Öffentliches Register
Software-GesundheitsberichtSchema 0.27.0 · Metriken 1.13.0 · 2026-07-27 17:56 UTC

spryker / security

[READ ONLY] Subtree split of the Security module.

PHPEigene Lizenz★ 0 Sterne⑂ 0 Forksseit Nov. 2019Auf GitHub ansehen ↗

spryker/security erreicht einen Gesundheitsindex von 58 von 100 und liegt damit im Bereich Mittel. Am stärksten schneidet es bei Engineering Quality (75/100) ab, am schwächsten bei AI Readiness (34/100). Zuletzt heute aktualisiert. 10 Mitwirkende tragen den Großteil der jüngsten Arbeit.

58
gesamt / 100
Mittel

Software-Gesundheitsindex

Metriken werden auf einer Skala von 1–100 in gewichtete Kategorien gruppiert. Der Gesamtwert beginnt als ihr Mittel; sobald öffentliche Evidenz die Richtlinie für Hochrisikojurisdiktionen auslöst, wird die Bewertung angepasst und erhält die Obergrenze 49 (Gefährdet). AI Readiness liegt außerhalb.

58
Exzellent85-100Vorbildlich; erfüllt im Wesentlichen alle geprüften Kriterien
Gut70-84Gesund; geringfügige Lücken
Mittel50-69Akzeptabel mit deutlichen Lücken; Überprüfung empfohlen
Gefährdet30-49Erhebliche Schwächen; eine Übernahme erfordert Vorsicht
Kritisch1-29Schwerwiegende Probleme (aufgegeben, nur ein Maintainer, keine Hygiene)
VitalitätCommunity &VerbreitungNachhaltigkeit &GovernanceEngineering-QualitätSicherheitAI Readiness

Bewertungsprofil

Jede Achse ist eine Kategorie. Die Form zählt mehr als der Durchschnitt — ein gesundes Projekt füllt die gesamte Fläche, während ein Profil aus Spitzen und Kratern bedeutet, dass Stärke in einer Dimension Risiken in einer anderen verdeckt.

Eigentümerschaft

SprykerOrganisation
113 Follower1.333 öffentliche Reposseit Dez. 2014

Dieses Repository wird von einer Organisation getragen — geteilte, rechenschaftspflichtige Trägerschaft, die jeden einzelnen Maintainer überdauern kann.

Paket-Ökosysteme

RegistryPaketVersionDownloads / MonatVersionenZuletzt veröffentlicht
Packagistspryker/security1.10.318.31218vor 114 Tagen

Metriken nach Kategorie

Vitalität

Lebt das Projekt — wird Code geschrieben und werden Releases ausgeliefert?

61Mittel · 22 % des Gesamtindex
Wie die Bewertung erfolgt
36/36Push-Aktualität — letzter Push vor 0 Tagen
6.9/36Commit-Rhythmus — 10/52 Wochen mit Commits
10/18Commit-Volumen — 12 Commits im letzten Jahr
0/10OpenSSF Scorecard: Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Verwendete Eingangsdaten
commits_last_year12
human_commit_share1
days_since_last_push0
active_weeks_last_year10
Wie die Bewertung erfolgt
27/27Liefert Releases aus — 18 Releases veröffentlicht
27/36Release-Aktualität — letztes Release vor 113 Tagen
12.6/27Release-Rhythmus — ein Release etwa alle 164,5 Tage
0/10OpenSSF Scorecard: Signed-Releases — keine Daten
Verwendete Eingangsdaten
releases_count18
latest_release_tag1.10.3
releases_from_tagsnein
days_since_latest_release113
mean_days_between_releases164,5
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Signed-Releases. Die verbleibenden Gewichte wurden renormalisiert.

Community & Verbreitung

Hat das Projekt Nutzer, Downloads, Aufmerksamkeit und ein einladendes Umfeld für Beitragende?

42Gefährdet · 18 % des Gesamtindex
Wie die Bewertung erfolgt
0/60Stars — 0 Stars
0/25Forks — 0 Forks
3.9/15Watcher — 6 Watcher
Verwendete Eingangsdaten
forks0
stars0
watchers6
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Wie die Bewertung erfolgt
22.5/22.5README
16.9/22.5Lizenz — Lizenzdatei vorhanden, keine anerkannte Lizenz
18/18CONTRIBUTING-Leitfaden
0/13.5Verhaltenskodex
0/7.2Issue-Vorlage
6.3/6.3PR-Vorlage
Verwendete Eingangsdaten
has_readmeja
has_licenseja
has_contributingja
has_issue_templatenein
has_code_of_conductnein
has_pull_request_templateja
Wie die Bewertung erfolgt
56.8/80Downloads pro Monat — 18.312 Downloads/Monat über packagist
7.4/20Abhängige in der Registry — 12 Pakete hängen davon ab
Verwendete Eingangsdaten
packagesspryker/security
dependents12
ecosystemspackagist
total_downloads2.170.878
monthly_downloads18.312

Nachhaltigkeit & Governance

Überdauert das Projekt die Menschen, die es tragen — Bus-Faktor, Reaktionsfähigkeit, Trägerschaft und Paketpflege?

67Mittel · 24 % des Gesamtindex
Wie die Bewertung erfolgt
54/54Bus-Faktor — 10 Beitragende decken die Hälfte aller Commits ab
19.9/22.5Commit-Verteilung — wichtigste beitragende Person verfasste 12 % der Commits
13.5/13.5Breite der Beitragenden — 100 Beitragende
10/10OpenSSF Scorecard: Contributors — project has 9 contributing companies or organizations
Verwendete Eingangsdaten
bus_factor10
contributors_sampled100
top_contributor_share0,117
Wie die Bewertung erfolgt
0/46.8Issue-Lösungsquote — keine Issues oder keine Daten
0/38.3PR-Annahme — 0/1 entschiedene PRs gemergt
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Verwendete Eingangsdaten
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs1
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): Issue-Lösungsquote. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
30/30Organisatorische Trägerschaft — im Besitz einer Organisation
0/20Verifizierte Domain
14.8/25Reichweite des Inhabers — 113 Follower von spryker
25/25Kontohistorie — 1.333 öffentliche Repos, Kontoalter ca. 11 Jahre
Verwendete Eingangsdaten
followers113
owner_typeOrganization
is_verified
owner_loginspryker
public_repos1.333
account_age_days4.246

Paketpflege

100Exzellent
Wie die Bewertung erfolgt
25/25Veröffentlicht & auflösbar — 1 Paket(e) auf packagist
35/35Veröffentlichungsaktualität — letzte Veröffentlichung vor 114 Tagen
20/20Versionshistorie — 18 veröffentlichte Versionen
20/20Nicht veraltet — aktiv, nicht veraltet oder zurückgezogen
Verwendete Eingangsdaten
packagesspryker/security
ecosystemspackagist
any_deprecatednein
min_days_since_publish114

Engineering-Qualität

Sind grundlegende Engineering- und Dokumentationspraktiken vorhanden?

75Gut · 20 % des Gesamtindex
Wie die Bewertung erfolgt
24/24CI-Workflows — 1 Workflow(s)
24/24Tests vorhanden
16/16Linter-Konfiguration — phpstan.neon
0/9.6Pre-Commit-Hooks
6.4/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — keine Daten
Verwendete Eingangsdaten
has_cija
has_testsja
has_editorconfigja
has_linter_configja
has_precommit_confignein
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: CI-Tests. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
30/30README
0/25Dokumentationsverzeichnis
15/15Dokumentations-/Homepage-Site — https://spryker.com
10/10Repository-Beschreibung
0/10Topics
0/10Wiki
Verwendete Eingangsdaten
topics
has_wikinein
homepagehttps://spryker.com
has_readmeja
has_docs_dirnein
has_descriptionja

Sicherheit

Sind die sichtbaren Sicherheits- und Lieferkettenpraktiken belastbar, ohne ungeklärte Exposition gegenüber Hochrisikojurisdiktionen?

35Gefährdet · 16 % des Gesamtindex

Sicherheitslage

35Gefährdet
Wie die Bewertung erfolgt
7.5/7.5Binary-Artifacts — no binaries found in the repo
3.8/7.5Branch-Protection — branch protection is not maximal on development and all release branches
0/2.5CI-Tests — keine Daten
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 9 contributing companies or organizations
0/10Dangerous-Workflow — keine Daten
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.2/2.5Lizenz — license file detected
0/7.5Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — keine Daten
0/5Pinned-Dependencies — keine Daten
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — keine Daten
0/7.5Token-Permissions — keine Daten
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Verwendete Eingangsdaten
sourceopenssf_scorecard
checks_evaluated12
scorecard_versionv5.5.0
checks_inconclusive6
scorecard_aggregate3,5
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Die verbleibenden Gewichte wurden renormalisiert.

AI Readiness

Wie gut ist das Repository dafür ausgestattet, mit KI-Coding-Agenten entwickelt und gepflegt zu werden? Ein unabhängiges, experimentelles Badge — Gewicht 0,0, es wird eigenständig ausgewiesen und verändert den Gesamt-Gesundheitswert nicht.

34Gefährdet · 0 % des Gesamtindex
Wie die Bewertung erfolgt
0/45Agentenanweisungen — keine CLAUDE.md / AGENTS.md / Editor-Regeln
0/15Maschinenlesbare Doku (llms.txt)
21.3/40Lesbare Commit-Historie — 40 von 100 menschlichen Commits benennen ihre Absicht (strukturierter Betreff oder erläuternder Text)
Verwendete Eingangsdaten
has_llms_txtnein
legible_history_share0,4
agent_instruction_files
agent_instruction_max_bytes
Wie die Bewertung erfolgt
0/18Bootstrap mit einem Befehl
22/22Automatisierte Tests
11/11Lint-/Format-Konfiguration — phpstan.neon
0/11Statische Typprüfung
0/10Reproduzierbare Umgebung
0/10Belegte Agentenpraxis — keine von Agenten verfassten Commits unter den letzten 100
0/8Automatisierte Wartung — keine automatisierten Abhängigkeits-Updates beobachtet
0/10OpenSSF Scorecard: Pinned-Dependencies — keine Daten
Verwendete Eingangsdaten
has_nixnein
has_testsja
lockfiles
has_dockerfilenein
typed_languagenein
bootstrap_files
has_devcontainernein
has_linter_configja
typecheck_configs
agent_commit_share0
toolchain_manifests
dependency_bot_commit_share0
Von der Bewertung ausgeschlossen (keine Daten oder nicht anwendbar): OpenSSF Scorecard: Pinned-Dependencies. Die verbleibenden Gewichte wurden renormalisiert.
Wie die Bewertung erfolgt
0/45Typprüfbarer Code — PHP ohne Typprüfungs-Konfiguration
54.5/55Handhabbare Dateigrößen — 1/120 Quelldateien über 60 KB
Verwendete Eingangsdaten
primary_languagePHP
largest_source_bytes63.079
source_files_sampled120
oversized_source_files1

Eckdaten

0GitHub-Sterne
100Mitwirkende
12Commits, letzte 12 Monate
0Tage seit letztem Push
18Releases
10Bus-Faktor
0offene Issues
PackagistPaket-Ökosysteme

Warnungen zur Datenerhebung

  • No resolved dependencies carried a version and a supported ecosystem

Weitere Details

OpenSSF Scorecard 3.5 / 10
3.5Gesamtwert

Unabhängige, werkzeugneutrale Sicherheitsbewertung durch das quelloffene OpenSSF Scorecard. Jede Prüfung honoriert eine Sicherheits-Praxis, nicht das Werkzeug eines bestimmten Anbieters. Prüfungen, die Scorecard nicht ermitteln konnte, sind mit k. A. markiert und vom Sicherheitswert ausgeschlossen (nie als null gezählt).Scorecard v5.5.0 · 2026-07-27 17:56 UTC

10Binary-Artifactsno binaries found in the repo
5Branch-Protectionbranch protection is not maximal on development and all release branches
k. A.CI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
10Contributorsproject has 9 contributing companies or organizations
k. A.Dangerous-Workflowno workflows found
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
9Licenselicense file detected
0Maintained1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
k. A.Packagingpackaging workflow not detected
k. A.Pinned-Dependenciesno dependencies found
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
k. A.Signed-Releasesno releases found
k. A.Token-PermissionsNo tokens found
10Vulnerabilities0 existing vulnerabilities detected
Direkte Abhängigkeiten 5
RegistryPaketVersionsvorgabeManifest
Packagistspryker/application-extension^1.0.0composer.json
Packagistspryker/kernel^3.52.0composer.json
Packagistspryker/security-extension^1.1.0composer.json
Packagistspryker/symfony^3.15.0composer.json
Packagistspryker/validator-extension^1.0.0composer.json
Alle Abhängigkeiten 15

Vollständig aufgelöster Abhängigkeitssatz aus dem GitHub-Abhängigkeitsgraphen: 5 direkte und 10 indirekte (transitive) Pakete. Die transitive Hülle ist vollständig, wenn das Repository eine Lockfile eincheckt.

RegistryPaketVersionBeziehung
Packagistspryker/application-extensiondirekt
Packagistspryker/kerneldirekt
Packagistspryker/security-extensiondirekt
Packagistspryker/symfonydirekt
Packagistspryker/validator-extensiondirekt
Packagistphpindirekt
Packagistspryker/applicationindirekt
Packagistspryker/code-snifferindirekt
Packagistspryker/containerindirekt
Packagistspryker/event-dispatcherindirekt
Packagistspryker/event-dispatcher-extensionindirekt
Packagistspryker/logindirekt
Packagistspryker/routerindirekt
Packagistspryker/sessionindirekt
Packagistspryker/testifyindirekt
Abhängigkeits-Advisories nicht bewertet

Der Advisory-Abgleich konnte für diesen Bericht nicht ausgeführt werden: No resolved dependencies carried a version and a supported ecosystem

JSON-Rohbericht maschinenlesbar
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 125150,
      "has_wiki": false,
      "homepage": "https://spryker.com",
      "languages": {
        "PHP": 507474
      },
      "pushed_at": "2026-07-27T17:46:34Z",
      "created_at": "2019-11-29T13:23:52Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-27T17:47:33Z",
      "description": "[READ ONLY] Subtree split of the Security module.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "master",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "PHP",
      "significant_languages": [
        "PHP"
      ]
    },
    "owner": {
      "blog": "https://spryker.com/",
      "name": "Spryker",
      "type": "Organization",
      "login": "spryker",
      "company": null,
      "location": null,
      "followers": 113,
      "avatar_url": "https://avatars.githubusercontent.com/u/10156234?v=4",
      "created_at": "2014-12-11T15:26:19Z",
      "is_verified": null,
      "public_repos": 1333,
      "account_age_days": 4246
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "1.10.3",
          "kind": "patch",
          "published_at": "2026-04-05T05:13:19Z"
        },
        {
          "tag": "1.10.2",
          "kind": "patch",
          "published_at": "2025-12-04T15:01:04Z"
        },
        {
          "tag": "1.10.1",
          "kind": "patch",
          "published_at": "2025-11-17T13:11:43Z"
        },
        {
          "tag": "1.10.0",
          "kind": "minor",
          "published_at": "2025-07-01T11:26:13Z"
        },
        {
          "tag": "1.9.0",
          "kind": "minor",
          "published_at": "2025-06-02T13:22:04Z"
        },
        {
          "tag": "1.8.1",
          "kind": "patch",
          "published_at": "2024-02-20T09:04:16Z"
        },
        {
          "tag": "1.8.0",
          "kind": "minor",
          "published_at": "2023-12-21T17:11:32Z"
        },
        {
          "tag": "1.7.1",
          "kind": "patch",
          "published_at": "2023-01-24T19:54:17Z"
        },
        {
          "tag": "1.7.0",
          "kind": "minor",
          "published_at": "2022-11-08T12:52:13Z"
        },
        {
          "tag": "1.6.0",
          "kind": "minor",
          "published_at": "2022-03-16T15:26:14Z"
        },
        {
          "tag": "1.5.1",
          "kind": "patch",
          "published_at": "2022-01-28T12:51:13Z"
        },
        {
          "tag": "1.5.0",
          "kind": "minor",
          "published_at": "2021-05-03T09:57:15Z"
        },
        {
          "tag": "1.4.0",
          "kind": "minor",
          "published_at": "2021-02-09T13:43:18Z"
        },
        {
          "tag": "1.3.0",
          "kind": "minor",
          "published_at": "2020-11-19T12:05:34Z"
        },
        {
          "tag": "1.2.1",
          "kind": "patch",
          "published_at": "2020-10-06T12:07:42Z"
        },
        {
          "tag": "1.2.0",
          "kind": "minor",
          "published_at": "2020-05-19T12:21:04Z"
        },
        {
          "tag": "1.1.0",
          "kind": "minor",
          "published_at": "2019-12-05T12:41:57Z"
        },
        {
          "tag": "1.0.0",
          "kind": "major",
          "published_at": "2019-11-29T13:39:44Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "e357fb76cd38d5ae3a57fee94fb3868d14599dc6",
          "body": "* Bump the composer-minor group across 1 directory with 6 updates\n\nBumps the composer-minor group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [async-aws/core](https://github.com/async-aws/core) | `1.19.0` | `1.29.1` |\n| [async-aws/sns](https://github.com/async-a\n[…]\nned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Stanislav Matveyev <stanislav.matveyev@spryker.com>",
          "is_bot": false,
          "headline": "Fix PHPStan 2.2.5 findings and bump composer-minor dependencies (#969)",
          "author_name": "René Klatt",
          "author_login": "stereomon",
          "committed_at": "2026-07-27T13:44:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1f17f72bb9af1cb63b5e4ec5903412b0ee66ff21",
          "body": "FRW-10939 Adjusted tests.",
          "is_bot": false,
          "headline": "FRW-10939: Merged all func tests to one conf (#439)",
          "author_name": "Alexander Veselov",
          "author_login": "vol4onok",
          "committed_at": "2026-04-04T07:25:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a750b0bcf606a38de24b948d850f781f61dfc2c",
          "body": null,
          "is_bot": false,
          "headline": "merged with master",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2026-03-09T20:46:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eebd171ca69d35b6772cd927c2ba2ddd6f3624c1",
          "body": "FRW-11607 API Platform",
          "is_bot": false,
          "headline": "FRW-11607 Improved API Platform (#352)",
          "author_name": "René Klatt",
          "author_login": "stereomon",
          "committed_at": "2026-03-09T09:13:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d66cc8c21b0b8298768075a389bfc7dd09c36dfb",
          "body": null,
          "is_bot": false,
          "headline": "Fixed CS",
          "author_name": "vol4onok",
          "author_login": "vol4onok",
          "committed_at": "2026-03-02T15:52:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b86c920b9ca32cea40862d3cc4b279cd7b521fc5",
          "body": null,
          "is_bot": false,
          "headline": "FRW-10644 PHPStan initial fixes",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2026-02-16T10:41:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4318d416becf7d836c7059632a5fba5e6251f6d",
          "body": "Integrated Api Platform",
          "is_bot": false,
          "headline": "FL-25 Spryker API Platform integration (#115)",
          "author_name": "René Klatt",
          "author_login": "stereomon",
          "committed_at": "2025-12-04T11:50:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "deb6efa718a4af41ad7a0a9fc73f65001814c622",
          "body": "FRW-10640 Fixed red CI.",
          "is_bot": false,
          "headline": "FRW-10640 Fixed red CI. (#93)",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2025-11-17T12:31:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e4abb30ede80889c9be38b0506220b943634341",
          "body": "FRW-11017 As a Project Engineer I want to access Facades, Clients, and other services directly through the DI container",
          "is_bot": false,
          "headline": "FRW-11017 Fixed broken tests. (#82)",
          "author_name": "René Klatt",
          "author_login": "stereomon",
          "committed_at": "2025-11-13T15:59:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "022b6973610c9aee510c5754447004d845a0a641",
          "body": null,
          "is_bot": false,
          "headline": "Updated PR template",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2025-10-28T19:30:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf8cc20d996286f8d5b8648b086e8798cdb97498",
          "body": null,
          "is_bot": false,
          "headline": "AE-207: Updated paths after migration to monorepository",
          "author_name": "Dmitriy Krainiy",
          "author_login": "demkos",
          "committed_at": "2025-10-20T18:00:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eedcbed26ca171250b153a099b495637fc329042",
          "body": null,
          "is_bot": false,
          "headline": "FRW-10648 Fixed PHP stan",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2025-08-14T14:33:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bc1b3786288c22ac7cf45c3590081f32767f126",
          "body": null,
          "is_bot": false,
          "headline": "FRW-10648 Bumped PHP version",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2025-08-13T09:12:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e9857e2dd2a4728012d00b4d01fd49b5b7be0df",
          "body": "SUPESC-901 Fixed security firewall merging issue.",
          "is_bot": false,
          "headline": "SUPESC-901 Fixed security firewall merging issue. (#11625)",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2025-07-01T11:24:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d56fe12153157f8e258154f596afe006172c8a6",
          "body": "FRW-10439 Twig template warm-up",
          "is_bot": false,
          "headline": "FRW-10439: Twig template warm-up (#11546)",
          "author_name": "Anton Zubariev",
          "author_login": null,
          "committed_at": "2025-06-02T12:28:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d6a1230a01a0ffccf0eec189d8da8a168a019c4",
          "body": null,
          "is_bot": false,
          "headline": "FRW-8835 Update license text",
          "author_name": "Alexander Velikanov",
          "author_login": "aleksandr-velikanov",
          "committed_at": "2025-02-28T20:43:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89d0109a656c0098a4ea7e2035f2a8db0ed7442e",
          "body": null,
          "is_bot": false,
          "headline": "Update Bundles/Security/.github/PULL_REQUEST_TEMPLATE.md",
          "author_name": "Spryker Release Bot",
          "author_login": "spryker-release-bot",
          "committed_at": "2024-10-07T20:30:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59d3a45a967d6b17b9e34a0b4033044fa305f8bf",
          "body": "…port of PHP 8.3. (#11088)\n\nFRW-8801 Switched PHP version from 8.1 to 8.2 by default, enabled support of PHP 8.3.",
          "is_bot": false,
          "headline": "FRW-8801 Switched PHP version from 8.1 to 8.2 by default, enabled sup…",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2024-09-20T14:38:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bbd97126540b1cfc2e9ffcca28fd665f3348d90",
          "body": "FRW-8526 Update contribution.md content for all repos with the Spryker license",
          "is_bot": false,
          "headline": "FRW-8526 Updated and added missing CONTRIBUTING.md files. (#11005)",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2024-07-18T11:23:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ed479b5dd484ae0977d0807878c57c41215ca2a",
          "body": "…#10811)\n\nFRW-7264 Fixed RememberMe token authorization beyond the session termination.",
          "is_bot": false,
          "headline": "FRW-7264 fixed remember_me token authorization when session is over (…",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2024-02-20T09:01:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6899e431e5ec845f174230a670d51851fff55c4",
          "body": "FRW-5940 Symfony Security 6 Support",
          "is_bot": false,
          "headline": "FRW-5940 Symfony Security 6 Support (#10579)",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2023-12-21T16:51:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e31bc5db5a8969fc089c553505e64019db37e075",
          "body": "…ort of PHP 8.2. (#10577)\n\nFRW-998 Dropped PHP 8.0 and added PHP 8.2 support.",
          "is_bot": false,
          "headline": "FRW-998 Switched PHP version from 8.0 to 8.1 by default, enabled supp…",
          "author_name": "Anton Smarovydlo",
          "author_login": "asmarovydlo",
          "committed_at": "2023-11-02T20:09:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc87b984be40a2dedabc0b3d22fc8e4863469c13",
          "body": null,
          "is_bot": false,
          "headline": "BUGFIX: Fixed CI files according to Spryk's CI file version",
          "author_name": "Anton Zubariev",
          "author_login": null,
          "committed_at": "2023-08-21T07:50:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f3f124d60a7cdb01aff440d560c32ac0ef9af4e",
          "body": null,
          "is_bot": false,
          "headline": "Fixed .yml file",
          "author_name": "Ahmed Sabaa",
          "author_login": "a-sabaa",
          "committed_at": "2023-02-28T15:23:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8edb526147b9ca9cba7fef3bef810354fcf40a22",
          "body": null,
          "is_bot": false,
          "headline": "Removed composer validate lowest check from CI",
          "author_name": "Ahmed Sabaa",
          "author_login": "a-sabaa",
          "committed_at": "2023-02-24T12:35:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4311c072ca4911af8cf76ee22970f59c59ce01ec",
          "body": "FRW-19 Support Symfony v6",
          "is_bot": false,
          "headline": "FRW-19 Support Symfony packages v6. (#9610)",
          "author_name": "Svyatoslav Varpikhovsky",
          "author_login": "geega",
          "committed_at": "2023-01-24T16:01:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b871604a337530863f752216690fce32c597a8d",
          "body": null,
          "is_bot": false,
          "headline": "FRW-912 Updated licence (#9781)",
          "author_name": "Dmitry Tsemma",
          "author_login": null,
          "committed_at": "2022-11-30T13:09:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c48314b0d67fe214a7ade8091853c90623d02bc5",
          "body": "FRW-172 Codeception Upgrade to latest version",
          "is_bot": false,
          "headline": "FRW-172 Upgrade to Codeception 5 (#9542)",
          "author_name": "Svyatoslav Varpikhovsky",
          "author_login": "geega",
          "committed_at": "2022-11-09T15:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b11d71b92f6c5876324bcd01f414606dd3c17da3",
          "body": "CC-17232 Introduced session validation for agent.",
          "is_bot": false,
          "headline": "CC-17232 Introduced session validation for agent. (#9629)",
          "author_name": "Roman Havrylko",
          "author_login": "romanhavrylko",
          "committed_at": "2022-11-08T12:42:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8263aebb6d73b7917fbf13a0fb8f5a114ab3304b",
          "body": "FRW-332 PHP 8+ and Symfony 5+",
          "is_bot": false,
          "headline": "FRW-332 Drop PHP 7 and Symfony 4 support. (#9641)",
          "author_name": "Svyatoslav Varpikhovsky",
          "author_login": "geega",
          "committed_at": "2022-10-18T17:47:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2d7f15ef579f1c57b3a77086ecc80703f37464a",
          "body": null,
          "is_bot": false,
          "headline": "FRW-66 updated psalm reports by filtered deprecations (#9552)",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2022-08-19T15:44:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87c6a50ea1fb2732047d1acd5571c28e33fa7ac4",
          "body": "* Fix up array docs.",
          "is_bot": false,
          "headline": "Fix up array docs. (#9339)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2022-04-29T11:53:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "672514280bcf36e0918fc98d03877c23e9b9a6aa",
          "body": "* TE-11045 Upgrade PHPStan\r\n\r\n* TE-11045 Upgrade PHPStan. Fix plain array to generics.",
          "is_bot": false,
          "headline": "TE-11045 Upgrade PHPStan (#9328)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2022-04-28T14:28:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e830149ec80083164e310120997bef6a6cce93d1",
          "body": "TE-10417 Session Fixation",
          "is_bot": false,
          "headline": "TE-10417 Made valid the only one active session per account (#9137)",
          "author_name": "Dmytro Dymarchuk",
          "author_login": null,
          "committed_at": "2022-03-16T14:26:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57acaa76719c179e34a9e98e6d160f575e230372",
          "body": null,
          "is_bot": false,
          "headline": "Fix invalid readme links to docs.",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2022-03-04T10:42:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5d039b65a99826d6ed1e2c919510399890ad739",
          "body": null,
          "is_bot": false,
          "headline": "Fix invalid readme links to docs.",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2022-03-03T19:41:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac801ab8633c3687f18f3c78d2b4be23673ba832",
          "body": "* TE-10816 Update psalm baselines, fix issues.",
          "is_bot": false,
          "headline": "TE-10816 Update psalm baselines, fix issues. (#9162)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2022-02-22T13:52:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1d2d8a1b77029faed6247ca288b942968ea3a5e",
          "body": null,
          "is_bot": false,
          "headline": "Fix up baselines.",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2022-02-03T15:35:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1e04d26fede6e2d22daacf318d908bc75d92eb0",
          "body": "CC-15899 BC break in the symfony/secutiry-core package",
          "is_bot": false,
          "headline": "CC-15899: Fixed BC in affected security plugins. (#9060)",
          "author_name": "Roman Havrylko",
          "author_login": "romanhavrylko",
          "committed_at": "2022-01-28T12:49:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "169ecaaf80d27816c271cfa0fbe8dc158e6cc032",
          "body": "* TE-10574 Fix up phpstan config",
          "is_bot": false,
          "headline": "TE-10574 Fix up phpstan config (#9063)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2022-01-26T18:25:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22290c3813735b048094f527b583898fe24078c5",
          "body": null,
          "is_bot": false,
          "headline": "Update composer files for 2.2+ and allow-plugins config.",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2022-01-14T12:21:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90fb1c8a78da00283d6f07713bcf09d68d0c0ee3",
          "body": "* TE-10424 Updated architecture-baseline.json as example\r\n\r\n* TE-10425 Updated arch sniff baselines\r\n\r\nCo-authored-by: mscherer <mark.scherer@spryker.com>",
          "is_bot": false,
          "headline": "TE-10424 Updated architecture-baseline.json   (#8999)",
          "author_name": "Svyatoslav V",
          "author_login": "geega",
          "committed_at": "2022-01-06T15:48:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba0fcf938187bffda3f0a9d53682173a3d28e1b9",
          "body": "* TE-10370 Fix up CS as per non cloaking rules.\r\n\r\n* TE-10370 Fix CS\r\n\r\n* TE-10370 Fix PHPStan",
          "is_bot": false,
          "headline": "TE-10370 Fix up CS as per non cloaking rules. (#8974)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2021-12-17T15:44:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c19b51aad200ed6c780b19ab95a69da9c887092",
          "body": "TE-10139 PHPStan 1.0 integration",
          "is_bot": false,
          "headline": "TE-10139 PHPStan 1.0 upgrade (#8949)",
          "author_name": "Dmitry Tsemma",
          "author_login": null,
          "committed_at": "2021-12-15T15:02:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c826d01bf4932f298fdf7a4b583005d06ac35a4",
          "body": "TE-10039 Re-enable proper prefer lowest checking",
          "is_bot": false,
          "headline": "TE-10039: Restore prefer lowest regression checking (#8849)",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2021-12-10T11:10:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10a38d755907dd61bc7c3553bb62aad8ede95c4f",
          "body": "TE-10080 Symfony 5.4 compatibility",
          "is_bot": false,
          "headline": "TE-10080 Make code Symfony 5.4 compatible (#8847)",
          "author_name": "Dmytro Dymarchuk",
          "author_login": null,
          "committed_at": "2021-12-01T17:41:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47e8239f5fc6763f64fc092c5720ce0b978d4f3a",
          "body": null,
          "is_bot": false,
          "headline": "TE-10081 Fix CS null coalesce (#8861)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2021-11-01T15:12:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3115596e6cd7660ff5a42b03d7634b1099a7c5fc",
          "body": "* TE-10081 Fix CS generics.",
          "is_bot": false,
          "headline": "TE-10081 Fix CS generics. (#8858)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2021-11-01T10:31:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c30908f4e80ff4c0030b3eba49aa462a2cad5dc",
          "body": "TE-10081 Fix CS as per generics sniffer rules",
          "is_bot": false,
          "headline": "TE-10081 Fix CS as per generics sniffer rules. (#8857)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2021-10-30T16:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e61133aad3f72e485d8a76e1e173b85954f60947",
          "body": "* TE-10081 Prepare CS as per new sniffer updates.\r\n\r\n* TE-10081 Revert some use statements to avoid dependency.",
          "is_bot": false,
          "headline": "TE-10081 Prepare CS as per new sniffer updates. (#8840)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2021-10-26T09:04:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3cad2fe9411456a9796fa2ef0e074514ff20ac5d",
          "body": null,
          "is_bot": false,
          "headline": "Revert invalid self changes by sniffer for anon class.",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2021-10-21T07:59:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a23489fbe44da4332a29dbdfdb529f9f8754b0d",
          "body": null,
          "is_bot": false,
          "headline": "TE-10081 Prepare CS for PHP73+ call commas",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2021-10-20T22:35:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a80bcdaab915f82a0e17f226e5c15649ec1c601",
          "body": "* TE-10081 CS code sniffer fixes for future compatibility.\r\n\r\n* Fix non defined array usage.\r\n\r\n* Readd PHP73+ call commas.",
          "is_bot": false,
          "headline": "TE-10081 CS code sniffer fixes for future compatibility. (#8817)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2021-10-20T16:01:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d7c8efe51b4bfa66491ffa8d2487ece277fe910",
          "body": null,
          "is_bot": false,
          "headline": "TE-9955 Require PHP 7.4+ now.",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2021-10-18T16:05:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90a1c95dbaa4ce13b952898fa91aa82e7232802c",
          "body": null,
          "is_bot": false,
          "headline": "TE-9955 Clean up meta files.",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2021-10-09T01:05:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d67fa0fa7817ee110ae96393f0167909b851505e",
          "body": null,
          "is_bot": false,
          "headline": "TE-9955 Update PHP min version.",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2021-10-09T00:16:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e247ca6a8b5329805309b488d796d5d0f2bef2e1",
          "body": "TE-9955 Deprecated 7.3 in all modules and inside project code.",
          "is_bot": false,
          "headline": "TE-9955 Fix up test file. (#8771)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2021-10-08T19:54:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7a57443f578e1b2b7c1bb8db38bb5bed0b1bbb0",
          "body": "TE-9886 CodeSniffer update for iterable generics",
          "is_bot": false,
          "headline": "TE-9886 CS iterable generics (#8722)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2021-09-17T11:54:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "060d34e44ceb3c8bf8d88ff623cee89263e21c26",
          "body": "TE-9806 Const docblock sniff",
          "is_bot": false,
          "headline": "TE-9806 Improve CS by adding const docblocks with var type (#8694)",
          "author_name": "Mark Scherer",
          "author_login": "dereuromark",
          "committed_at": "2021-09-07T15:12:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd0d20f63ff9f92177ce361241a6b1ebb53b3109",
          "body": null,
          "is_bot": false,
          "headline": "Allow updating to symfony/security 5.3",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2021-07-08T11:08:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "91c509b98947ced98146cc136961237110a194e0",
          "body": null,
          "is_bot": false,
          "headline": "TE-9134 Remove codecept test file from export-ignore",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2021-07-07T15:14:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3fa41d63d2934b10469959d386290564ba6f6874",
          "body": null,
          "is_bot": false,
          "headline": "TE-8692 Reactivated modules with arch-sniffer R-S",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2021-05-28T11:49:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef3bafe82e8504a0dabdc27dffb2ced9f9b88f9b",
          "body": null,
          "is_bot": false,
          "headline": "TE-8692 Reactivated modules with arch-sniffer R-S",
          "author_name": "Olha Livitchuk",
          "author_login": "olhalivitchuk",
          "committed_at": "2021-05-28T11:48:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19e2fd3a2c74ee80be2acd6baaa69e53a9ff284c",
          "body": null,
          "is_bot": false,
          "headline": "TE-9147 fixed security plugin test",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2021-05-13T15:56:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98c7108a5f8fee4ea079b2c44d203dc6a2b64b80",
          "body": null,
          "is_bot": false,
          "headline": "TE-9147 fixed security plugin test",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2021-05-13T15:07:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca52b5be650c29089c4cdb68493133fe60cedfd4",
          "body": null,
          "is_bot": false,
          "headline": "TE-9147 fixed security plugin test",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2021-05-13T15:05:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b27137304724ef336efc06e6541a91d7dd789ad",
          "body": null,
          "is_bot": false,
          "headline": "TE-9147 fixed security plugin test",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2021-05-13T15:03:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d97f936b6a846f5e5bd6e532f5958f932a6232b2",
          "body": null,
          "is_bot": false,
          "headline": "TE-9147 fixed tests",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2021-05-12T14:17:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f1bcc6e52ff69ccb51b2c45914f94e845648655",
          "body": null,
          "is_bot": false,
          "headline": "TE-9147 fixed tests",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2021-05-12T12:54:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "631b4701dea6e6bbc8d36f299f6656a34cd72faf",
          "body": null,
          "is_bot": false,
          "headline": "TE-9147 fixed tests",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2021-05-12T12:14:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7d8b277dcfc47a0498f1b375a51102449d851a1",
          "body": null,
          "is_bot": false,
          "headline": "TE-9147 fixed tests",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2021-05-12T07:44:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "888b54fdbbca566217a8d098e5d21bb3d0673f1c",
          "body": null,
          "is_bot": false,
          "headline": "TE-9147 adjusted test cases with expected exception",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2021-05-11T13:29:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "566acaf04f97885659fa212fa7761544ae36f4ce",
          "body": null,
          "is_bot": false,
          "headline": "TE-9104 CI to GithubActions",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2021-05-05T17:20:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "810a31f05ca01b813a54229ace97775fafbf1572",
          "body": null,
          "is_bot": false,
          "headline": "format: apply to yaml and xml files",
          "author_name": "Alex Malkevich",
          "author_login": "gund",
          "committed_at": "2021-05-04T13:30:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c74f9cad04827bd6eea1ae7ce6bd5454d17a63c2",
          "body": null,
          "is_bot": false,
          "headline": "TE-9106 Fix composer.json indentation",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2021-05-03T14:18:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e396780d0907cef71ff0e48d99af3e2232a668ec",
          "body": null,
          "is_bot": false,
          "headline": "MP-4420: update security depnency",
          "author_name": "tobias.rosenstock",
          "author_login": "tobi812",
          "committed_at": "2021-04-23T16:05:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c31136cac5b6c20d7c6db720ffd53df80e5726ce",
          "body": null,
          "is_bot": false,
          "headline": "MP-4420: refactoring after code review",
          "author_name": "tobias.rosenstock",
          "author_login": "tobi812",
          "committed_at": "2021-04-20T07:43:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73e6e37e0498cbafeea1f3363e1b217491c5d49b",
          "body": null,
          "is_bot": false,
          "headline": "MP-4420: fix logout redirect for merchant portal",
          "author_name": "tobias.rosenstock",
          "author_login": "tobi812",
          "committed_at": "2021-04-13T09:11:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6dac551e37d100aa956b5073200d0124dfb33ee8",
          "body": null,
          "is_bot": false,
          "headline": "MP-4420: fix logout redirect for merchant portal",
          "author_name": "tobias.rosenstock",
          "author_login": "tobi812",
          "committed_at": "2021-04-13T09:11:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a93d0b9d759d30d721ad0963e5230178c143afd7",
          "body": null,
          "is_bot": false,
          "headline": "MP-4420: merchant logout bug",
          "author_name": "tobias.rosenstock",
          "author_login": "tobi812",
          "committed_at": "2021-04-13T08:14:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3751029e82b44381714563bf41f8f6f82f45fa7d",
          "body": null,
          "is_bot": false,
          "headline": "MP-4420: added new logout-listener",
          "author_name": "tobias.rosenstock",
          "author_login": "tobi812",
          "committed_at": "2021-04-12T13:56:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "247a3eb9f0d358e29b832134cb7bffdab67bf6a0",
          "body": null,
          "is_bot": false,
          "headline": "TE-4011 revert for BC",
          "author_name": "Dimitriy Kravchenko",
          "author_login": "Nidhognit",
          "committed_at": "2021-02-04T15:29:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8284e58547e3b8bb47289116c42fbfe68f0c0709",
          "body": null,
          "is_bot": false,
          "headline": "TE-4011 review fix",
          "author_name": "Dimitriy Kravchenko",
          "author_login": "Nidhognit",
          "committed_at": "2021-02-03T14:56:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78fcabb3b894e376abe54c9c26e90b1c0bdbac41",
          "body": null,
          "is_bot": false,
          "headline": "TE-4011 review fix",
          "author_name": "Dimitriy Kravchenko",
          "author_login": "Nidhognit",
          "committed_at": "2021-02-03T09:22:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f6b46b7bc5f39f10f3d7bbb584b6eff557f48e0b",
          "body": null,
          "is_bot": false,
          "headline": "TE-4011 / TE-8507 remove code that generate deprecated messages in tests",
          "author_name": "Dimitriy Kravchenko",
          "author_login": "Nidhognit",
          "committed_at": "2021-01-26T15:23:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7265cbe34499613579d72e002d9e640011451141",
          "body": "* TE-7291: formatted files according to prettier config\r\n\r\n* TE-7414: fixed code style according to formatter\r\n\r\n* TE-7414: fixed formatting\r\n\r\n* TE-7414: executed formatter\r\n\r\n* TE-7414: Executed formatter for new files\r\n\r\n* TE-7402 Execute format check in CI (#7746)\r\n\r\n* TE-7402: added checks to t\n[…]\nommit\r\n\r\n* TE-7414: updated prettierignor\r\n\r\n* TE-7414: updated ignore files for travis\r\n\r\n* TE-7402: added codelyzer package\r\n\r\n* TE-7402: added additional modules\r\n\r\n* TE-7402: updated travis config",
          "is_bot": false,
          "headline": "TE-7414 Execute formatter on whole project (#7650)",
          "author_name": "Andrey Maslov",
          "author_login": "andrew-maslov",
          "committed_at": "2020-12-22T20:04:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9ba26eb9c8210d1c462d1929956b4b5cfbc59aca",
          "body": null,
          "is_bot": false,
          "headline": "Code sniffer fix: Throw annotations.",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2020-12-07T17:20:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1456f4135d4e7865701fcc84c01493ed83dbed2",
          "body": null,
          "is_bot": false,
          "headline": "Sync meta files",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2020-11-20T10:34:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7c57d8b1d985e7ce7b81979ece5a02896f051aa",
          "body": null,
          "is_bot": false,
          "headline": "MR-222: phpstan fixes",
          "author_name": "Stanislav Matveev",
          "author_login": "matweew",
          "committed_at": "2020-11-10T13:49:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58d5e6410100efa9604d26a02e9171f09d499771",
          "body": "* MR-280: Adjusted Security module. Added SecurityGui, UserPasswordReset and UserPasswordResetExtension modules. \r\n* Removed AuthenticationMerchantPortalGui module. Introduced SecurityMerchantPortalGui, SecuritySystemUser and UserPasswordResetMail modules. Adjusted Security, SecurityGui, MerchantUse\n[…]\n. Adjusted MerchantUser module. Refactored shared configs.\r\n* Added tests.\r\n\r\nCo-authored-by: Stanislav Matveev <matweewster@gmail.com>\r\nCo-authored-by: Theodoros Liokos <theodoros.liokos@spryker.com>",
          "is_bot": false,
          "headline": "MR-280:Separate Firewalls for Backoffice and Merchant Portal (#7446)",
          "author_name": "Artem Kosatov",
          "author_login": "artemkosatov",
          "committed_at": "2020-11-10T07:48:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "742eb79ac4954c7f54c4c6c64bff442d9c7bc570",
          "body": null,
          "is_bot": false,
          "headline": "TE-7661 Upgrade to PHP 7.3+",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2020-10-27T11:32:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2cb8bdd81d1a8bd2c0a2add365d5ded0156048c7",
          "body": null,
          "is_bot": false,
          "headline": "TE-7661 Upgrade to PHP 7.3+",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2020-10-27T10:00:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c3e2d3505421db0f43bc982b31c0d81a0c93d2d",
          "body": null,
          "is_bot": false,
          "headline": "Update psalm report.",
          "author_name": "mscherer",
          "author_login": "dereuromark",
          "committed_at": "2020-10-26T10:50:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c26f432e012fb564b77667e903579c3489574303",
          "body": null,
          "is_bot": false,
          "headline": "TE-7001 Updated phpstan.neon for Security module.",
          "author_name": "René Klatt",
          "author_login": "stereomon",
          "committed_at": "2020-10-02T12:43:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5433f945715f700f77a45efb9731325445b7830",
          "body": null,
          "is_bot": false,
          "headline": "TE-7001 Added RememberMeLogoutListener.",
          "author_name": "René Klatt",
          "author_login": "stereomon",
          "committed_at": "2020-10-02T11:18:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ead215148a76e1ee677ec69357102b66466ada78",
          "body": null,
          "is_bot": false,
          "headline": "TE-7001 Fixed issue with double logout.",
          "author_name": "René Klatt",
          "author_login": "stereomon",
          "committed_at": "2020-10-01T11:50:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5bd42b1fa29d215166652fe3ee8c896110477c1",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feature/te-7001/master-symfony-5-support",
          "author_name": "René Klatt",
          "author_login": "stereomon",
          "committed_at": "2020-09-30T11:34:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d63f361c198b9064ee8cec0b15c978217c358ff7",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into bugfix/assert-strict",
          "author_name": "gechetspr",
          "author_login": "gechetspr",
          "committed_at": "2020-09-29T07:43:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b0ff98425eddff7655a9c605d90f2e8fdba998f",
          "body": null,
          "is_bot": false,
          "headline": "TE-7001 Code review changes.",
          "author_name": "René Klatt",
          "author_login": "stereomon",
          "committed_at": "2020-09-28T13:22:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87dda644cf114a3a7cebd1c37dda0181e064b985",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'master' into feature/te-7001/master-symfony-5-support",
          "author_name": "René Klatt",
          "author_login": "stereomon",
          "committed_at": "2020-09-24T11:48:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 18,
      "commits_last_year": 12,
      "latest_release_at": "2026-04-05T05:13:19Z",
      "latest_release_tag": "1.10.3",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 10,
      "days_since_latest_release": 113,
      "mean_days_between_releases": 164.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 62,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "spryker/security",
          "exists": true,
          "license": "proprietary",
          "keywords": [],
          "ecosystem": "packagist",
          "matches_repo": true,
          "registry_url": "https://packagist.org/packages/spryker/security",
          "is_deprecated": false,
          "latest_version": "1.10.3",
          "repository_url": "https://github.com/spryker/security",
          "versions_count": 18,
          "total_downloads": 2170878,
          "dependents_count": 12,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 18312,
          "first_published_at": null,
          "latest_published_at": "2026-04-04T07:25:58Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 114
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 6,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 63079,
      "source_files_sampled": 120,
      "oversized_source_files": 1,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "composer.json"
      ],
      "advisories": {
        "error": "No resolved dependencies carried a version and a supported ecosystem",
        "scope": "repository_graph",
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 15,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "packagist"
      ],
      "dependencies": [
        {
          "name": "spryker/application-extension",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "^1.0.0"
        },
        {
          "name": "spryker/kernel",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "^3.52.0"
        },
        {
          "name": "spryker/security-extension",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "^1.1.0"
        },
        {
          "name": "spryker/symfony",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "^3.15.0"
        },
        {
          "name": "spryker/validator-extension",
          "manifest": "composer.json",
          "ecosystem": "packagist",
          "version_constraint": "^1.0.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "spryker/application-extension",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/kernel",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/security-extension",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/symfony",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/validator-extension",
            "direct": true,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "php",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/application",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/code-sniffer",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/container",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/event-dispatcher",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/event-dispatcher-extension",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/log",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/router",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/session",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          },
          {
            "name": "spryker/testify",
            "direct": false,
            "version": null,
            "ecosystem": "packagist"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 15,
        "direct_count": 5,
        "indirect_count": 10
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 10,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "dereuromark",
          "commits": 3089,
          "avatar_url": "https://avatars.githubusercontent.com/u/39854?v=4"
        },
        {
          "type": "User",
          "login": "stereomon",
          "commits": 2685,
          "avatar_url": "https://avatars.githubusercontent.com/u/1382877?v=4"
        },
        {
          "type": "User",
          "login": "oliwier-spryker",
          "commits": 1603,
          "avatar_url": "https://avatars.githubusercontent.com/u/13624598?v=4"
        },
        {
          "type": "User",
          "login": "tamasnyulas",
          "commits": 1180,
          "avatar_url": "https://avatars.githubusercontent.com/u/3429362?v=4"
        },
        {
          "type": "User",
          "login": "PhilinTv",
          "commits": 1139,
          "avatar_url": "https://avatars.githubusercontent.com/u/376033?v=4"
        },
        {
          "type": "User",
          "login": "gerner-spryker",
          "commits": 986,
          "avatar_url": "https://avatars.githubusercontent.com/u/30629375?v=4"
        },
        {
          "type": "User",
          "login": "voitovtihran",
          "commits": 790,
          "avatar_url": "https://avatars.githubusercontent.com/u/39267485?v=4"
        },
        {
          "type": "User",
          "login": "limeeugenia",
          "commits": 789,
          "avatar_url": "https://avatars.githubusercontent.com/u/25685017?v=4"
        },
        {
          "type": "User",
          "login": "kraal-spryker",
          "commits": 781,
          "avatar_url": "https://avatars.githubusercontent.com/u/42177964?v=4"
        },
        {
          "type": "User",
          "login": "m7moud",
          "commits": 744,
          "avatar_url": "https://avatars.githubusercontent.com/u/3217954?v=4"
        }
      ],
      "contributors_sampled": 100,
      "top_contributor_share": 0.117
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        "phpstan.neon"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 9 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": null,
            "reason": "no dependencies found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "e357fb76cd38d5ae3a57fee94fb3868d14599dc6",
        "ran_at": "2026-07-27T17:56:21Z",
        "aggregate_score": 3.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T17:47:26Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/spryker/security",
    "host": "github.com",
    "name": "security",
    "owner": "spryker"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 35,
        "vitality": 61,
        "community": 42,
        "governance": 67,
        "engineering": 75
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 61,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "commits_last_year": 12,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 10
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "10/52 weeks with commits",
                "points": 6.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 10
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "12 commits in the last year",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 74,
            "inputs": {
              "releases_count": 18,
              "latest_release_tag": "1.10.3",
              "releases_from_tags": false,
              "days_since_latest_release": 113,
              "mean_days_between_releases": 164.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "18 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 113 days ago",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 113
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~164.5 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 164.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 42,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 4,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 6,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "6 watchers",
                "points": 3.9,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "packages": [
                "spryker/security"
              ],
              "dependents": 12,
              "ecosystems": "packagist",
              "total_downloads": 2170878,
              "monthly_downloads": 18312
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "18,312 downloads/month across packagist",
                "points": 56.8,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 18312,
                      "ecosystems": "packagist"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "12 packages depend on it",
                "points": 7.4,
                "status": "partial",
                "details": [
                  {
                    "code": "registry_dependents",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 67,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 97,
            "inputs": {
              "bus_factor": 10,
              "contributors_sampled": 100,
              "top_contributor_share": 0.117
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "10 contributor(s) cover half of all commits",
                "points": 54,
                "status": "met",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 12% of commits",
                "points": 19.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 12
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "100 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 9 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "0/1 decided PRs merged",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 0,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "followers": 113,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "spryker",
              "public_repos": 1333,
              "account_age_days": 4246
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "113 followers of spryker",
                "points": 14.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 113,
                      "login": "spryker"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "1333 public repos, account ~11 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 1333
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 11
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "spryker/security"
              ],
              "ecosystems": "packagist",
              "any_deprecated": false,
              "min_days_since_publish": 114
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on packagist",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "packagist"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 114 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 114
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "18 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 75,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "phpstan.neon",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "phpstan.neon"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": "https://spryker.com",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://spryker.com",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 35,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "dangerous_workflow",
                    "packaging",
                    "pinned_dependencies",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 35,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 12,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 6,
              "scorecard_aggregate": 3.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 9 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 6
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "at_risk",
        "name": "AI Readiness",
        "value": 34,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 21,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.4,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "40 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 21.3,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 40,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_pinned_dependencies"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 37,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "phpstan.neon",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "phpstan.neon"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "primary_language": "PHP",
              "largest_source_bytes": 63079,
              "source_files_sampled": 120,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "PHP without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "PHP"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/120 source files over 60KB",
                "points": 54.5,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 120,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "No resolved dependencies carried a version and a supported ecosystem"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T17:56:37.677725Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/spryker/security.svg",
  "full_name": "spryker/security",
  "license_state": "custom",
  "license_spdx": null
}

Bewertungen sind Signale, keine Garantien. Sie spiegeln öffentlich sichtbare Praxis auf GitHub wider — kein Code-Audit und keine Sicherheitsgarantie.

Fehlende Daten werden ausgeschlossen und die Gewichte neu normiert, nie als null bewertet. Die Methodik ist versioniert und offen: Metriken v1.13.0, Schema v0.27.0 — vollständige Methodik · Metriken-Wiki.

Wie ein einzelnes Ergebnis im Gesamtregister steht: aggregierte StatistikenPackagist.