Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-28 21:16 UTC

oroinc / OroHealthCheckBundle

PHPEigene Lizenz★ 3 Sterne⑂ 0 Forksseit Juni 2018Auf GitHub ansehen ↗

oroinc/OroHealthCheckBundle erreicht einen Gesundheitsindex von 19 von 100 und liegt damit im Bereich Kritisch. Am stärksten schneidet es bei Sustainability & Governance (59/100) ab, am schwächsten bei Security (14/100). Zuletzt heute aktualisiert. 3 Mitwirkende tragen den Großteil der jüngsten Arbeit.

19
gesamt / 100
Kritisch

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

19
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Die Richtlinie für Hochrisikojurisdiktionen wendet einen Multiplikator von 50 % auf die gewichtete Gesamtgesundheit an und begrenzt sie auf die Obergrenze Gefährdet von 49.

Eigentümerschaft

Oro, Inc.Organisation
121 Follower104 öffentliche Reposseit Apr. 2013

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlichtTags
Packagistoro/health-check-bundle7.0.15.89685vor 95 Tagenorohealth-check

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

46Gefährdet · 22 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 0 Tagen
2.8/36Commit-Rhythmus — 4/52 Wochen mit Commits
7/18Commit-Volumen — 5 Commits im letzten Jahr
1/10OpenSSF Scorecard: Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Verwendete Eingangsdaten
commits_last_year5
human_commit_share1
days_since_last_push0
active_weeks_last_year4

Release-Disziplin

44Gefährdet
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 1 Releases veröffentlicht
0/36Release-Aktualität — letztes Release vor 2.960 Tagen
12.6/27Release-Rhythmus — Rhythmus unbekannt (nur ein Release)
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count1
latest_release_tag2.3.0
releases_from_tagsnein
days_since_latest_release2.960
mean_days_between_releases
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

32Gefährdet · 18 % des Gesamtindex
Wie die Bewertung erfolgt
4.9/60Stars — 3 Stars
0/25Forks — 0 Forks
5.3/15Watcher — 10 Watcher
Verwendete Eingangsdaten
forks0
stars3
watchers10
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
16.9/22.5Lizenz — Lizenzdatei vorhanden, keine anerkannte Lizenz
0/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
0/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingnein
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templatenein
Wie die Bewertung erfolgt
50.3/80Downloads pro Monat — 5.896 Downloads/Monat über packagist
0/20Abhängige in der Registry — 0 Pakete hängen davon ab
Verwendete Eingangsdaten
packagesoro/health-check-bundle
dependents0
ecosystemspackagist
total_downloads254.047
monthly_downloads5.896

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

59Mittel · 24 % des Gesamtindex
Wie die Bewertung erfolgt
36/54Bus-Faktor — 3 Beitragende decken die Hälfte aller Commits ab
15.5/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 31 % der Commits
13.5/13.5Breite der Beitragenden — 18 Beitragende
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Verwendete Eingangsdaten
bus_factor3
contributors_sampled18
top_contributor_share0,31
Wie die Bewertung erfolgt
0/46.8Issue-Lösungsquote — keine Issues oder keine Daten
0/38.3PR-Annahme — keine entschiedenen Pull Requests oder keine Daten
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Verwendete Eingangsdaten
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Issue-Lösungsquote, PR-Annahme. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
15/25Reichweite des Inhabers — 121 Follower von oroinc
25/25Kontohistorie — 104 öffentliche Repos, Kontoalter ca. 13 Jahre
Verwendete Eingangsdaten
followers121
owner_typeOrganization
is_verified
owner_loginoroinc
public_repos104
account_age_days4.851

Paketpflege

100Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf packagist
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 95 Tagen
20/20Versionshistorie — 85 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesoro/health-check-bundle
ecosystemspackagist
any_deprecatednein
min_days_since_publish95

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

30Gefährdet · 20 % des Gesamtindex
Wie die Bewertung erfolgt
0/24CI-Workflows
24/24Tests vorhanden
0/16Linter-Konfiguration
0/9.6Pre-Commit-Hooks
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — keine Daten
Verwendete Eingangsdaten
has_cinein
has_testsja
has_editorconfignein
has_linter_confignein
has_precommit_confignein
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: CI-Tests. Die verbleibenden Gewichte wurden renormalisiert.

Dokumentation

30Gefährdet
Wie die Bewertung erfolgt
30/30README
0/25Dokumentationsverzeichnis
0/15Dokumentations-/Homepage-Site
0/10Repository-Beschreibung
0/10Topics
0/10Wiki
Verwendete Eingangsdaten
topics
has_wikinein
homepage
has_readmeja
has_docs_dirnein
has_descriptionnein

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

14Kritisch · 16 % des Gesamtindex

Sicherheitslage

14Kritisch
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — keine Daten
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
0/10Dangerous-Workflow — keine Daten
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.2/2.5Lizenz — license file detected
0.8/7.5Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
0/5Packaging — keine Daten
0/5Pinned-Dependencies — keine Daten
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — keine Daten
0/7.5Token-Permissions — keine Daten
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated12
scorecard_versionv5.5.0
checks_inconclusive6
scorecard_aggregate2,9
high_risk_jurisdiction_cap49
high_risk_jurisdiction_multiplier50
security_posture_after_multiplier14
security_posture_before_jurisdiction29
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Die verbleibenden Gewichte wurden renormalisiert. Die Richtlinie für Hochrisikojurisdiktionen wendet einen Multiplikator von 50 % an und begrenzt die Sicherheitslage auf die Obergrenze Gefährdet von 49.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

35Gefährdet · 0 % des Gesamtindex
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
39.2/40Lesbare Commit-Historie — 61 von 83 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,735
agent_instruction_files
agent_instruction_max_bytes
Wie die Bewertung erfolgt
0/18Bootstrap mit einem Befehl
22/22Automatisierte Tests
0/11Lint-/Format-Konfiguration
0/11Statische Typprüfung
0/10Reproduzierbare Umgebung
0/10Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 83
0/8Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet
0/10OpenSSF Scorecard: Pinned-Dependencies — keine Daten
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfiles
has_dockerfilenein
typed_languagenein
bootstrap_files
has_devcontainernein
has_linter_confignein
typecheck_configs
agent_commit_share0
toolchain_manifests
dependency_bot_commit_share0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Pinned-Dependencies. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
0/45Typprüfbarer Code — PHP ohne Typprüfungs-Konfiguration
55/55Handhabbare Dateigrößen — 0/46 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languagePHP
largest_source_bytes5.113
source_files_sampled46
oversized_source_files0

Eckdaten

3GitHub-Sterne
18Mitwirkende
5Commits, letzte 12 Monate
0Tage seit letztem Push
1Releases
3Bus-Faktor
0offene Issues
PackagistPaket-Ökosysteme

Warnungen zur Datenerhebung

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • No resolved dependencies carried a version and a supported ecosystem

Weitere Details

OpenSSF Scorecard 2.9 / 10
2.9Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-28 21:16 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
k. A.CI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
k. A.Dangerous-Workflowno workflows found
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
9Licenselicense file detected
1Maintained2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
k. A.Packagingpackaging workflow not detected
k. A.Pinned-Dependenciesno dependencies found
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
k. A.Signed-Releasesno releases found
k. A.Token-PermissionsNo tokens found
10Vulnerabilities0 existing vulnerabilities detected
Direkte Abhängigkeiten 2
RegistryPaketVersionsvorgabeManifest
Packagistoro/platform-enterprise7.1.*composer.json
Packagistliip/monitor-bundle2.*composer.json
Alle Abhängigkeiten 2

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 2 direkte und 0 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
Packagistliip/monitor-bundledirekt
Packagistoro/platform-enterprisedirekt
Abhängigkeits-Advisories nicht bewertet

Der Advisory-Abgleich konnte für diesen Bericht nicht ausgeführt werden: No resolved dependencies carried a version and a supported ecosystem

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 163,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "PHP": 73457,
        "Gherkin": 1214
      },
      "pushed_at": "2026-07-28T21:07:16Z",
      "created_at": "2018-06-14T14:40:50Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-28T21:08:17Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "master",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "PHP",
      "significant_languages": [
        "PHP"
      ]
    },
    "owner": {
      "blog": "https://www.oroinc.com/",
      "name": "Oro, Inc.",
      "type": "Organization",
      "login": "oroinc",
      "company": null,
      "location": "Los Angeles",
      "followers": 121,
      "avatar_url": "https://avatars.githubusercontent.com/u/4165718?v=4",
      "created_at": "2013-04-15T23:39:58Z",
      "is_verified": null,
      "public_repos": 104,
      "account_age_days": 4851
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "2.3.0",
          "kind": "minor",
          "published_at": "2018-06-20T10:10:40Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "894c5d3d682529f9f386d9c77d5c9c06077316b0",
          "body": "- Bump version to 7.1\n- Remove orocrm-magento1-connector for crm-demo\n- Change Magento demo data with general\n- Drop dead Magento package exclusions from the static analysis runners\n  (.jenkins/php_code_style_standalone.sh, docker-build/scripts/test_phpcs.sh,\n  test_phpmd.sh, test_php-cs-fixer.sh): \n[…]\ntes.php and preprocess-annotations.php.\n- Align ai-smart-agent branch-alias with the other packages: 7.1.x-dev => 7.1-dev.\n- Remove unused getReportReference() from the B2C demo data EntityReferences.",
          "is_bot": false,
          "headline": "BB-27086: Set application version in master to 7.1 (#46136)",
          "author_name": "Victor Tihonchuk",
          "author_login": "advocat",
          "committed_at": "2026-07-28T16:33:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3f52bdcb931c7f6635ee8aa5bb1fe0a1dd5be2cc",
          "body": "…n (#45150)",
          "is_bot": false,
          "headline": "BAP-23348: Improve logging for SMTP/IMAP/LDAP connection configuratio…",
          "author_name": "Vova Soroka",
          "author_login": "vsoroka",
          "committed_at": "2026-05-29T18:12:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "560f892b8082d361a81a97aa4ff27167f53cf908",
          "body": "… standard (#45005)",
          "is_bot": false,
          "headline": "BAP-23363: Fix test classes that do not comply with PSR-4 autoloading…",
          "author_name": "Vova Soroka",
          "author_login": "vsoroka",
          "committed_at": "2026-04-24T00:03:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "205b41516889a3b786902b84d3d0bffcdf01d2a2",
          "body": null,
          "is_bot": false,
          "headline": "BB-25349: Set application version in master to 7.0 (#43720)",
          "author_name": "Andrii Yatsenko",
          "author_login": "anyt",
          "committed_at": "2026-01-15T07:48:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3cb8552b17f1c2dddefe9c7bfebe25aa46c76756",
          "body": "- Added missing class PHPDoc comments",
          "is_bot": false,
          "headline": "BAP-23252: Upgrade PHP_CodeSniffer and PHP CS Fixer",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2026-01-11T23:50:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa5a9fce24b04975e255059ab748eaf495e8a853",
          "body": "- Misc PSR-2 and PSR-12 code style fixes:\n  - PSR12.Traits.UseDeclaration\n  - Squiz.Functions.FunctionDeclarationArgumentSpacing\n  - PSR12.Operators.OperatorSpacing\n  - PSR2.Classes.PropertyDeclaration\n  - PSR12.Operators.OperatorSpacing\n  - PSR12.Classes.AnonClassDeclaration\n  - duplicated namespace\n  - multiline control structures\n  - ignore valid deprecation comments",
          "is_bot": false,
          "headline": "BAP-23252: Upgrade PHP_CodeSniffer and PHP CS Fixer",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2026-01-11T23:50:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b1569747a58d800bf34a1b7d3143777ac00426b",
          "body": "- BB-25086: Invoice Entity\n- BB-25089: Pay Invoice\n- BB-25307: Pay Invoice - Changelog & documentation\n- BB-24108: Invoice PDF\n- BB-25274: Invoice PDF - Changelog & documentation\n- BB-25559: Data Audit for JSON Fields\n- BB-25449: Seller Info Configuration\n- BB-25616: Invoice Number Generator\n- BB-25\n[…]\nTo and ShipTo\n- BB-25771: Invoice Status\n- BB-25653: Entity activities are duplicated when entity configs are refreshed during install\n- BB-25773: Invoice Email Template\n- BB-25772: Invoice Line Items",
          "is_bot": false,
          "headline": "BB-24102: Invoices (#40770)",
          "author_name": "Yefim Yevtushenko",
          "author_login": "webevt",
          "committed_at": "2025-07-18T10:19:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "79e46dcc5b0d061dec63c7fc5e829bcc51c7899f",
          "body": null,
          "is_bot": false,
          "headline": "BAP-22853  Improve app healthchecks (#40635)",
          "author_name": "timofiyprisyazhnyuk",
          "author_login": "timofiyprisyazhnyuk",
          "committed_at": "2025-06-19T10:22:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b9ed63672b5c647514bb00746961f9429320972",
          "body": "… (#39443)\n\n---------\n\nCo-authored-by: timofiyprisyazhnyuk <timofiyprisyazhnyuk@gmail.com>",
          "is_bot": false,
          "headline": "BAP-22494 Parameter web_backend_prefix should not be used in platform…",
          "author_name": "Maksym Maksymenko",
          "author_login": "fubolg",
          "committed_at": "2025-03-31T08:15:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01ab825633a7ecd6b89a4539fcdda173a48d3985",
          "body": "…s (#40551)\n\n* BB-25262 Build to 6.0 failing because of old classes with PSR-4 errors\n- updated dev.json files to proper Tests folder exclusion rule\n- updated composer.json files to proper Tests folder exclusion rule\n- appended composer.json\n\n* Updated dev.locks\n| Production Changes        | From   \n[…]\nser     | 2.0.0    | 2.1.0    | [...](https://github.com/phpstan/phpdoc-parser/compare/2.0.0...2.1.0)                           |\n\n---------\n\nCo-authored-by: orocrmdeployer <orocrmdeployer@oroinc.com>",
          "is_bot": false,
          "headline": "BB-25262 Build to 6.0 failing because of old classes with PSR-4 error…",
          "author_name": "Vitalii Yeromenko",
          "author_login": "vetal-e",
          "committed_at": "2025-02-20T13:00:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4fcce2f3393d8bf80b9d7d839478c9fb7973bed5",
          "body": null,
          "is_bot": false,
          "headline": "BAP-22912: Fix PHP 8.4 deprecation messages",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2025-01-31T01:37:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72146957f7f36ddda8eac8e1227b17c4c52c27ce",
          "body": null,
          "is_bot": false,
          "headline": "BAP-22912: Fix PHP 8.4 deprecation messages",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2025-01-30T04:48:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36376edede817bd314608eb2568d41425ebdcd48",
          "body": "* BB-24783: Update license files\r\n- updated copyright year, domains, license texts and references in applications and packages\r\n\r\n* Updated dev.locks\r\n\r\n| Production Changes                | From     | To       | Compare                                                                                \n[…]\n(https://github.com/schmittjoh/serializer/compare/3.31.0...3.31.1) |\r\n\r\n---------\r\n\r\nCo-authored-by: orocrmdeployer <orocrmdeployer@oroinc.com>\r\nCo-authored-by: Julia Khrysieva <ikhrysieva@oroinc.com>",
          "is_bot": false,
          "headline": "BB-24783: Update license files (#39644)",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2024-11-05T10:48:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5ced04b7b652389d5be893dfc6c9f35822b980bb",
          "body": "…#39344)\n\n- Updated php-cs-fixer config\r\n- Applied new cs rules\r\n- Deleted annotations like \"{@inheritDoc}\"\r\n- Rector AddOverrideAttributeToOverriddenMethodsRector rule applied\r\n- Updated documentation",
          "is_bot": false,
          "headline": "BAP-22772: Use override attribute instead of inheritdoc annotations (…",
          "author_name": "Oleksandr Protsiuk",
          "author_login": "OleksandrProtsiuk",
          "committed_at": "2024-09-24T12:20:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6e032fc5cb18878e6a9e43e4c6dc996765b92b9",
          "body": "…ly classes) (#38494)",
          "is_bot": false,
          "headline": "BAP-22645: Update CS tooling to support new PHP features (e.g. readon…",
          "author_name": "Oleksandr Protsiuk",
          "author_login": "OleksandrProtsiuk",
          "committed_at": "2024-06-04T10:28:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f0f790575af98d4f01e5d5668ba511afb4ab57c",
          "body": null,
          "is_bot": false,
          "headline": "BAP-22638: Fix using cyrillic \"с\" instead of latin \"c\" (#38389)",
          "author_name": "Vova Soroka",
          "author_login": "vsoroka",
          "committed_at": "2024-05-16T02:47:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9126e4b67521cfecc5286a6002b2c730073a395",
          "body": "* tagging for Regular and Regression builds",
          "is_bot": false,
          "headline": "BB-19349: Review behat tests from regular build (#38295)",
          "author_name": "Roman Kukla",
          "author_login": "poman",
          "committed_at": "2024-05-03T15:36:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c30857ecabd58a98fcd1f101b69c05ddcf1fd90",
          "body": null,
          "is_bot": false,
          "headline": "BB-23821: Updated app version to 6.1 (#37996)",
          "author_name": "Andrii Yatsenko",
          "author_login": "anyt",
          "committed_at": "2024-04-08T12:57:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "940f2a34fb87d4c47ef08598008e8f6918b376af",
          "body": null,
          "is_bot": false,
          "headline": "BAP-22072: Health check page contains invalid information (#37461)",
          "author_name": "Eugene Zibrov",
          "author_login": "eugene-zibrov",
          "committed_at": "2024-02-02T14:07:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c8d43ab623a2a23f7ac991394348b31c39e7abd4",
          "body": "- Migrated to Authenticator-based Security\r\n    - Refactored all the authenticators to use new security architecture\r\n    - Disabled all the custom authenticators\r\n    - Refactoring + UserInterface replaced by AbstractUser\r\n    - Added PULIC_ACCESS to open routes and added oro_security.access_contro\n[…]\nroinc.com>\r\nCo-authored-by: Zsombor Boldizsar-Zeik <zsombor.boldizsar.zeik@oroinc.com>\r\nCo-authored-by: Maksym Maksymenko <mmaksymenko@oroinc.com>\r\nCo-authored-by: Yevhenii Zhadan <yzhadan@oroinc.com>",
          "is_bot": false,
          "headline": "BAP-22237: Upgrade to Symfony 6.4 (#37219)",
          "author_name": "Andrii Yatsenko",
          "author_login": "anyt",
          "committed_at": "2024-01-07T10:00:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "41a3f62d214e0761a71151628297ede3a4e0bb0f",
          "body": "\r\nCo-authored-by: Viacheslav Dubrovskyi <vdubrovskyi@oroinc.com>",
          "is_bot": false,
          "headline": "BAP-22239: Move maintenance lock out of cache folder (#36411)",
          "author_name": "Andrii Yatsenko",
          "author_login": "anyt",
          "committed_at": "2023-09-14T07:31:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3411da44b43ea9cd570c636bba35e826b44d348",
          "body": "- switched oro/ packages to 6.0.* version",
          "is_bot": false,
          "headline": "BB-22921: 6.0.0 BETA (#36401)",
          "author_name": "Andrii Yatsenko",
          "author_login": "anyt",
          "committed_at": "2023-09-12T10:20:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "621b51fa3dba070e1feb1212517da786bb4b1dd1",
          "body": null,
          "is_bot": false,
          "headline": "BAP-22238: Use Symfony 6 return types (#36389)",
          "author_name": "Andrii Yatsenko",
          "author_login": "anyt",
          "committed_at": "2023-09-11T18:55:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "560f795da11e49bc68ffd1f5f2dcf1d8e778ff0e",
          "body": null,
          "is_bot": false,
          "headline": "BAP-22145: Redis healthchecks do not work (#36005)",
          "author_name": "Eugene Zibrov",
          "author_login": "eugene-zibrov",
          "committed_at": "2023-07-13T08:09:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7b56a65cb11108f1d98e70a43599558e75d9c8e",
          "body": "- added resolve of asterisk to application url\r\n- added logger and more verbosity to WampClient\r\n- fixed stream is not fully read because of buffering in tls connection\r\n- added ability to disable websocket server\r\n- added skip websocket healthcheck if it is not configured\r\n- removed websocket-related error from ExcludeLogByMessageHandler\r\n- added `user_agent` WS client parameter\r\n- updated documentation",
          "is_bot": false,
          "headline": "BAP-21789: websocket_frontend healthcheck is not working (#34541)",
          "author_name": "Eugene Zibrov",
          "author_login": "eugene-zibrov",
          "committed_at": "2023-06-07T17:26:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d8c6ca0a5f394f39c0cece83072294ca646442e",
          "body": "…t is configured\" fails when password is used (#35050)",
          "is_bot": false,
          "headline": "BAP-21893: HealthCheck \"Check if Elasticsearch is available in case i…",
          "author_name": "ikhrysieva",
          "author_login": "ikhrysieva",
          "committed_at": "2023-03-24T12:36:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b6c8bb6a455ffb0c2db3ba7b449db350c46e6ee",
          "body": "- add getSettings() method to Oro\\Bundle\\ConfigBundle\\DependencyInjection\\SettingsBuilder that simplifies loading of system settings into DIC in DI extension\r\n- refactor loading of system settings into DIC in DI extensions\r\n- add strict type to DI extensions\r\n- refactor unit tests for DI extensions",
          "is_bot": false,
          "headline": "BAP-21930: Refactor DI extensions for bundles (#35041)",
          "author_name": "Vova Soroka",
          "author_login": "vsoroka",
          "committed_at": "2023-03-11T15:06:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbcde284bb6fb2854a55ca1c3e83917c9531720c",
          "body": "…managing environment variables (#34720)\n\n- added .env-app files support and removed most of the parameters from the config/parameters.yml in favor of environment variables with DSNs. For more details, see the [migration guide](https://doc.oroinc.com/master/backend/setup/dev-environment/env-vars/).\r\n[…]\n party package snc/redis-bundle.\r\n\r\nCo-authored-by: Serhii Miasnoi <smiasnoi@oroinc.com>\r\nCo-authored-by: Dmytro Syrvachov <dsyrvachov@oroinc.com>\r\nCo-authored-by: Victor Tihonchuk <victor@oroinc.com>",
          "is_bot": false,
          "headline": "BAP-17334: Update applications to use \"symfony/dotenv\" component for …",
          "author_name": "Andrii Yatsenko",
          "author_login": "anyt",
          "committed_at": "2023-01-29T20:12:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a4aa4af13a4e75635aa249f43c3a83eb7fdc30c",
          "body": " - fixed unit and functional tests",
          "is_bot": false,
          "headline": "BAP-21264: Add support of Elasticsearch 8.*",
          "author_name": "Yevhen Shyshkin",
          "author_login": "yshyshkin",
          "committed_at": "2022-07-14T14:48:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61deb554877850b26ed09b9c41d4aa33d75fcee1",
          "body": " - fixed checker and heath check tools\n - upgraded guzzlehttp/psr7\n - replaced HttpFactory with standard implementation",
          "is_bot": false,
          "headline": "BB-21296: Add possibility to boost products by customer history",
          "author_name": "Yevhen Shyshkin",
          "author_login": "yshyshkin",
          "committed_at": "2022-05-17T14:13:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "064b2088d3bf9de8f3b65da0f6969ab316037222",
          "body": " - added new dependencies\n - started work on implementation",
          "is_bot": false,
          "headline": "BAP-21264: Add support of Elasticsearch 8.*",
          "author_name": "Yevhen Shyshkin",
          "author_login": "yshyshkin",
          "committed_at": "2022-05-16T17:28:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14f39ee2e1792b38dfeaddd34f6ff28629b1db6b",
          "body": "…hods (#32522)\n\n- remove unneeded getAlias() method in bundle Extension classes\r\n- remove unneeded getContainerExtension() method in Bundle classes\r\n- remove check for comments for Bundle classes",
          "is_bot": false,
          "headline": "BAP-21348: Remove unneeded getAlias() and getContainerExtension() met…",
          "author_name": "Vova Soroka",
          "author_login": "vsoroka",
          "committed_at": "2022-05-02T19:23:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7626a9a41b1429c9e8ad68943c5fe931fbae6bcc",
          "body": "…ampClient (#32288)\n\n- added WebsocketServerConsoleHandler for toggling websocket monolog handler\r\n- fixed verbosity levels for websocket handler in OroSyncExtension\r\n- added websocket channel to websocket handler along with oro_websocket\r\n- changed logging level to error in ConnectionChecker\r\n- do not log connection error during installation process\r\n- updated tests",
          "is_bot": false,
          "headline": "BAP-20436: Gracefully handle websocket server connection failure in W…",
          "author_name": "Yefim Yevtushenko",
          "author_login": "webevt",
          "committed_at": "2022-04-04T15:23:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd77cddc21ea4530b3cd758bf9fc4b0c8bf139d4",
          "body": null,
          "is_bot": false,
          "headline": "BB-21117: Set application version in master to 5.1",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2022-03-09T11:48:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c8343bf4351afc7d1de75a499d8d9da757d1971",
          "body": " - Connection params were moved to DSN string now and parsed in common parameters bag\r\n - Added of elastic search parameters providers based on data from parameters bag mentioned above\r\n - Removed connection related container parameters compiler passes\r\n - Website search and backoffice search can be split into separate engines(elastic search nodes)\r\n - Removed elastic search's SSL settings processing\r\n - Removed unnecessary parmeters form dist files\r\n - Updated changelog and documentation",
          "is_bot": false,
          "headline": "BAP-21007: Simplify search engine configuration",
          "author_name": "smiasnoi",
          "author_login": "smiasnoi",
          "committed_at": "2022-01-12T18:00:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e66f662c1314e6bb591a7c5586d00e89542bd0ed",
          "body": "- replaced @*.inner services arguments with @.inner",
          "is_bot": false,
          "headline": "BAP-20935: Make use of simpler decoration (#31473)",
          "author_name": "Eugene Chetverikov",
          "author_login": "EugeneC",
          "committed_at": "2021-12-24T12:17:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2bb19d56d18e58356d20a24416e4ad2972276b4c",
          "body": null,
          "is_bot": false,
          "headline": "Refactor functional tests for platform and crm packages (#31283)",
          "author_name": "Vova Soroka",
          "author_login": "vsoroka",
          "committed_at": "2021-12-06T06:14:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6950e02b12e5807d0738001c67aaa41b7c43ba0f",
          "body": "- added Mailer\r\n- added Transport decorator that logs exception and dispatches BeforeMessageEvent instead of mailer\r\n- added LazyTransports decorator for making transports be created on send() method\r\n- added SystemConfigTransportFactory\r\n- added EmbeddedImagesExtractor, EmbeddedImagesInEmailModelHa\n[…]\nmmand\r\n- made use of Mailer in AutoResponseManager\r\n- removed symfony/swiftmailer-bundle\r\n- removed DirectMailer, Processor, SpoolItem, MailerWrapper\r\n- removed status messages from maintenance driver",
          "is_bot": false,
          "headline": "BAP-20793: Replace swiftmailer with symfony/mailer (#31049)",
          "author_name": "Yefim Yevtushenko",
          "author_login": "webevt",
          "committed_at": "2021-11-17T16:17:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "80728967b1460b39fc5ee0fe60fa47a4a6103377",
          "body": "- removed ttl from maintenance mode\r\n- updated doc",
          "is_bot": false,
          "headline": "BAP-20716: Remove ability to set TTL for maintenance (#30790)",
          "author_name": "Eugene Chetverikov",
          "author_login": "EugeneC",
          "committed_at": "2021-10-22T10:15:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba74723e505f734a1b707eb7df65deaeabc55a82",
          "body": "- upgraded symfony packages\r\n- updated dev.locks\r\n\r\n| Production Changes                   | From      | To      | Compare                                                                                 |\r\n|--------------------------------------|-----------|---------|--------------------------------\n[…]\nd routing should use new ErrorController\r\n- symfony/twig-bundle upgrade: removed exception_full.html.twig (customized Symfony exception page)\r\n- symfony/twig-bundle upgrade: removed obsolete templates",
          "is_bot": false,
          "headline": "BAP-20236: Upgrade to Symfony 5.3 - Part 3 (#30654)",
          "author_name": "Yefim Yevtushenko",
          "author_login": "webevt",
          "committed_at": "2021-09-22T08:55:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "951272652fbf002b77e21e3aa3d9190524d254de",
          "body": "…if they don't provide any extra information. (#30170)\n\n* BAP-20688: Code style cleanup. Remove @param and @return PHPDoc tags if they don't provide any extra information.\r\n- extended php cs fixer rules\r\n- manual fixed of invalid docblock comments\r\n- applied automatic fixes\r\n- applied automatic fixes to code samples\r\n- applied automatic fixes after backmerge\r\n- fixed documentation samples",
          "is_bot": false,
          "headline": "BAP-20688: Code style cleanup. Remove @param and @return PHPDoc tags …",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2021-07-16T17:05:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b84dfe2f5a500b03f6b439e2fb0224e9c0ae3cba",
          "body": "…(#30237)\n\n- added OroMaintenanceBundle based on lexik/maintenance-bundle",
          "is_bot": false,
          "headline": "BAP-20695: Upgrade lexik/maintenance-bundle to comply with Symfony 5 …",
          "author_name": "Eugene Chetverikov",
          "author_login": "EugeneC",
          "committed_at": "2021-07-16T14:07:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f136b8d17c0b4bcb59424fdb05f3e75448491a8",
          "body": "…lt (#30063)\n\nupdated links in CHANGELOG.md\r\nupdated documentation to mention that search reindexation is required after upgrade\r\nmoved upgrade notes from packages to the application level and removed UPGRADE.md in packages",
          "is_bot": false,
          "headline": "BB-20108: Enable language optimization for websearch indexes by defau…",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2021-06-14T15:34:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f09a45fed52ffe4cf5a2fe9bc23211b1dc254f41",
          "body": null,
          "is_bot": false,
          "headline": "BAP-20474: Refactor tests for DIC compiler passes (#30022)",
          "author_name": "Vova Soroka",
          "author_login": "vsoroka",
          "committed_at": "2021-06-06T11:15:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "195da0634e0a475b65825bbb1252529d46964c4d",
          "body": "- removed usages of FilterControllerArgumentsEvent, FilterControllerEvent, FilterResponseEvent, FinishRequestEvent, GetResponseEvent, GetResponseForControllerResultEvent, GetResponseForExceptionEvent, PostResponseEvent\r\n- reworked the deprecated ListenerInterface implementations",
          "is_bot": false,
          "headline": "BAP-20629: Upgrade HttpKernel events usages",
          "author_name": "Yefim Yevtushenko",
          "author_login": "webevt",
          "committed_at": "2021-05-28T15:01:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33fd856f7af7396202a38a5b81ede0645e6a180c",
          "body": "Co-authored-by: Mykhailo Sulyma <msulima@oroinc.com>",
          "is_bot": false,
          "headline": "BAP-20464: Fix PhpDoc mismatch and syntax errors (#29280)",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2021-03-05T16:20:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3c3d3dcbd1556d4c7536737840339c3b6be8408",
          "body": "- switched master version to 5.0, because the next version os 5.0.0-alpha.1",
          "is_bot": false,
          "headline": "BB-20256: 4.2 LTS Release",
          "author_name": "Andrii Yatsenko",
          "author_login": "anyt",
          "committed_at": "2021-02-05T15:40:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a1fa3f518d0a79710303267cf6d33bc1b86df06",
          "body": "- cleaned up some dependency injection extension tests",
          "is_bot": false,
          "headline": "BAP-20358: Remove oro:translation:pack command",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2021-01-27T00:26:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a7988f0b0bb0399a36b5141e5ee2d52d2eaf6e4",
          "body": "- upgraded doctrine/persistence and doctrine/orm packages\n- upgraded jms/serializer and hwi/oauth-bundle\n- upgraded oro/crm-magento1-connector to the version that supports doctrine 2.8\n- upgraded akeneo/batch-bundle to the version that supports doctrine 2.8\n- overrode the service in alice fixtures p\n[…]\nroken after doctrine upgrade\n- unskipped API tests that were broken because of the bug in the doctrine that is already fixed in 2.8.1\n- fixed wrong return value in isOrphanRemoval method in API tests.",
          "is_bot": false,
          "headline": "BAP-20330: Upgrade doctrine/orm to 2.8",
          "author_name": "Andrii Yatsenko",
          "author_login": "anyt",
          "committed_at": "2021-01-14T20:46:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e09ada63b861c6521b37d49b5c5fa80243748f68",
          "body": null,
          "is_bot": false,
          "headline": "BAP-20035: File storage component enablement and documentation",
          "author_name": "Yurii Muratov",
          "author_login": "yurio",
          "committed_at": "2020-12-18T13:19:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec9c73b304ba692633da7a54845c636d527f4817",
          "body": "…… (#28974)\n\n- split symfony/symfony package to individual components and bundles dependencies\r\n- removed unused symfony/* packages from the composer.json\r\n- moved dev dependencies to the require-dev section on an application level\r\n- synchronized all the dev.json and composer.json files across the \n[…]\njson and composer.json in package/crm, package/platform and package/commerce\r\n- synchronized all the dependencies version constraints across the applications and packages in dev.json and composer.json",
          "is_bot": false,
          "headline": "BAP-20161: Split symfony/symfony to individual packages and remove un…",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2020-10-05T08:53:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "30414a8ed784c2e6d1d9dfcbbc54b90f881708da",
          "body": "…packages (#28348)\n\n* BAP-19880: Replace zendframework/zend-mail with laminas/laminas-mail\r\n- replaced the package and updated namespaces\r\n- updated laminas-mail and laminas-diactoros to the latest available version",
          "is_bot": false,
          "headline": "BAP-19880: Replace zendframework packages with corresponding laminas …",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2020-08-03T10:55:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00cf5fd8b2e97b5bc0985f54761c6467bcf9ddc7",
          "body": "- fixed \"TypeError : Argument 2 passed to Oro\\Bundle\\HealthCheckBundle\\Tests\\Unit\\Check\\ElasticsearchCheckTest::testCheckConfigured() must be of the type string, bool given\"",
          "is_bot": false,
          "headline": "BAP-19820: Fix unit and functional tests to upgrade PHPUnit",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2020-05-21T02:17:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "471d6073a8f1cfda9e717350f53f526e5a5c5ff0",
          "body": "- fixed \"TypeError : Argument 1 passed to Oro\\Bundle\\HealthCheckBundle\\Tests\\Unit\\Check\\ElasticsearchCheckTest::testCheckConfigured() must be of the type string, bool given\"",
          "is_bot": false,
          "headline": "BAP-19820: Fix unit and functional tests to upgrade PHPUnit",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2020-05-21T02:17:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "870d84d7b1e9cfd9ced942e9456b03b88c99106b",
          "body": "- updated method signatures (setUp, tearDown...)",
          "is_bot": false,
          "headline": "BAP-19820: Fix unit and functional tests to upgrade PHPUnit",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2020-05-21T02:17:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc7faaf4efb175dabeef7eda0756398bae60ca40",
          "body": " - removed redundant quotes in the yaml code examples around class names\n - added quotes to yaml expressions starting with @, otherwise it throws an exception\n - removed usages of class parameters in yaml files",
          "is_bot": false,
          "headline": "DOC-1260: Various documentation fixes reported by the Community",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2020-04-24T15:04:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efdad5f432b4f598f1f239799ee137bec3cff96e",
          "body": "* BB-19089: 4.2-ALPHA1 Release\r\n - updated oro packages versions in composer.json and dev.json",
          "is_bot": false,
          "headline": "BB-19089: 4.2-ALPHA1 Release (#27313)",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2020-03-24T17:36:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f4b1ba7287ccb96ae1e483914c1172064c76732",
          "body": " - fix regular expressions\r\n - fix routes\r\n - update elasticsearch/elasticsearch\r\n- upgrade \"friendsofphp/php-cs-fixer\" to version 2.12.12\r\n- change php version in CI builds\r\n- fixed regexp in behat contexts\r\n- added missed comment\r\n- Updated dev.locks\r\n- fixed broken currency formatting on the fron\n[…]\n on php 7.4 to master branch\r\n- fixed missing composer dependency\r\n - Added functional on PHP 7.3 to regression and weekly builds\r\n\r\nCo-authored-by: Yefim Yevtushenko <webevt@users.noreply.github.com>",
          "is_bot": false,
          "headline": "BB-18645: PHP 7.4 compatibility (#26269)",
          "author_name": "Andrey Sevastianov",
          "author_login": "Andrej-in-ua",
          "committed_at": "2020-02-11T10:47:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f77115fd77d301b64f4692e4be225e8018248ea3",
          "body": "* DOC-1260: Various documentation fixes reported by the Community\r\n - removed links to old documentation\r\n - added links to new documentation to all the packages",
          "is_bot": false,
          "headline": "DOC-1260: Various documentation fixes reported by the Community (#26430)",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2020-01-09T13:58:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b083b182d1593b25a28215364aa9d41512cb6fa7",
          "body": "* BB-17760: Release manager activities\n - updated Jenkinsfile to use 4.1.x version\n* Updated oro packages version to 4.1\n* Updated dev.locks",
          "is_bot": false,
          "headline": "BB-17760: Release manager activities (#26098)",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2019-12-27T14:53:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1c083ec4ac6dd5209cdb58dc739a9e65cdf531f",
          "body": null,
          "is_bot": false,
          "headline": "BAP-19357: Extend logging for Health Check SMTP verification (#26210)",
          "author_name": "Viacheslav Bemza",
          "author_login": null,
          "committed_at": "2019-12-23T14:38:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a69d7306b44d6b0995bc59595171b420d88b51a",
          "body": "- added npm install/ci in post install script\r\n- migrated bower dependencies to npm\r\n- updated dev.json, composer.json files\r\n- got rid of asset-packagist configs in composer.json files\r\n- updated 3rd-party-dependencies.md\r\n- added ORO_NODEJS=12 to jenkins builds configs\r\n- locked doctrine/persistence to 1.2.*\r\n- removed unused repo asset-packagist",
          "is_bot": false,
          "headline": "BB-18432: Composer JS Dependencies (#26112)",
          "author_name": "Yefim Y",
          "author_login": "webevt",
          "committed_at": "2019-12-17T13:53:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82cbba25b70fbb10169559e75860ecac2c766dd5",
          "body": " - added AuthenticatedTokenTrait to return old logic of tokens when list of user roles was changed\r\n - Deprecated constructing a `TreeBuilder` without passing root node information\r\n - added Symfony 4.3 automatic validation\r\n - The getExtendedType() method of the FormTypeExtensionInterface is deprec\n[…]\n(), use Countries instead\r\n - Deprecated RegistryInterface, use Doctrine\\Common\\Persistence\\ManagerRegistry\r\n- updated composer.lock files to symfony 4.4.1\r\n- updated dev.json\r\n- updated composer.json",
          "is_bot": false,
          "headline": "BAP-19397: Upgrade to Symfony 4.4 (#25955)",
          "author_name": "Mykhailo Sulyma",
          "author_login": null,
          "committed_at": "2019-12-04T17:14:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b0331829ae9479dd1995cd9d9a9f96f54c41da8d",
          "body": "…t depended (#24730)\n\n- covered by functional tests\r\n- replace to static keys for api endpoints",
          "is_bot": false,
          "headline": "BAP-19047: Filesystem health check endpoints should not be environmen…",
          "author_name": "Viacheslav Bemza",
          "author_login": null,
          "committed_at": "2019-08-01T12:53:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ecdf29cafea0e471cee7add815e6ad53a3c4a93b",
          "body": "- upgraded liip/imagine-bundle\r\n- removed unused parameter\r\n- upgraded knplabs/knp-gaufrette-bundle\r\n- fixed watermark is not working",
          "is_bot": false,
          "headline": "BAP-19056: Update liip/imagine-bundle package (#24444)",
          "author_name": "Yefim Yevtushenko",
          "author_login": "webevt",
          "committed_at": "2019-07-05T17:29:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c265649b9b0274142bec9d5c43112bfd760242b",
          "body": "…23856)\n\n- added migrations to update acl_protected option\r\n- updated installers\r\n- added unit tests\r\n- CS fixes\r\n - text fixes\r\n- added columns to File entity\r\n- updated test\r\n- added parentEntityFieldName\r\n- added ability to handle collections\r\n- fixed error when value is null\r\n- fixed subscriber \n[…]\n request\r\n- fixed FileViewVoter\r\n- fixed frontend FileUrlProvide\r\n- made DefaultFileAccessControlChecker get data from entity config\r\n- made DefaultFileAccessControlChecker get data from entity config",
          "is_bot": false,
          "headline": "BAP-18587: Permission checks on downloading image field thumbnails (#…",
          "author_name": "Yaroslav Bracilo",
          "author_login": "yaroslavbr",
          "committed_at": "2019-06-12T15:27:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ef9c03970eac7c86807d1f33891c4e39f942967b",
          "body": "* Removed unused .gitignore, composer.cson and LICENSE files from bundles and components that are not distributed as separate packages\n* Generated incompatibilities-4-0-beta.md.\n* Updated dev.json and dev.lock to reference 4.0.x-dev version of oro packages",
          "is_bot": false,
          "headline": " 4.0-beta release preparation",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2019-04-26T09:40:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51754826d7bd9fc38a79b2c8be9c1db1db6d9c27",
          "body": null,
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'origin/master' into fix/BAP-17734",
          "author_name": "Mykhailo Sulyma",
          "author_login": null,
          "committed_at": "2018-11-07T10:42:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c8a2c02f5635cc0249ebe4bbab65cd7257df2317",
          "body": " - refactoring classes for websocket checks\n - updated tests",
          "is_bot": false,
          "headline": "BB-15339: Add operation to adding create order for guest quote",
          "author_name": "Mykhailo Sulyma",
          "author_login": null,
          "committed_at": "2018-10-26T13:21:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5e1480a42d8fdae35068b3e93c7e151b74b1d33",
          "body": "- removed FrontendClientAttributesFactory in favor of expression in service definition",
          "is_bot": false,
          "headline": "BAP-17734: WebSocket healthcheck doesn't work with \"mixed\" configuration",
          "author_name": "Yefim Yevtushenko",
          "author_login": "webevt",
          "committed_at": "2018-10-26T08:41:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8191b09f277b2ae2cee94b4ce50a23142b352082",
          "body": "- removed WebSocketCheck\n- added WebSocketBackendCheck for backend check\n- added WebSocketFrontendCheck for frontend check\n- added FrontendClientAttributesFactory for client attributes with guessed transport\n- updated tests",
          "is_bot": false,
          "headline": "BAP-17734: WebSocket healthcheck doesn't work with \"mixed\" configuration",
          "author_name": "Yefim Yevtushenko",
          "author_login": "webevt",
          "committed_at": "2018-10-25T17:26:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a70f2ccbc250da2f78358c27ac0024c1a06e6277",
          "body": "- dropped unnecessary 'the' when used with OroCommerce, OroCRM, OroPlatform",
          "is_bot": false,
          "headline": "BAP-17728: Fix various typos",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2018-10-15T17:51:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d8b948489d4984d97097060a41daeab3e3d1a19",
          "body": "- Oro Platform -> OroPlatform\n- ORO Platform -> OroPlatform",
          "is_bot": false,
          "headline": "BAP-17728: Fix various typos",
          "author_name": "Michael Bessolov",
          "author_login": "mbessolov",
          "committed_at": "2018-10-15T16:52:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4cc95f3a330bf25b69688ae5d29f33c8a4ab594",
          "body": " - Updated parameters.yml with websocket_backend_transport and websocket_backend_ssl_options\r\n - Modified a way to connect to WebSocket to use configured transport and SSL options\r\n - Moved a configuring websocket_backend_transport and websocket_backend_ssl_options to a bundle's configuration",
          "is_bot": false,
          "headline": "BAP-17500: SSL/TLS for Web Socket Client (#19544)",
          "author_name": "Max Syskov",
          "author_login": null,
          "committed_at": "2018-09-14T15:54:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4501e3983a53891c5b0401b65104bbc1557fef2c",
          "body": "* BB-14614: Release preparation activities\r\n - changed references for master branch to 3.1\r\n - fixed test after upgrade twig/twig",
          "is_bot": false,
          "headline": "[master] - BB-14614: Release preparation activities (#19347)",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2018-07-25T10:00:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6771a868f53cafdc21c007635ce86ffa6099879d",
          "body": "- disabled healthcheck for frontend parameters of websocket connection",
          "is_bot": false,
          "headline": "BAP-17402: Disable web-socket healthcheck (#19229)",
          "author_name": "Mykhailo Sulyma",
          "author_login": null,
          "committed_at": "2018-07-17T16:52:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "804650568de8624368f51acbef61dbdd40d3b696",
          "body": "…console",
          "is_bot": false,
          "headline": "BB-14708: Healthcheck: for version 3.0+ replace app/console with bin/…",
          "author_name": "Mykhailo Sulyma",
          "author_login": null,
          "committed_at": "2018-06-26T15:33:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65d011acddcabd140d77f941ce585084847557ae",
          "body": "…… (phpunit) (#18583)\n\n* BAP-12799: Upgrade of the 3rd party dependencies to the latest stable version\r\n - updated phpunit deps\r\n - updated tests and php_cs config to be compatible with phpunit 6\r\n - updated tests according to BC breaks generated dev.locks\r\n - updated namespaces in unit tests\r\n - fixed PHPUnit\\Framework\\MockObject\\Matcher\\Invocation usage instead of MockBuilderion\r\n - replaced @before annotation with @afterInitClient\r\n - cs fix\r\n - updated namespaces",
          "is_bot": false,
          "headline": "BAP-12799: Upgrade of the 3rd party dependencies to the latest stable…",
          "author_name": "Andrey Yatsenco",
          "author_login": "anyt",
          "committed_at": "2018-06-25T08:41:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36746fc649bb877ea0019d27ce38b9cd5b5503e4",
          "body": null,
          "is_bot": false,
          "headline": "BB-14684: Update the Healthcheck documentation for the maintenance mode",
          "author_name": "Mykhailo Sulyma",
          "author_login": null,
          "committed_at": "2018-06-22T09:02:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49f95dd5e08f5ea10e5716e30612e8053bb5840c",
          "body": " - fixed failed unit test",
          "is_bot": false,
          "headline": "BAP-16769: Websocket on Symfony 3",
          "author_name": "Mykhailo Sulyma",
          "author_login": null,
          "committed_at": "2018-06-14T09:42:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e15716f684f78b565d342f95a6d5279b3a4f1794",
          "body": "- added / updated documentation\r\n- fixed cs issues\r\n- updated dev guide\r\n- fixed websocket checker",
          "is_bot": false,
          "headline": "BAP-17165: Update developers documentation (#18642)",
          "author_name": "Yefim Yevtushenko",
          "author_login": "webevt",
          "committed_at": "2018-06-14T09:07:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1f1a38ba632c191fec2d26d327cdcb6d7800a58",
          "body": "- fixed logger service definitions\r\n- fixed client service definitions\r\n- check before publish messages\r\n- fixed cs\r\n- fixed DB ping and event listeneк\r\n- restore healthcheck for Websocket\r\n- updated tests",
          "is_bot": false,
          "headline": "BAP-17166: Functional tests (#18636)",
          "author_name": "Mykhailo Sulyma",
          "author_login": null,
          "committed_at": "2018-06-13T15:00:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb65d5c00abd63d5621bacd505fbfa5c1445bb64",
          "body": "- added LiipMonitorBundle dependency\r\n- added checks for main application`s third party services\r\n- added FileDriver for maintenance mode with custom logic of ttl option\r\n- added dev documentation\r\n- updated composer files in application to enable healthcheck package by default",
          "is_bot": false,
          "headline": "BAP-14878: Application health check endpoint (#18526)",
          "author_name": "Mykhailo Sulyma",
          "author_login": null,
          "committed_at": "2018-06-13T08:31:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 5,
      "latest_release_at": "2018-06-20T10:10:40Z",
      "latest_release_tag": "2.3.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 2960,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 25,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "oro/health-check-bundle",
          "exists": true,
          "license": "OSL-3.0",
          "keywords": [
            "ORO",
            "health check"
          ],
          "ecosystem": "packagist",
          "matches_repo": true,
          "registry_url": "https://packagist.org/packages/oro/health-check-bundle",
          "is_deprecated": false,
          "latest_version": "7.0.1",
          "repository_url": "https://github.com/oroinc/OroHealthCheckBundle",
          "versions_count": 85,
          "total_downloads": 254047,
          "dependents_count": 0,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 5896,
          "first_published_at": null,
          "latest_published_at": "2026-04-24T11:44:51Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 95
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 3,
      "watchers": 10,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 5113,
      "source_files_sampled": 46,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "composer.json"
      ],
      "advisories": {
        "error": "No resolved dependencies carried a version and a supported ecosystem",
        "scope": "repository_graph",
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 2,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "packagist"
      ],
      "dependencies": [
        {
          "name": "oro/platform-enterprise",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "7.1.*"
        },
        {
          "name": "liip/monitor-bundle",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "2.*"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "liip/monitor-bundle",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "oro/platform-enterprise",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 2,
        "direct_count": 2,
        "indirect_count": 0
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 3,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "anyt",
          "commits": 22,
          "avatar_url": "https://avatars.githubusercontent.com/u/5183991?v=4"
        },
        {
          "type": "User",
          "login": "mbessolov",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/2725121?v=4"
        },
        {
          "type": "User",
          "login": "webevt",
          "commits": 10,
          "avatar_url": "https://avatars.githubusercontent.com/u/3187691?v=4"
        },
        {
          "type": "User",
          "login": "vsoroka",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/4763952?v=4"
        },
        {
          "type": "User",
          "login": "EugeneC",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/1182885?v=4"
        },
        {
          "type": "User",
          "login": "eugene-zibrov",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/106163563?v=4"
        },
        {
          "type": "User",
          "login": "yshyshkin",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/3470882?v=4"
        },
        {
          "type": "User",
          "login": "OleksandrProtsiuk",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/44535554?v=4"
        },
        {
          "type": "User",
          "login": "timofiyprisyazhnyuk",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/33844707?v=4"
        },
        {
          "type": "User",
          "login": "smiasnoi",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/11079883?v=4"
        }
      ],
      "contributors_sampled": 18,
      "top_contributor_share": 0.31
    },
    "quality_signals": {
      "has_ci": false,
      "has_tests": true,
      "ci_workflows": [],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 1,
            "reason": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": null,
            "reason": "no dependencies found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "894c5d3d682529f9f386d9c77d5c9c06077316b0",
        "ran_at": "2026-07-28T21:16:45Z",
        "aggregate_score": 2.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T21:07:18Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/oroinc/OroHealthCheckBundle",
    "host": "github.com",
    "name": "OroHealthCheckBundle",
    "owner": "oroinc"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "critical",
      "name": "Overall health",
      "note": "High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At risk ceiling of 49.",
      "notes": [
        {
          "code": "jurisdiction_overall_adjustment",
          "params": {
            "cap": 49,
            "pct": 50
          }
        }
      ],
      "value": 19,
      "inputs": {
        "security": 14,
        "vitality": 46,
        "community": 32,
        "governance": 59,
        "engineering": 30,
        "high_risk_jurisdiction_cap": 49,
        "high_risk_jurisdiction_multiplier": 50,
        "weighted_overall_before_jurisdiction": 38,
        "overall_after_jurisdiction_multiplier": 19
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "at_risk",
        "name": "Vitality",
        "value": 46,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "at_risk",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 47,
            "inputs": {
              "commits_last_year": 5,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "5 commits in the last year",
                "points": 7,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 44,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "2.3.0",
              "releases_from_tags": false,
              "days_since_latest_release": 2960,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2960 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2960
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "forks": 0,
              "stars": 3,
              "watchers": 10,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "3 stars",
                "points": 4.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "10 watchers",
                "points": 5.3,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "at_risk",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 44,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "packages": [
                "oro/health-check-bundle"
              ],
              "dependents": 0,
              "ecosystems": "packagist",
              "total_downloads": 254047,
              "monthly_downloads": 5896
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "5,896 downloads/month across packagist",
                "points": 50.3,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 5896,
                      "ecosystems": "packagist"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "0 packages depend on it",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "registry_dependents",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 59,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "bus_factor": 3,
              "contributors_sampled": 18,
              "top_contributor_share": 0.31
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "3 contributor(s) cover half of all commits",
                "points": 36,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 31% of commits",
                "points": 15.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 31
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "18 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "followers": 121,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "oroinc",
              "public_repos": 104,
              "account_age_days": 4851
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "121 followers of oroinc",
                "points": 15,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 121,
                      "login": "oroinc"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "104 public repos, account ~13 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 104
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 13
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "oro/health-check-bundle"
              ],
              "ecosystems": "packagist",
              "any_deprecated": false,
              "min_days_since_publish": 95
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on packagist",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "packagist"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 95 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 95
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "85 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 85
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 30,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "at_risk",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 30,
            "inputs": {
              "has_ci": false,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 30,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "critical",
        "name": "Security",
        "value": 14,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier to Security posture and gives it an At risk ceiling of 49.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "dangerous_workflow",
                    "packaging",
                    "pinned_dependencies",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "jurisdiction_posture_adjustment",
                "params": {
                  "cap": 49,
                  "pct": 50
                }
              }
            ],
            "value": 14,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 12,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 6,
              "scorecard_aggregate": 2.9,
              "high_risk_jurisdiction_cap": 49,
              "high_risk_jurisdiction_multiplier": 50,
              "security_posture_after_multiplier": 14,
              "security_posture_before_jurisdiction": 29
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "moderate",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 50,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": true,
              "exposures": [
                {
                  "role": "top_contributor",
                  "count": 1,
                  "country": "Russia"
                }
              ],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 8
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "Russia: top_contributor (1)",
                "points": 50,
                "status": "partial",
                "details": [
                  {
                    "code": "jurisdiction_exposure",
                    "params": {
                      "role": "top_contributor",
                      "count": 1,
                      "country": "Russia"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "at_risk",
        "name": "AI Readiness",
        "value": 35,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 39,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.735,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "61 of 83 human commits state their intent (structured subject or explanatory body)",
                "points": 39.2,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 61,
                      "sampled": 83
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "critical",
            "name": "Verify loop (build / test / typecheck)",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_pinned_dependencies"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 24,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 83",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 83
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "PHP",
              "largest_source_bytes": 5113,
              "source_files_sampled": 46,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "PHP without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "PHP"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/46 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 46,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "No resolved dependencies carried a version and a supported ecosystem"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T21:16:56.663285Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/oroinc/OroHealthCheckBundle.svg",
  "full_name": "oroinc/OroHealthCheckBundle",
  "license_state": "custom",
  "license_spdx": null
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte StatistikenPackagist.