28",
"count": 1
},
{
"date": "2023-01-30",
"count": 1
},
{
"date": "2023-02-01",
"count": 2
},
{
"date": "2023-02-04",
"count": 1
},
{
"date": "2023-02-16",
"count": 1
},
{
"date": "2023-02-20",
"count": 1
},
{
"date": "2023-02-21",
"count": 1
},
{
"date": "2023-03-07",
"count": 1
},
{
"date": "2023-03-08",
"count": 1
},
{
"date": "2023-03-24",
"count": 1
},
{
"date": "2023-03-26",
"count": 2
},
{
"date": "2023-04-04",
"count": 1
},
{
"date": "2023-04-05",
"count": 1
},
{
"date": "2023-04-13",
"count": 1
},
{
"date": "2023-04-14",
"count": 1
},
{
"date": "2023-04-20",
"count": 1
},
{
"date": "2023-04-21",
"count": 3
},
{
"date": "2023-04-26",
"count": 1
},
{
"date": "2023-05-06",
"count": 1
},
{
"date": "2023-05-24",
"count": 1
},
{
"date": "2023-05-26",
"count": 1
},
{
"date": "2023-05-31",
"count": 1
},
{
"date": "2023-06-01",
"count": 1
},
{
"date": "2023-06-04",
"count": 1
},
{
"date": "2023-06-07",
"count": 1
},
{
"date": "2023-06-10",
"count": 1
},
{
"date": "2023-06-20",
"count": 2
},
{
"date": "2023-06-22",
"count": 1
},
{
"date": "2023-06-26",
"count": 2
},
{
"date": "2023-06-29",
"count": 1
},
{
"date": "2023-07-16",
"count": 1
},
{
"date": "2023-07-19",
"count": 1
},
{
"date": "2023-07-20",
"count": 1
},
{
"date": "2023-07-25",
"count": 1
},
{
"date": "2023-07-26",
"count": 2
},
{
"date": "2023-08-01",
"count": 1
},
{
"date": "2023-08-15",
"count": 1
},
{
"date": "2023-08-16",
"count": 1
},
{
"date": "2023-08-24",
"count": 2
},
{
"date": "2023-08-28",
"count": 1
},
{
"date": "2023-09-01",
"count": 1
},
{
"date": "2023-09-17",
"count": 1
},
{
"date": "2023-09-18",
"count": 1
},
{
"date": "2023-09-20",
"count": 1
},
{
"date": "2023-09-27",
"count": 2
},
{
"date": "2023-10-09",
"count": 1
},
{
"date": "2023-10-12",
"count": 1
},
{
"date": "2023-10-19",
"count": 1
},
{
"date": "2023-10-30",
"count": 1
},
{
"date": "2023-10-31",
"count": 1
},
{
"date": "2023-11-02",
"count": 1
},
{
"date": "2023-11-19",
"count": 1
},
{
"date": "2023-11-29",
"count": 1
},
{
"date": "2023-12-01",
"count": 1
},
{
"date": "2023-12-03",
"count": 1
},
{
"date": "2023-12-08",
"count": 1
},
{
"date": "2023-12-09",
"count": 1
},
{
"date": "2023-12-11",
"count": 1
},
{
"date": "2023-12-12",
"count": 1
},
{
"date": "2023-12-19",
"count": 1
},
{
"date": "2024-01-09",
"count": 2
},
{
"date": "2024-01-11",
"count": 1
},
{
"date": "2024-01-20",
"count": 1
},
{
"date": "2024-02-03",
"count": 1
},
{
"date": "2024-02-07",
"count": 1
},
{
"date": "2024-02-08",
"count": 1
},
{
"date": "2024-02-10",
"count": 1
},
{
"date": "2024-02-15",
"count": 1
},
{
"date": "2024-02-24",
"count": 1
},
{
"date": "2024-02-26",
"count": 1
},
{
"date": "2024-02-27",
"count": 1
},
{
"date": "2024-03-01",
"count": 1
},
{
"date": "2024-03-14",
"count": 1
},
{
"date": "2024-03-18",
"count": 1
},
{
"date": "2024-03-20",
"count": 1
},
{
"date": "2024-03-25",
"count": 1
},
{
"date": "2024-03-27",
"count": 2
},
{
"date": "2024-03-28",
"count": 1
},
{
"date": "2024-04-01",
"count": 1
},
{
"date": "2024-04-02",
"count": 1
},
{
"date": "2024-04-05",
"count": 1
},
{
"date": "2024-04-06",
"count": 1
},
{
"date": "2024-04-08",
"count": 1
},
{
"date": "2024-04-09",
"count": 1
},
{
"date": "2024-04-10",
"count": 1
},
{
"date": "2024-04-11",
"count": 1
},
{
"date": "2024-05-02",
"count": 1
},
{
"date": "2024-05-06",
"count": 1
},
{
"date": "2024-05-15",
"count": 1
},
{
"date": "2024-05-20",
"count": 1
},
{
"date": "2024-05-25",
"count": 1
},
{
"date": "2024-06-05",
"count": 1
},
{
"date": "2024-06-07",
"count": 1
},
{
"date": "2024-06-12",
"count": 1
},
{
"date": "2024-06-14",
"count": 1
},
{
"date": "2024-06-15",
"count": 1
},
{
"date": "2024-06-16",
"count": 1
},
{
"date": "2024-06-17",
"count": 2
},
{
"date": "2024-06-21",
"count": 1
},
{
"date": "2024-06-28",
"count": 1
},
{
"date": "2024-06-30",
"count": 1
},
{
"date": "2024-07-11",
"count": 1
},
{
"date": "2024-07-17",
"count": 2
},
{
"date": "2024-07-21",
"count": 1
},
{
"date": "2024-07-26",
"count": 1
},
{
"date": "2024-07-27",
"count": 1
},
{
"date": "2024-07-31",
"count": 2
},
{
"date": "2024-08-01",
"count": 1
},
{
"date": "2024-08-07",
"count": 1
},
{
"date": "2024-08-12",
"count": 2
},
{
"date": "2024-08-14",
"count": 3
},
{
"date": "2024-08-16",
"count": 1
},
{
"date": "2024-08-19",
"count": 1
},
{
"date": "2024-08-26",
"count": 1
},
{
"date": "2024-08-27",
"count": 2
},
{
"date": "2024-09-04",
"count": 1
},
{
"date": "2024-09-09",
"count": 1
},
{
"date": "2024-09-13",
"count": 1
},
{
"date": "2024-09-16",
"count": 1
},
{
"date": "2024-09-17",
"count": 1
},
{
"date": "2024-09-20",
"count": 1
},
{
"date": "2024-09-23",
"count": 1
},
{
"date": "2024-09-26",
"count": 1
},
{
"date": "2024-09-27",
"count": 1
},
{
"date": "2024-10-04",
"count": 1
},
{
"date": "2024-10-09",
"count": 1
},
{
"date": "2024-10-11",
"count": 1
},
{
"date": "2024-10-16",
"count": 1
},
{
"date": "2024-10-19",
"count": 1
},
{
"date": "2024-10-24",
"count": 1
},
{
"date": "2024-10-28",
"count": 1
},
{
"date": "2024-10-30",
"count": 1
},
{
"date": "2024-11-01",
"count": 1
},
{
"date": "2024-11-03",
"count": 1
},
{
"date": "2024-11-04",
"count": 1
},
{
"date": "2024-11-13",
"count": 1
},
{
"date": "2024-11-17",
"count": 1
},
{
"date": "2024-11-20",
"count": 1
},
{
"date": "2024-12-01",
"count": 1
},
{
"date": "2024-12-07",
"count": 1
},
{
"date": "2024-12-09",
"count": 1
},
{
"date": "2024-12-20",
"count": 1
},
{
"date": "2025-01-02",
"count": 1
},
{
"date": "2025-01-03",
"count": 1
},
{
"date": "2025-01-08",
"count": 1
},
{
"date": "2025-01-15",
"count": 1
},
{
"date": "2025-01-30",
"count": 1
},
{
"date": "2025-01-31",
"count": 2
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-15",
"count": 1
},
{
"date": "2025-02-17",
"count": 1
},
{
"date": "2025-03-02",
"count": 1
},
{
"date": "2025-03-04",
"count": 1
},
{
"date": "2025-03-05",
"count": 1
},
{
"date": "2025-03-13",
"count": 2
},
{
"date": "2025-03-16",
"count": 1
},
{
"date": "2025-03-18",
"count": 1
},
{
"date": "2025-03-19",
"count": 1
},
{
"date": "2025-03-26",
"count": 1
},
{
"date": "2025-04-01",
"count": 1
},
{
"date": "2025-04-06",
"count": 2
},
{
"date": "2025-04-08",
"count": 2
},
{
"date": "2025-04-11",
"count": 1
},
{
"date": "2025-04-16",
"count": 1
},
{
"date": "2025-04-21",
"count": 1
},
{
"date": "2025-04-24",
"count": 1
},
{
"date": "2025-04-29",
"count": 1
},
{
"date": "2025-04-30",
"count": 1
},
{
"date": "2025-05-01",
"count": 1
},
{
"date": "2025-05-02",
"count": 1
},
{
"date": "2025-05-10",
"count": 1
},
{
"date": "2025-05-16",
"count": 1
},
{
"date": "2025-05-17",
"count": 1
},
{
"date": "2025-05-21",
"count": 1
},
{
"date": "2025-05-23",
"count": 1
},
{
"date": "2025-06-05",
"count": 1
},
{
"date": "2025-06-13",
"count": 1
},
{
"date": "2025-06-15",
"count": 1
},
{
"date": "2025-06-19",
"count": 1
},
{
"date": "2025-07-02",
"count": 1
},
{
"date": "2025-07-06",
"count": 1
},
{
"date": "2025-07-11",
"count": 1
},
{
"date": "2025-07-23",
"count": 1
},
{
"date": "2025-08-04",
"count": 1
},
{
"date": "2025-08-06",
"count": 2
},
{
"date": "2025-08-14",
"count": 1
},
{
"date": "2025-08-16",
"count": 1
},
{
"date": "2025-08-22",
"count": 2
},
{
"date": "2025-09-03",
"count": 1
},
{
"date": "2025-09-07",
"count": 1
},
{
"date": "2025-09-08",
"count": 1
},
{
"date": "2025-09-09",
"count": 1
},
{
"date": "2025-09-11",
"count": 1
},
{
"date": "2025-09-18",
"count": 1
},
{
"date": "2025-09-29",
"count": 1
},
{
"date": "2025-10-01",
"count": 1
},
{
"date": "2025-10-04",
"count": 1
},
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2025-10-10",
"count": 2
},
{
"date": "2025-10-13",
"count": 1
},
{
"date": "2025-10-14",
"count": 1
},
{
"date": "2025-10-16",
"count": 1
},
{
"date": "2025-10-23",
"count": 1
},
{
"date": "2025-11-12",
"count": 3
},
{
"date": "2025-11-13",
"count": 1
},
{
"date": "2025-11-19",
"count": 3
},
{
"date": "2025-11-25",
"count": 1
},
{
"date": "2025-11-27",
"count": 1
},
{
"date": "2025-11-30",
"count": 1
},
{
"date": "2025-12-03",
"count": 1
},
{
"date": "2025-12-05",
"count": 1
},
{
"date": "2025-12-08",
"count": 1
},
{
"date": "2025-12-09",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2025-12-15",
"count": 1
},
{
"date": "2025-12-22",
"count": 1
},
{
"date": "2025-12-25",
"count": 1
},
{
"date": "2025-12-29",
"count": 1
},
{
"date": "2026-01-02",
"count": 2
},
{
"date": "2026-01-05",
"count": 1
},
{
"date": "2026-01-10",
"count": 1
},
{
"date": "2026-01-16",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-01-23",
"count": 1
},
{
"date": "2026-01-27",
"count": 1
},
{
"date": "2026-01-29",
"count": 1
},
{
"date": "2026-01-30",
"count": 1
},
{
"date": "2026-02-03",
"count": 1
},
{
"date": "2026-02-04",
"count": 1
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-02-12",
"count": 1
},
{
"date": "2026-02-20",
"count": 1
},
{
"date": "2026-03-07",
"count": 1
},
{
"date": "2026-03-09",
"count": 1
},
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-16",
"count": 2
},
{
"date": "2026-03-26",
"count": 2
},
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-04-13",
"count": 2
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-04-29",
"count": 2
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-05-05",
"count": 3
},
{
"date": "2026-05-06",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-05",
"count": 1
},
{
"date": "2026-06-09",
"count": 2
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-17",
"count": 2
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-06-23",
"count": 2
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-06-25",
"count": 2
},
{
"date": "2026-06-28",
"count": 2
},
{
"date": "2026-06-30",
"count": 1
},
{
"date": "2026-07-01",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": false,
"collected": 1000,
"total_forks": 1264
},
"star_history": null,
"open_issues_and_prs": 95
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example",
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"mls/src/main/proto/mls_client.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"bom/build.gradle",
"build.gradle",
"core/build.gradle",
"jmail/build.gradle",
"mail/build.gradle",
"misc/build.gradle",
"mls/build.gradle",
"pg/build.gradle",
"pkix/build.gradle",
"prov/build.gradle",
"test/build.gradle",
"tls/build.gradle",
"util/build.gradle"
],
"largest_source_bytes": 1866290,
"source_files_sampled": 7893,
"oversized_source_files": 101,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1407
},
"dependencies": {
"manifests": [
"bom/build.gradle",
"build.gradle",
"core/build.gradle",
"jmail/build.gradle",
"mail/build.gradle",
"misc/build.gradle",
"mls/build.gradle",
"pg/build.gradle",
"pkix/build.gradle",
"prov/build.gradle",
"test/build.gradle",
"tls/build.gradle",
"util/build.gradle"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 31,
"merged_prs": 43,
"open_issues": 64,
"closed_ratio": 0.96,
"closed_issues": 1548,
"closed_unmerged_prs": 518
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "dghgit",
"commits": 9626,
"avatar_url": "https://avatars.githubusercontent.com/u/10509846?v=4"
},
{
"type": "User",
"login": "peterdettman",
"commits": 5852,
"avatar_url": "https://avatars.githubusercontent.com/u/3423981?v=4"
},
{
"type": "User",
"login": "mwcw",
"commits": 448,
"avatar_url": "https://avatars.githubusercontent.com/u/30947532?v=4"
},
{
"type": "User",
"login": "vanitasvitae",
"commits": 337,
"avatar_url": "https://avatars.githubusercontent.com/u/7854206?v=4"
},
{
"type": "User",
"login": "ligefeiBouncycastle",
"commits": 110,
"avatar_url": "https://avatars.githubusercontent.com/u/143379185?v=4"
},
{
"type": "User",
"login": "meganwoods",
"commits": 76,
"avatar_url": "https://avatars.githubusercontent.com/u/4627862?v=4"
},
{
"type": "User",
"login": "timw",
"commits": 46,
"avatar_url": "https://avatars.githubusercontent.com/u/670828?v=4"
},
{
"type": "User",
"login": "MikeSafonov",
"commits": 42,
"avatar_url": "https://avatars.githubusercontent.com/u/11156850?v=4"
},
{
"type": "User",
"login": "tonywasher",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/35172668?v=4"
},
{
"type": "User",
"login": "brandonweeks",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/15869?v=4"
}
],
"contributors_sampled": 100,
"top_contributor_share": 0.568
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"codeql.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 0,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 34 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected: CodeQL",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "fdc5011e1d54cb5f9687ceda5dbeefea13528bdb",
"ran_at": "2026-07-25T09:59:31Z",
"aggregate_score": 6.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T01:18:16Z",
"oldest_open_prs": [
{
"number": 126,
"created_at": "2015-12-23T20:56:29Z",
"last_comment_at": "2017-11-07T08:58:35Z",
"last_comment_author": "worsaae"
},
{
"number": 141,
"created_at": "2016-04-22T14:37:07Z",
"last_comment_at": "2017-12-22T10:45:12Z",
"last_comment_author": "marvin-enthus"
},
{
"number": 261,
"created_at": "2017-11-28T05:47:41Z",
"last_comment_at": "2017-12-13T05:44:48Z",
"last_comment_author": "inthirakumaaran"
},
{
"number": 336,
"created_at": "2018-05-02T13:34:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 590,
"created_at": "2019-09-12T10:42:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 815,
"created_at": "2020-10-22T13:33:57Z",
"last_comment_at": "2020-10-22T13:34:57Z",
"last_comment_author": "artem-smotrakov"
},
{
"number": 883,
"created_at": "2021-02-15T10:44:25Z",
"last_comment_at": "2023-02-11T14:48:59Z",
"last_comment_author": "hannesa2"
},
{
"number": 885,
"created_at": "2021-02-15T11:18:42Z",
"last_comment_at": "2025-04-12T12:58:45Z",
"last_comment_author": "dghgit"
},
{
"number": 908,
"created_at": "2021-03-16T10:03:04Z",
"last_comment_at": "2023-05-19T03:14:43Z",
"last_comment_author": "jsuper"
},
{
"number": 1517,
"created_at": "2023-10-25T22:10:04Z",
"last_comment_at": "2023-10-27T07:02:36Z",
"last_comment_author": "peterdettman"
},
{
"number": 1710,
"created_at": "2024-06-17T15:17:40Z",
"last_comment_at": "2024-06-19T13:33:10Z",
"last_comment_author": "markus-jung-vivavis"
},
{
"number": 1719,
"created_at": "2024-06-21T12:40:50Z",
"last_comment_at": "2024-06-21T12:41:48Z",
"last_comment_author": "vanitasvitae"
},
{
"number": 1740,
"created_at": "2024-07-15T19:18:40Z",
"last_comment_at": "2024-07-16T09:33:02Z",
"last_comment_author": "vladhuma"
},
{
"number": 1748,
"created_at": "2024-07-18T14:37:29Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1828,
"created_at": "2024-09-06T13:13:29Z",
"last_comment_at": "2024-09-10T14:12:42Z",
"last_comment_author": "vanitasvitae"
},
{
"number": 1996,
"created_at": "2025-02-14T05:37:10Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2026,
"created_at": "2025-03-14T00:01:06Z",
"last_comment_at": "2025-09-14T02:51:21Z",
"last_comment_author": "dghgit"
},
{
"number": 2043,
"created_at": "2025-03-27T20:01:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2107,
"created_at": "2025-06-16T22:12:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2108,
"created_at": "2025-06-16T22:15:24Z",
"last_comment_at": "2025-08-12T13:37:40Z",
"last_comment_author": "winfriedgerlach"
}
],
"last_merged_pr_at": "2025-03-21T04:34:25Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 123,
"created_at": "2015-12-14T08:52:49Z",
"last_comment_at": "2018-02-14T10:01:52Z",
"last_comment_author": "ryhaberecht"
},
{
"number": 250,
"created_at": "2017-11-09T08:14:20Z",
"last_comment_at": "2018-01-10T08:52:40Z",
"last_comment_author": "kasunbg"
},
{
"number": 279,
"created_at": "2018-01-17T16:04:06Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 443,
"created_at": "2018-12-17T11:10:11Z",
"last_comment_at": "2025-08-22T18:33:47Z",
"last_comment_author": "makkarpov"
},
{
"number": 480,
"created_at": "2019-03-15T18:37:42Z",
"last_comment_at": "2019-09-11T07:47:48Z",
"last_comment_author": "lavcraft"
},
{
"number": 596,
"created_at": "2019-09-24T08:46:06Z",
"last_comment_at": "2019-09-30T14:46:58Z",
"last_comment_author": "suraj0208"
},
{
"number": 654,
"created_at": "2020-02-06T22:13:55Z",
"last_comment_at": "2020-04-05T15:47:42Z",
"last_comment_author": "kimmerin"
},
{
"number": 731,
"created_at": "2020-06-18T05:47:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 742,
"created_at": "2020-06-30T08:47:49Z",
"last_comment_at": "2025-07-18T01:36:40Z",
"last_comment_author": "wlsdn93"
},
{
"number": 934,
"created_at": "2021-04-20T05:23:02Z",
"last_comment_at": "2022-05-10T01:06:01Z",
"last_comment_author": "adolfo-trocoli"
},
{
"number": 946,
"created_at": "2021-05-07T11:37:03Z",
"last_comment_at": "2024-11-05T12:57:59Z",
"last_comment_author": "aozmen121"
},
{
"number": 1050,
"created_at": "2021-10-26T09:21:59Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1135,
"created_at": "2022-03-30T13:37:30Z",
"last_comment_at": "2022-06-14T10:28:17Z",
"last_comment_author": "emilmuller"
},
{
"number": 1157,
"created_at": "2022-04-25T08:59:28Z",
"last_comment_at": "2022-04-26T10:29:58Z",
"last_comment_author": "peterdettman"
},
{
"number": 1165,
"created_at": "2022-05-13T08:20:31Z",
"last_comment_at": "2024-12-12T16:15:49Z",
"last_comment_author": "winfriedgerlach"
},
{
"number": 1199,
"created_at": "2022-07-30T06:59:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1289,
"created_at": "2022-11-29T19:56:04Z",
"last_comment_at": "2023-05-20T06:36:19Z",
"last_comment_author": "dghgit"
},
{
"number": 1347,
"created_at": "2023-03-06T15:07:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1440,
"created_at": "2023-06-29T12:55:19Z",
"last_comment_at": "2023-07-03T11:54:27Z",
"last_comment_author": "max-m-s"
},
{
"number": 1468,
"created_at": "2023-08-07T18:22:36Z",
"last_comment_at": "2024-09-18T17:18:02Z",
"last_comment_author": "Horcrux7"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/bcgit/bc-java",
"host": "github.com",
"name": "bc-java",
"owner": "bcgit"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"security": 63,
"vitality": 60,
"community": 82,
"governance": 52,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 60,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"commits_last_year": 1693,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 52
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "52/52 weeks with commits",
"points": 36,
"status": "met",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 52
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1693 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1693
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 82,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "excellent",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"forks": 1264,
"stars": 2670,
"watchers": 135,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2,670 stars",
"points": 55.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 2670
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1,264 forks",
"points": 25,
"status": "met",
"details": [
{
"code": "forks",
"params": {
"count": 1264
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "135 watchers",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 135
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 52,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 100,
"top_contributor_share": 0.568
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 57% of commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 57
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "100 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 100
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 34 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"merged_prs": 43,
"open_issues": 64,
"closed_issues": 1548,
"issue_closed_ratio": 0.96,
"closed_unmerged_prs": 518
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "96% of issues closed",
"points": 44.9,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 96
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "43/561 decided PRs merged",
"points": 2.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 43,
"decided": 561
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"followers": 296,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "bcgit",
"public_repos": 9,
"account_age_days": 4804
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "296 followers of bcgit",
"points": 17.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 296,
"login": "bcgit"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "9 public repos, account ~13 yr old",
"points": 19.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 9
}
},
{
"code": "account_age_years",
"params": {
"years": 13
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"crypto",
"java",
"openpgp",
"dtls",
"post-quantum-cryptography",
"tls"
],
"has_wiki": true,
"homepage": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 63,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 6.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 34 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected: CodeQL",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 8
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 70,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.47,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1407
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "47 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 25.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 47,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"bom/build.gradle",
"build.gradle",
"core/build.gradle",
"jmail/build.gradle",
"mail/build.gradle",
"misc/build.gradle",
"mls/build.gradle",
"pg/build.gradle",
"pkix/build.gradle",
"prov/build.gradle",
"test/build.gradle",
"tls/build.gradle",
"util/build.gradle"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "bom/build.gradle, build.gradle, core/build.gradle (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "bom/build.gradle, build.gradle, core/build.gradle"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Java (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 1866290,
"source_files_sampled": 7893,
"oversized_source_files": 101
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "101/7893 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 7893,
"oversized": 101
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"example",
"examples"
],
"has_mcp_signal": false,
"api_schema_files": [
"mls/src/main/proto/mls_client.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "mls/src/main/proto/mls_client.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "mls/src/main/proto/mls_client.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example, examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example, examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T09:59:54.085292Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/bcgit/bc-java.svg",
"full_name": "bcgit/bc-java",
"license_state": "standard",
"license_spdx": "MIT"
}Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.
Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.
Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte Statistiken.