Registro públicoModerado
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-25 09:59 UTC
bcgit / bc-java
Bouncy Castle Java Distribution (Mirror)
bcgit/bc-java tiene un índice de salud de 66 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Community & Adoption (82/100) y la más baja, Sustainability & Governance (52/100). Se actualizó por última vez hoy. Una sola persona concentra la mayor parte del trabajo reciente.
66
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
66
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
Legion of the Bouncy Castle IncOrganización
296 seguidores9 repositorios públicosdesde may 2013
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
60
Actividad de desarrollo
100Excelente
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 0 días |
| 36/36 | Cadencia de commits — 52/52 semanas con commits |
| 18/18 | Volumen de commits — 1693 commits en el último año |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
Datos de entrada utilizados
| commits_last_year | 1693 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 52 |
Disciplina de publicación
1Crítico
Cómo se puntúa
| 0/27 | Publica versiones — sin versiones publicadas |
| 0/36 | Recencia de las versiones — sin versiones |
| 0/27 | Cadencia de publicación — sin versiones |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 0 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
82
Popularidad y adopción
92Excelente
Cómo se puntúa
| 55.6/60 | Estrellas — 2670 estrellas |
| 25/25 | Forks — 1264 forks |
| 11.8/15 | Observadores — 135 observadores |
Datos de entrada utilizados
| forks | 1264 |
| stars | 2670 |
| watchers | 135 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
70Bueno
Cómo se puntúa
| 22.5/22.5 | README |
| 22.5/22.5 | Licencia — licencia reconocida (MIT) |
| 18/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | sí |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
52
Resiliencia de mantenedores (factor bus)
42En riesgo
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 9.7/22.5 | Distribución de commits — el principal contribuyente firma el 57% de los commits |
| 13.5/13.5 | Amplitud de contribuyentes — 100 contribuyentes |
| 10/10 | OpenSSF Scorecard: Contributors — project has 34 contributing companies or organizations |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 100 |
| top_contributor_share | 0,568 |
Capacidad de respuesta a issues y PR
48En riesgo
Cómo se puntúa
| 44.9/46.8 | Resolución de issues — 96% de issues cerradas |
| 2.9/38.3 | Aceptación de PR — 43/561 PR decididos fusionados |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 43 |
| open_issues | 64 |
| closed_issues | 1548 |
| issue_closed_ratio | 0,96 |
| closed_unmerged_prs | 518 |
Propiedad y custodia
67Moderado
Cómo se puntúa
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 17.8/25 | Alcance del propietario — 296 seguidores de bcgit |
| 19.3/25 | Trayectoria — 9 repos públicos, cuenta de ~13 años |
Datos de entrada utilizados
| followers | 296 |
| owner_type | Organization |
| is_verified | — |
| owner_login | bcgit |
| public_repos | 9 |
| account_age_days | 4804 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
76
Prácticas de ingeniería
60Moderado
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 1 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 0/16 | Configuración de linter |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — sin datos |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: CI-Tests. Los pesos restantes se han renormalizado.
Documentación
100Excelente
Cómo se puntúa
| 30/30 | README |
| 25/25 | Directorio de documentación |
| 15/15 | Sitio de documentación / página del proyecto — https://www.bouncycastle.org/download/bouncy-castle-java/ |
| 10/10 | Descripción del repositorio |
| 10/10 | Topics — 6 topics |
| 10/10 | Wiki |
Datos de entrada utilizados
| topics | crypto, java, openpgp, dtls, post-quantum-cryptography, tls |
| has_wiki | sí |
| homepage | https://www.bouncycastle.org/download/bouncy-castle-java/ |
| has_readme | sí |
| has_docs_dir | sí |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
63
Postura de seguridad
63Moderado
Cómo se puntúa
| 0/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — sin datos |
| 0/2.5 | CI-Tests — sin datos |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 34 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | Licencia — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — sin datos |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool detected: CodeQL |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — sin datos |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 14 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 4 |
| scorecard_aggregate | 6,3 |
Excluidos de la puntuación (sin datos o no aplicable): branch_protection, ci_tests, packaging, signed_releases. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
70
Contexto y guía para agentes
70Bueno
Cómo se puntúa
| 45/45 | Instrucciones para agentes — CLAUDE.md |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 25.1/40 | Historial de commits legible — 47 de 100 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,47 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 1407 |
Cómo se puntúa
| 12.6/18 | Arranque con un solo comando — bom/build.gradle, build.gradle, core/build.gradle (convención del toolchain, sin ejecutor de tareas) |
| 22/22 | Pruebas automatizadas |
| 0/11 | Configuración de lint / formato |
| 11/11 | Verificación estática de tipos — Java (tipado estático) |
| 10/10 | Entorno reproducible — Dockerfile |
| 0/10 | Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 100 |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | — |
| has_dockerfile | sí |
| typed_language | sí |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | bom/build.gradle, build.gradle, core/build.gradle, jmail/build.gradle, mail/build.gradle, misc/build.gradle, mls/build.gradle, pg/build.gradle, pkix/build.gradle, prov/build.gradle, test/build.gradle, tls/build.gradle, util/build.gradle |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
99Excelente
Cómo se puntúa
| 45/45 | Código verificable por tipos — Java (tipado estático) |
| 54.3/55 | Tamaños de archivo manejables — 101/7893 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | Java |
| largest_source_bytes | 1.866.290 |
| source_files_sampled | 7893 |
| oversized_source_files | 101 |
Cómo se puntúa
| 40/40 | Esquema de API (OpenAPI/GraphQL/proto) — mls/src/main/proto/mls_client.proto |
| 0/20 | Servidor MCP |
| 40/40 | Ejemplos ejecutables — example, examples |
Datos de entrada utilizados
| example_dirs | example, examples |
| has_mcp_signal | no |
| api_schema_files | mls/src/main/proto/mls_client.proto |
Datos clave
2670estrellas de GitHub
100contribuidores
1693commits en los últimos 12 meses
0días desde el último push
0versiones publicadas
1factor bus
64issues abiertas
Mavenecosistemas de paquetes
Advertencias de recopilación de datos
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Más detalle
Historial de estrellas y forks 0 ★ / 1264 ⇿
0Estrellas
1264Forks
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Solo se muestra el historial más reciente: este repositorio supera la ventana de recopilación, por lo que no se captura el historial más antiguo.
Cada punto abarca 11 días.
OpenSSF Scorecard 6.3 / 10
6.3agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 0 | Binary-Artifacts | binaries present in source code |
| n/d | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| n/d | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 34 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| n/d | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool detected: CodeQL |
| 10 | Security-Policy | security policy file detected |
| n/d | Signed-Releases | no releases found |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Todas las dependencias 0
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 0 paquetes directos y 0 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
| Registro | Paquete | Versión | Relación |
|---|
Avisos de dependencias sin evaluar
El cotejo de avisos no pudo ejecutarse para este informe: No resolved dependencies to assess
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"crypto",
"java",
"openpgp",
"dtls",
"post-quantum-cryptography",
"tls"
],
"is_fork": false,
"size_kb": 662118,
"has_wiki": true,
"homepage": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"languages": {
"HTML": 88615,
"Java": 58921612,
"Shell": 161034,
"Batchfile": 12956,
"Dockerfile": 1544
},
"pushed_at": "2026-07-25T01:10:51Z",
"created_at": "2013-06-01T02:38:42Z",
"owner_type": "Organization",
"updated_at": "2026-07-25T01:11:02Z",
"description": "Bouncy Castle Java Distribution (Mirror)",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Java",
"significant_languages": [
"Java"
]
},
"owner": {
"blog": "https://www.bouncycastle.org",
"name": "Legion of the Bouncy Castle Inc",
"type": "Organization",
"login": "bcgit",
"company": null,
"location": "Melbourne, Australia",
"followers": 296,
"avatar_url": "https://avatars.githubusercontent.com/u/4566970?v=4",
"created_at": "2013-05-30T05:06:58Z",
"is_verified": null,
"public_repos": 9,
"account_age_days": 4804
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "fdc5011e1d54cb5f9687ceda5dbeefea13528bdb",
"body": "SM9: reject non-positive key lengths in SM9KEMGenerator / SM9KEMExtractor -...\n\nSee merge request root/bc-java!281",
"is_bot": false,
"headline": "Merge branch 'sm9-kem-keylen' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T11:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d40a00b3effd9a7483f6242d4ee7c2b2e10f6fc2",
"body": "…ctor -...",
"is_bot": false,
"headline": "SM9: reject non-positive key lengths in SM9KEMGenerator / SM9KEMExtra…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T11:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe1167ff2e82e5661df20d3c8447955c048921cc",
"body": "SM9: add the identity-based digital signature algorithm (Signature.SM3withSM9, GM/T 0044.2)\n\nSee merge request root/bc-java!280",
"is_bot": false,
"headline": "Merge branch 'sm9-sign' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T10:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "014486a5428ef1e80958da5f4260a9b0167a91b9",
"body": "…3withSM9, GM/T 0044.2)",
"is_bot": false,
"headline": "SM9: add the identity-based digital signature algorithm (Signature.SM…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T10:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6d7ec272b6bca4a13fc5026cc7e93f1ed3b68e8",
"body": "…SSParameterSpec) when an alternate provider such as SunMSCAPI registers no digest-specific PSS algorithm, fixing RSA-PSS CertificateVerify with Windows smart-card (Windows-MY/CPrivateKey) client keys under TLS 1.2 and 1.3",
"is_bot": false,
"headline": "TLS: fall back to the generic RSASSA-PSS signature name (digest via P…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-24T03:42:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d10b2f6ae9817f4ddcc392a5240da59a76b2142c",
"body": "…it/processBlock, ParametersWithRandom), fixed the non-terminating retry loop when stream-mode encrypting an empty message, and classified Cipher.SM9 as pke in generateCbom.",
"is_bot": false,
"headline": "Reshaped SM9Engine to the SM2Engine API pattern (Mode constructor, in…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-24T02:49:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba1943558d6322e8d25e873b333c4eae6b725507",
"body": "…key + SM9ParameterSpec - Cipher.SM9 in ENCRYPT_MODE now takes the key from SM9EncMasterPublicKey.getUserPublicKey(id), the same recipient key the SM9-KEM encapsulates to, and SM9ParameterSpec is removed; an AlgorithmParameterSpec or a master public key at encrypt init is rejected with a pointer to getUserPublicKey",
"is_bot": false,
"headline": "SM9: encrypt to the recipient's public key rather than master public …",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T01:38:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eeb3c6c66136201c61aaf733f6cf3ca7a0c8b440",
"body": "Adds the SM9 public-key encryption algorithm on top of the merged KEM, reusing its\nencryption master/user key infrastructure: SM9Engine (org.bouncycastle.crypto.engines)\nand the GM/T 0080-2020 SM9Cipher ASN.1 structure, exposed as Cipher.SM9 through the\nprovider. A sender encrypts to a recipient's i\n[…]\nm cipher; the ciphertext is\nself-describing, so one Cipher.SM9 decrypts either mode. Verified against the official\nGM/T 0044.5-2016 Annex D worked example. Includes SM9CipherExample and SM9CipherTest.",
"is_bot": false,
"headline": "SM9: add identity-based public-key encryption (Cipher.SM9, GM/T 0044.4)",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T01:02:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c40059a6a23e97c728c01867816a2a6fe6b1505",
"body": "…9-KEM, following the ML-KEM KEMSpi pattern (jdk17 overlay, SpiUtil.hasKEM() gated). By default (null spec or withNoKdf) the shared secret is the mechanism's own GM/T 0044.4 KDF output at the requested size - the interoperable form; a KTSParameterSpec KDF can optionally be layered on top for generic use, taking a 256-bit GM/T 0044.4 shared secret as input",
"is_bot": false,
"headline": "SM9: expose the KEM through the JDK 21 javax.crypto.KEM API as KEM.SM…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T00:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee551da960bb6d097184276b2bba154ba8278b7e",
"body": "…roy() drops the master secret ke / the user key point de and zeroizes the carried identity, isDestroyed() reflects the state, and the secret-bearing operations (getEncoded, generateUserKeyPair, decapsulation) throw IllegalStateException afterwards; a destroyed master key no longer serializes, and the published master public key is unaffected",
"is_bot": false,
"headline": "SM9: implement the Destroyable pattern on the SM9 private keys - dest…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T00:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "080adad68e424561a5cc435cecbb9d3c8b3a297f",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:59:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5b049888e9f06862fdd9bc2f4f0a49dac4b64f4",
"body": "…inventory.",
"is_bot": false,
"headline": "Classify the SM9-ENC master keypair asset as kem in the generateCbom …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:59:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cd9a3e93d4274b246d10b93656ba8469e098e3d",
"body": "… SM9 user key derivation, replacing the SM9UserKeyParameterSpec KeyPairGenerator path, and minimised visibility in the sm9 provider package.",
"is_bot": false,
"headline": "Added SM9EncMasterPrivateKey and SM9EncMasterPublicKey interfaces for…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:59:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71b8e3657adce9828102d33772f290bfc60a1004",
"body": "…L<<(chunkSize+6) buffer: chunkSize 24 → 1 GiB alloc (memory-DoS), 25 → NegativeArraySizeException. Concrete sibling asymmetry: v5 AEADEncDataPacket:51 has if (chunkSize > 16) throw (CVE-2026-3505) but v6 SymmetricEncIntegrityPacket:54 reads chunkSize=in.read() with no bound — the missed sibling. Attacker needs only the recipient's public key.\"\n\nThis reverts commit 1299519c70c21b4b56296762295528124f5825a7.",
"is_bot": false,
"headline": "Revert \"OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T23:51:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1299519c70c21b4b56296762295528124f5825a7",
"body": "…kSize+6) buffer: chunkSize 24 → 1 GiB alloc (memory-DoS), 25 → NegativeArraySizeException. Concrete sibling asymmetry: v5 AEADEncDataPacket:51 has if (chunkSize > 16) throw (CVE-2026-3505) but v6 SymmetricEncIntegrityPacket:54 reads chunkSize=in.read() with no bound — the missed sibling. Attacker needs only the recipient's public key.",
"is_bot": false,
"headline": "OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1L<<(chun…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T23:38:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c36de642b1d88011d540ac4567bf2723f5d0cea",
"body": "# Conflicts:\n#\tdocs/releasenotes.html",
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:05:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2969846ae7241c5402ba1ce4fe5eeca67ac4202",
"body": null,
"is_bot": false,
"headline": "Merge branch 'cbom-lightweight-api'",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:01:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9c0d2929a6c58ec9f080609670eb6e6da25701a",
"body": "…ed algorithms (Elephant, ISAP, Photon-Beetle, Romulus, Schwaemm, cSHAKE, SHA-512/t - one asset per named variant), distinguishing generic constructions by primitive-taking constructors instead of missing no-arg constructors, and moved the lightweight-sweep release note from the shipped 1.85 block to 1.86.",
"is_bot": false,
"headline": "Extended the generateCbom lightweight sweep to standalone parameteris…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T22:58:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "999c4e7bca7b7b3b25b7a6e6fc9bb9d897b3b1f0",
"body": "SM9-KEM: add the SM9 identity-based key encapsulation mechanism (GM/T 0044.4)\n\nSee merge request root/bc-java!273",
"is_bot": false,
"headline": "Merge branch 'sm9-kem' into 'main'",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T22:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f42c92c61c588ef15378f2c4c32fbf6ce53333a",
"body": "… 0044.4)",
"is_bot": false,
"headline": "SM9-KEM: add the SM9 identity-based key encapsulation mechanism (GM/T…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T22:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf32e2f1143ab7b5d70358d92ccc9078ee67c23e",
"body": "…ates to github #2372",
"is_bot": false,
"headline": "Fall back to CRL checking when the OCSP responder is unreachable, rel…",
"author_name": "royb",
"author_login": null,
"committed_at": "2026-07-23T17:59:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f34c210b7669dc815a56240851bdc856eb15e4d",
"body": "…castle.crypto.*) for algorithms with no JCA registration, tagging every CBOM asset with a bc:api property and lightweight assets with their defining classes.",
"is_bot": false,
"headline": "Extended generateCbom to sweep the public lightweight API (org.bouncy…",
"author_name": "mwcw",
"author_login": "mwcw",
"committed_at": "2026-07-23T10:52:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e5c0c5f21c789ed7659a11a1ec20a0fd5d31114",
"body": "… increments that carry across 0xFF IV bytes, and skip() for backward moves smaller than the current intra-block offset.",
"is_bot": false,
"headline": "Corrected SICBlockCipher.getPosition() borrow propagation for counter…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T10:25:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91a78e831dd0960fd59991e8d6d00148a0f6c0eb",
"body": "Cap the PBMAC1 PBKDF2 iteration count in JcePBMac1CalculatorBuilder (pre-auth CPU DoS)\n\nSee merge request root/bc-java!268",
"is_bot": false,
"headline": "Merge branch 'pkcs-pbmac1-iteration-cap' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T10:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ab15c2b41fdb46cfd085eae400cc3ffbb915aad",
"body": "…pre-auth CPU DoS)",
"is_bot": false,
"headline": "Cap the PBMAC1 PBKDF2 iteration count in JcePBMac1CalculatorBuilder (…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T10:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c3972f46d4e712e62ab1af9084807e9a297be7f",
"body": "…onstants instead of ML-DSA's",
"is_bot": false,
"headline": "Corrected BCMLKEMPrivateKey to use MLKEMPrivateKeyParameters format c…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T03:49:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b743b8955a694425a0a2b457c8a40f78049d7c9",
"body": "Corrected an always-false OID comparison so JceKeyTransRecipient key-size...\n\nSee merge request root/bc-java!275",
"is_bot": false,
"headline": "Merge branch 'cms-cek-hkdf-keysize-validation' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T02:57:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44bfa07302475214db483f0a7dcf148e78cd69f7",
"body": "…size...",
"is_bot": false,
"headline": "Corrected an always-false OID comparison so JceKeyTransRecipient key-…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T02:57:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfd38945748b716c734a3da1d2c6fc804e8361d3",
"body": null,
"is_bot": false,
"headline": "Refactoring in bcpg",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T07:00:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72789cd894f8b2b0f1e71036c2c15d0140138971",
"body": null,
"is_bot": false,
"headline": "Explicit string conversion instead of MemoryStream.toString",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:58:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0732e80416e6a8bc613fe567916facc01851954d",
"body": null,
"is_bot": false,
"headline": "Delete unused method",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:56:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20ea13123f169ccc4732726921a2859393e15ef5",
"body": null,
"is_bot": false,
"headline": "Reference property name constant",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:55:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2121327d66720560bdf8dcbdf39e603cfa1c98f2",
"body": null,
"is_bot": false,
"headline": "Rewrite SignatureCheck parsing constructor",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:52:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c20b0cc53f37c19466e3d36caf1e99fa388c4559",
"body": null,
"is_bot": false,
"headline": "Fix hasRevocation for enc alg primary",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2bfbf733e1c3bda33b06d9cdcc9da45774b8955",
"body": null,
"is_bot": false,
"headline": "pg: javadoc fixes and test cleanup",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T05:05:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "119b1b36e924c0c29d4c3e7fd173b9619dd9b4c3",
"body": null,
"is_bot": false,
"headline": "Give BlockPool imlpementations access to Block.clear()",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T04:29:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d471c20c2059c6199fb2373c6704ff3ce87836a",
"body": "…alueExact is missing on Android below API 33, relates to github #2369.",
"is_bot": false,
"headline": "Open-code BigIntegers value-exact range checks again, BigInteger.intV…",
"author_name": "royb",
"author_login": null,
"committed_at": "2026-07-21T19:02:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5123fbbe8fe30cffe4d27afa0d34dc5d285d3e89",
"body": "…module",
"is_bot": false,
"headline": "updated the javadoc for the mozilla and tsp packages within the pkix …",
"author_name": "oreste",
"author_login": null,
"committed_at": "2026-07-21T11:08:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bac2ac4df7f2d7562e6c38164b84feb121583818",
"body": null,
"is_bot": false,
"headline": "Javadoc",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-21T10:42:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bd6a1d9d5a7b1581241ed7ea7cf438dd04547d0",
"body": "…ys so destroy() zeroizes key material, relates to github #2366.",
"is_bot": false,
"headline": "Support Destroyable on ML-DSA/ML-KEM/SLH-DSA/FrodoKEM/CMCE private ke…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-21T09:59:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c47e8a83a74cfd42014499e8f9f3c590ec3ac3e7",
"body": "…n v3/checkout v4, use build-mode none (Gradle needs JDK 25 so autobuild cannot compile)",
"is_bot": false,
"headline": "Fix CodeQL workflow: trigger on main not master, bump to codeql-actio…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T09:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "575a62316ca237201a6d134b0f72421c0d6b13cc",
"body": null,
"is_bot": false,
"headline": "added doc on 1.85.1",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T07:40:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52407d891f3dce8c4d8d8999bfb355973cae54ae",
"body": "…complete encoding and nothing extra; add byte[]/InputStream constructors to CMSEncryptedData",
"is_bot": false,
"headline": "Document CMS container constructors, noting byte[] input must be the …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T07:37:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b424634d27905ada44b859acae8a96dc7d6fca8",
"body": null,
"is_bot": false,
"headline": "fixed JavaDoc",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T07:30:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d4fe40ac77b297db7f4cc59f84604aacb1fd2de",
"body": "…ing the full draft-ietf-lamps-cms-composite-kem wrap/KDF/KEM mapping",
"is_bot": false,
"headline": "Assert the AES-256-KW wrap OID in the Composite ML-KEM CMS test, pinn…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T06:20:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dd651e37af09f33862d5c5bbc37640a99425d9f",
"body": "…th CMS AuthEnvelopedData AEAD content, with ML-KEM/FrodoKEM/Composite round-trip tests",
"is_bot": false,
"headline": "Add JceKEMAuthEnvelopedRecipient so KEM (RFC 9629) recipients work wi…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T06:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8831e2b1e98fc38d750bba6d2268af04130a7d0c",
"body": "…ng NoSuchAlgorithmException throws through it so the cause is chained (and stays Java 4 safe), across the KEM CipherSpis, X509CRL/Certificate, BCFKS and JcaPKCS10CertificationRequest",
"is_bot": false,
"headline": "Add SecurityExceptions.noSuchAlgorithmException and route cause-foldi…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:47:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b0e00d4ab23e7082b6226c1bff569bb79c2872f",
"body": "…rough SecurityExceptions.illegalBlockSizeException so the cause is chained, matching the sibling KEM CipherSpis",
"is_bot": false,
"headline": "Route the RSA-KEM CipherSpi wrap-failure IllegalBlockSizeException th…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:37:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "657daa1ad47780f5fe8200d3ed8c65f6f029cc69",
"body": "…ssage through SecurityExceptions.invalidKeyException so the cause is chained (and stays Java 4 safe), across the KEM CipherSpis and the RSA/ElGamal/Falcon/Dilithium/composite paths",
"is_bot": false,
"headline": "Route InvalidKeyException throws that fold in a caught exception's me…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:36:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eac0b55fdb3673adace418013cdfd34547c89bf2",
"body": "…n CMS EnvelopedData, add the twelve composite encapsulation lengths, with a round-trip test over all parameter sets",
"is_bot": false,
"headline": "Register a Composite ML-KEM KEM Cipher so composite recipients work i…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:36:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dfefa653f349a60d4b93c1970e83987d0df0216",
"body": "…ntInfo generate side, binding the ukm field into the KDF otherInfo, with round-trip and tamper tests",
"is_bot": false,
"headline": "Add user keying material (UKM) support to the CMS RFC 9629 KEMRecipie…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-18T11:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b2a164e6dfe6cb49e87c981d17c7baf8ba3f681",
"body": "…tering its encapsulation lengths, with a round-trip test covering the AES-Wrap-192/256 mappings from draft-chen-lamps-cms-frodokem",
"is_bot": false,
"headline": "Enable FrodoKEM as a CMS RFC 9629 KEMRecipientInfo recipient by regis…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-18T10:34:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "606a9590f269b70b544de7a1f182610cc1cf5066",
"body": "… and register it in the cert test AllTests suite",
"is_bot": false,
"headline": "Add PQCCertTest exercising ML-KEM and FrodoKEM certificate generation…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-18T10:20:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfbf497c0b3c9d3b6a6104ce01b3d843e6471ce3",
"body": null,
"is_bot": false,
"headline": "minor cleanup.",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T03:52:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaeab5dda3bd0e1c8d421e67c1a6c09640416898",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T03:39:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3001351723cddb06c5dc429f8efc06f42c24090a",
"body": null,
"is_bot": false,
"headline": "fixed typo in CVE number",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T03:39:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9762d373b800d3a5a7cc15f1c1284d22c973651",
"body": "…ith destroy() throws DestroyFailedException resolved via the jce/src backport on the build-lw classpath, plus jdk14-parity cades excludes and jce/lcrypto test-contamination excludes",
"is_bot": false,
"headline": "Advance the jdk1.3 full build: re-introduce SecretWithEncapsulation w…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T02:23:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff7b7610a748b4bffc078c58e859626829921f9a",
"body": "…ed NPE/AIOOBE\n\nConsolidates the empty/missing-content parser-robustness fixes into one review unit.\nEach entry point converts an unchecked runtime exception (NullPointerException,\nArrayIndexOutOfBoundsException, IllegalStateException or ArithmeticException) that\nescaped on empty / content-less / tr\n[…]\nwith no nonce extension)\n\nAudit findings F16, F23, F24, F26, F28, F29, F30, F32, F52 plus the\nparse-empty-input-null-guards, tsp-empty-stream-parse-guard and\ncrl-reasoncode-crlreasons-aioobe branches.",
"is_bot": false,
"headline": "Guard empty/missing-content and out-of-range parse paths against leak…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-17T02:12:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "924fd937df02bc0ceb79ff97de7f6efff364f3b0",
"body": null,
"is_bot": false,
"headline": "added back PQC list",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T13:16:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e57eda2c40095ac19ee0ed3bab8fe9fa54c620e0",
"body": "…09CRLEntryObject/RFC3280/X509CertificateObject/BaseBlockCipher, new PQC KeyPairGeneratorSpi overlays with NoSuchProviderException catch, SM2Signer/Utils), the Falcon FPREngine JLS2 forward-reference fix, and drop the KEM cipher families so bcprov-jdk13 compiles clean",
"is_bot": false,
"headline": "Revive the jdk1.3 (build1-3) provider build: sync rotted overlays (X5…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T13:15:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38f563abe459bb7c46f72370552fc3767f7bd3bb",
"body": "…aging to avoid the OwlUtilTest bcprov signer-info clash, matching the lms/mayo/est/keybox pattern",
"is_bot": false,
"headline": "Drop crypto.agreement.owl.AllTests from the signed legacy Ant test st…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T09:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1271da1eeba1fa7a185380979eed644fe45e265",
"body": "…jar junit test-sweeping OSGi gotcha in docs/claude/build-jdk14.md",
"is_bot": false,
"headline": "Document the jdk1.3->jdk1.4 overlay layering and the legacy provider-…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T08:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3406b620442b345ed2a5ea81a19ab96312756c91",
"body": "…e *Test classes from the bcprov copy, and relocate OwlUtilTest to its own AllTests so it builds under bctest",
"is_bot": false,
"headline": "Keep junit out of the legacy provider jars by excluding main-namespac…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T08:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23b67126abaf8d26043585f442a574417fc5f8c5",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T04:45:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4df1c5fc437899b1f42208b031ae25f25acd159",
"body": "… configurable node limit (org.bouncycastle.x509.max_cert_path_build_nodes)",
"is_bot": false,
"headline": "Bound the PKIX certification-path builder's depth-first search with a…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T04:44:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "272fb32d4f66e7aafb1d60c408c1722a17da6869",
"body": null,
"is_bot": false,
"headline": "Add ML-KEM and X-Wing KEM support to HPKE, relates to github #2351",
"author_name": "royb",
"author_login": null,
"committed_at": "2026-07-15T22:06:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09cb1ed32ee5f22d1e288688c706bb930619b4ae",
"body": "…dule so examples compile and smoke-test under CI without shipping in the bc jars",
"is_bot": false,
"headline": "Add the misc examples tree to the Gradle build as a non-publishing mo…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T21:47:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6ae24643e7ba7cfdf9267656ce83bb656ab9777",
"body": "…e with a commonName longer than the RFC 5280 64-character bound",
"is_bot": false,
"headline": "Add an X500NameStyle example showing how to parse a Distinguished Nam…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T21:26:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ca5bc0b66200a2f8c13f508bf74d58e09b7bff7",
"body": "# Conflicts:\n#\tdocs/releasenotes.html",
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T02:13:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81ca96812a79b5c61d7638a808096c5ff23b543d",
"body": "…ULT_VERSION stamp) in docs/claude/conventions.md",
"is_bot": false,
"headline": "Document the full version-bump file set (incl. the OpenPGP armor DEFA…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T02:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f492e5ad6eb983dc5328dc0fbb858854e604b72",
"body": "…on via update() does not throw ShortBufferException, relates to github #2354.",
"is_bot": false,
"headline": "Return 0 from KCCMBlockCipher.getUpdateOutputSize so JCA CCM decrypti…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T02:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b19c2729262db6f81ebb1e27432704eb67a8491a",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:54:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ad436664aefe970dc5e5e54d641669e0bbd8b3f",
"body": "… recipient ids",
"is_bot": false,
"headline": "Add a strict equals() to KEMRecipientId for parity with the other CMS…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6b8f75c71e339777e352c7f05b2f7fb75f1ec2a",
"body": null,
"is_bot": false,
"headline": "Use ASN1BitString.getBytes() for composite signature components",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ba0153799f2749519d046cdca197ee50dda0094",
"body": "…on the module path",
"is_bot": false,
"headline": "Fall back to a module-safe ResourceBundle lookup in LocalizedMessage …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d0ad7cddd081f6470106e9cf2ad75b440db9660",
"body": "…t guards",
"is_bot": false,
"headline": "Reject a negative PBKDF2 iteration count in the CMS password-recipien…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6a05505d7a1ce47d526e827c3f34ac606c08247",
"body": "…not block forever",
"is_bot": false,
"headline": "Bound the 204/404 body drain in ESTService.getCSRAttributes so it can…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a3d831ce949d125b94d659d2288edbc62486ce1",
"body": "… guards",
"is_bot": false,
"headline": "Bound the scrypt parallelization parameter p in the PKCS8/PKCS12 cost…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2b3a3994bd1e03071f37e1067c3f25688f60c34",
"body": null,
"is_bot": false,
"headline": "Guard CMSUtils.getAEADMacLength against malformed AEAD parameters",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bad0fa997af23389a76d88f4175877c34a6632e6",
"body": null,
"is_bot": false,
"headline": "Validate untrusted RSASSA-PSS parameters in BcRsaPssUtil.createSigner",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0802cf1a3f9fbbb3bf2e568a307d29cac2ef3db1",
"body": null,
"is_bot": false,
"headline": "Accept an empty passphrase on the JCE ARGON2 SecretKeyFactory path",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b9c104c002584d7c6dc3f0936aeac229d5ba4a8",
"body": "…hrase",
"is_bot": false,
"headline": "Reach the Argon2 s2kCalculator null-guard in PGPUtil.makeKeyFromPassP…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3464fe6af9f23c80506fa18ece3955fcb71f4960",
"body": "…ery candidate",
"is_bot": false,
"headline": "Fix KeyIdentifier.matches(List, KeyIdentifier, boolean) to examine ev…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca363deee793c78150f180d6d1828c9d713b91a8",
"body": "…rs, relates to github #2356.",
"is_bot": false,
"headline": "Stop bundling org.bouncycastle.asn1.iana into the Ant-built bcutil ja…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f09046951f4b5ed90a649785a9cacdadcda95f2d",
"body": "IANAObjectIdentifiers was consolidated to a single home in core (shipped in\nbcprov) in 1.85 (github #2176), but ant/bc+-build.xml's build-util target still\ncopied org/bouncycastle/asn1/iana/** into bcutil, so the Ant distributions\n(bcutil-jdk15to18, bcutil-jdk14) duplicated the class already present\n[…]\nblicly by core, and no\nutil class references it, so dropping the include removes the duplicate while\nleaving the class in bcprov. The Gradle jdk18on jars were already correct.\nRelates to github #2356.",
"is_bot": false,
"headline": "Stop bundling org.bouncycastle.asn1.iana into the Ant-built bcutil jars",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T00:57:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fa70011dbc4ecc4225d9f341579adb99e4aa1ae5",
"body": "…erage for overlaid behaviour, in docs/claude/architecture.md",
"is_bot": false,
"headline": "Document checking for MR overlays and adding JVM-specific (testN) cov…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T00:51:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1f64e77ff6e3f26e9a2c8a527f60079dbb39990",
"body": "…i-release overlays and normalise OpenSSH KeyFactory error handling\n\nThe edec KeyFactorySpi jdk1.11/jdk1.15 overlays had drifted from base on the\nOpenSSH private-key path: they used the no-passphrase parsePrivateKeyBlob\noverload (so passphrase-encrypted openssh-key-v1 Ed25519 keys failed on JDK 11+)\n[…]\ned. Adds OpenSSHKeyFactoryMRTest under src/test/jdk1.11 and jdk1.15\n(wired into AllTests11/AllTests15) so test11/test15 run the OpenSSH key specs\nagainst the multi-release jar and catch overlay drift.",
"is_bot": false,
"headline": "Sync the Ed25519 KeyFactorySpi OpenSSH path across the JDK 11/15 mult…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T00:51:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58cc1fdb27902d6bb35b3f4bf218469e68ba6ce8",
"body": null,
"is_bot": false,
"headline": "updated section numbers, added 1.86",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:41:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7572561af457c877992bc484be1e2c9ac518d5fa",
"body": "…-SNAPSHOT (release.suffix/version 1.85.99), and the BC and BCPQC provider info strings to v1.86-SNAPSHOT with provider version 1.8599 across the base, jdk1.1 and jdk1.4 copies",
"is_bot": false,
"headline": "Bump versions for the 1.86 development cycle: gradle/bc-build to 1.86…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:35:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb8cfe7959913ef5b997974f664673ee9ce19ba7",
"body": "…overlay resync (partial: the provider does not yet build clean)\n\nReviving the long-rotted jdk1.3 legacy build. A genuine 32-bit Sun JDK 1.3.1 no\nlonger runs on a modern host, so the build-jdk13-docker skill runs it inside a\ndebian/eol:etch (i386, glibc 2.3.6) container: glibc < 2.4 avoids the PTR_M\n[…]\ntale X509CertificateObject\noverlays for the new hasFriendlyName(); the symmetric AES/Camellia/SEED/Serpent/LEA\nunresolved symbol; and jdk1.4-style overlays (or excludes) for Falcon, SDitH and SQIsign.",
"is_bot": false,
"headline": "Add a Docker-based jdk1.3 (build1-3) build path and begin the jdk1.3 …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:33:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57fbd3c501f7a369f64eda311d6a709fc0bcae84",
"body": null,
"is_bot": false,
"headline": "Set the 1.85 release date to 2026, July 12th in the release notes",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:13:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecee534efd1d617b1882a6eb9c0b5ae61fefe51e",
"body": "run_mtt.sh extracted the release version with `fgrep version`, an\nunanchored substring match. The debug-build comment added to\ngradle.properties in 10056f56b6 contains \"version\" (in <version>), so\nfgrep matched it too and $version became a two-line string, garbling\nevery -scan jar path and failing the CI module-dependency step with a\nspurious \"File not found: .../bcjmail-jdk18on-1.85\\n# A debug build...\".\nMatch only the line starting with version= instead.",
"is_bot": false,
"headline": "Anchor run_mtt.sh's gradle.properties version parse to the version= line",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-12T02:10:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f24982e4c606755888d260aa85589b378b2b144",
"body": "…Debug builds subsection under Building explaining that -Prelease.debug=true (or release.debug=true in gradle.properties) labels every module's jars/artifacts <module>-debug-jdk18on-<version> and compiles with debug symbols, with clean build / copyJars examples.",
"is_bot": false,
"headline": "Document the release.debug Gradle build property in README.md: add a …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T01:41:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d826de9c92a6a9dce78697e4cd5eb2d375d9165",
"body": "…Cipher (DSTU 7624 CCM), incorporating github PR #2350: init zero-extends a short nonce to the block size and processAssociatedText zero-pads a trailing partial AAD block instead of throwing \"padding not supported\". Corrects the PR's AAD MAC loop, whose bound byteIndex < authLen - assocOff double-su\n[…]\nassociated data; the bound is byteIndex < authLen. Adds DSTU7624Test cases locking the multi-block AAD MAC to its pre-PR value and round-tripping partial AAD and short nonces; relates to github #2350.",
"is_bot": false,
"headline": "Support variable-length associated data and short nonces in KCCMBlock…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T00:56:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10056f56b60bbe4fccac22aa8bf5b7a9732005b5",
"body": "… (or -debug-jdk15to18- on a Java <= 8 daemon) and compile with debug symbols when release.debug is true, mirroring the jdk14.xml / jdk15+.xml debug-label change: build.gradle reads release.debug (via -Prelease.debug or gradle.properties, default false) and prefixes the shared vmrange, so every module's jar archiveBaseName/appendix and Maven artifactId pick up the debug label, and options.debug follows the flag; default (release.debug=false) output is unchanged.",
"is_bot": false,
"headline": "Name the Gradle-build jars/artifacts <module>-debug-jdk18on-<version>…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T00:26:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b73cf4da8b85ee4f32aface1ff62ff2af77a0c58",
"body": "… a re-initialised cipher does not carry the previous operation's associated data into the authentication tag, incorporating github PR #2349 (converting its tab indentation to spaces) and adding a DSTU7624Test regression case that a re-init matches a freshly constructed cipher; relates to github #2349.",
"is_bot": false,
"headline": "Reset the KGCM associated-text accumulator in KGCMBlockCipher.init so…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T00:26:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b43e928214ac4670b1b2ae8fb8ed0212e0a9568",
"body": "… the public X509Certificate type, not cert.getClass(): the BC cert impl (X509CertificateImpl/X509CertificateObject) is package-private, so a Method obtained from the runtime class failed invoke() with IllegalAccessException and broke cert.test.AllTests testSimpleTests after the jdk15to18 reflective-call change.",
"is_bot": false,
"headline": "Resolve CertTest's reflective verify(PublicKey,Provider) call through…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T21:52:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a7332a93870fc2a65fe092192b35d1957c45502",
"body": "… @Override/@FunctionalInterface source strip that jdk15+.xml lacked (ant/jdk14.xml preprocesses it away), exclude the tests using JDK 7/8-only APIs (PKIXRevocationChecker, Cipher.updateAAD, java.nio.file.Files, JSSE SNI/ExtendedSSLSession, PipedInputStream(,int), cert.plants generics) with matching\n[…]\nAllTests / jce RegressionTest overlays, and route three guarded Java 8 test calls (CertTest verify(pub,Provider), operator GCMParameterSpec, BouncyCastleProviderTest String.join) through 1.5-safe code",
"is_bot": false,
"headline": "Restore the jdk15to18 Ant test build under genuine javac 1.5: add the…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T14:33:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e128162db6ced97073e067f6f80f72d6a5414f9e",
"body": "…t-build step reaches debug jars: the fixed 'bcprov-jdk15to18*.jar' / 'bcprov-ext-jdk15to18*.jar' globs did not match a release.debug build's 'bcprov-debug-jdk15to18-*.jar' names, so debug provider jars shipped without the JCA auto-registration file. Replaced the tar/mv/rm dance with a loop over 'bcprov*jdk15to18*.jar' (matches prov and ext, debug and non-debug) using jar uf -C prov/src/main/resources META-INF.",
"is_bot": false,
"headline": "Fix build1-5to1-8 so the META-INF/services/java.security.Provider pos…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T13:49:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f360f23bfab40c9c237615511aa10a50a256496f",
"body": "…ars left at the top level (e.g. bctest-*.jar) cannot be accidentally staged and committed.",
"is_bot": false,
"headline": "Ignore repository-root *.jar files (/*.jar) so stray build-artifact j…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T12:44:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 1693,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 52,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 1264,
"stars": 2670,
"watchers": 135,
"fork_history": {
"days": [
{
"date": "2015-06-02",
"count": 1
},
{
"date": "2015-06-08",
"count": 1
},
{
"date": "2015-06-16",
"count": 1
},
{
"date": "2015-06-23",
"count": 1
},
{
"date": "2015-06-24",
"count": 1
},
{
"date": "2015-07-17",
"count": 1
},
{
"date": "2015-07-20",
"count": 1
},
{
"date": "2015-07-28",
"count": 1
},
{
"date": "2015-08-01",
"count": 1
},
{
"date": "2015-08-10",
"count": 1
},
{
"date": "2015-08-14",
"count": 1
},
{
"date": "2015-08-19",
"count": 1
},
{
"date": "2015-08-27",
"count": 1
},
{
"date": "2015-09-01",
"count": 1
},
{
"date": "2015-09-03",
"count": 1
},
{
"date": "2015-09-17",
"count": 1
},
{
"date": "2015-10-18",
"count": 1
},
{
"date": "2015-10-19",
"count": 1
},
{
"date": "2015-10-20",
"count": 1
},
{
"date": "2015-10-22",
"count": 1
},
{
"date": "2015-11-05",
"count": 2
},
{
"date": "2015-11-20",
"count": 1
},
{
"date": "2015-12-01",
"count": 1
},
{
"date": "2015-12-05",
"count": 1
},
{
"date": "2015-12-14",
"count": 1
},
{
"date": "2015-12-27",
"count": 1
},
{
"date": "2015-12-28",
"count": 1
},
{
"date": "2016-01-04",
"count": 1
},
{
"date": "2016-01-22",
"count": 1
},
{
"date": "2016-02-08",
"count": 1
},
{
"date": "2016-02-10",
"count": 1
},
{
"date": "2016-02-16",
"count": 1
},
{
"date": "2016-02-22",
"count": 1
},
{
"date": "2016-02-26",
"count": 1
},
{
"date": "2016-03-06",
"count": 1
},
{
"date": "2016-03-22",
"count": 2
},
{
"date": "2016-03-23",
"count": 1
},
{
"date": "2016-03-28",
"count": 1
},
{
"date": "2016-03-31",
"count": 1
},
{
"date": "2016-04-11",
"count": 1
},
{
"date": "2016-04-16",
"count": 1
},
{
"date": "2016-04-19",
"count": 1
},
{
"date": "2016-04-22",
"count": 1
},
{
"date": "2016-05-03",
"count": 1
},
{
"date": "2016-05-09",
"count": 1
},
{
"date": "2016-05-10",
"count": 2
},
{
"date": "2016-05-11",
"count": 1
},
{
"date": "2016-05-14",
"count": 1
},
{
"date": "2016-05-20",
"count": 1
},
{
"date": "2016-05-25",
"count": 1
},
{
"date": "2016-06-19",
"count": 1
},
{
"date": "2016-06-20",
"count": 1
},
{
"date": "2016-06-29",
"count": 1
},
{
"date": "2016-07-05",
"count": 1
},
{
"date": "2016-07-08",
"count": 1
},
{
"date": "2016-07-11",
"count": 1
},
{
"date": "2016-07-12",
"count": 1
},
{
"date": "2016-07-21",
"count": 1
},
{
"date": "2016-07-28",
"count": 1
},
{
"date": "2016-07-30",
"count": 1
},
{
"date": "2016-08-09",
"count": 1
},
{
"date": "2016-08-12",
"count": 1
},
{
"date": "2016-08-14",
"count": 1
},
{
"date": "2016-08-21",
"count": 1
},
{
"date": "2016-09-05",
"count": 1
},
{
"date": "2016-09-19",
"count": 1
},
{
"date": "2016-10-03",
"count": 1
},
{
"date": "2016-10-06",
"count": 1
},
{
"date": "2016-10-11",
"count": 1
},
{
"date": "2016-10-14",
"count": 2
},
{
"date": "2016-10-17",
"count": 2
},
{
"date": "2016-11-04",
"count": 1
},
{
"date": "2016-11-09",
"count": 1
},
{
"date": "2016-11-13",
"count": 1
},
{
"date": "2016-11-14",
"count": 2
},
{
"date": "2016-11-15",
"count": 1
},
{
"date": "2016-11-20",
"count": 1
},
{
"date": "2016-12-20",
"count": 1
},
{
"date": "2016-12-29",
"count": 1
},
{
"date": "2017-01-03",
"count": 1
},
{
"date": "2017-01-05",
"count": 1
},
{
"date": "2017-01-17",
"count": 1
},
{
"date": "2017-01-20",
"count": 1
},
{
"date": "2017-01-23",
"count": 1
},
{
"date": "2017-02-02",
"count": 1
},
{
"date": "2017-02-03",
"count": 2
},
{
"date": "2017-02-09",
"count": 1
},
{
"date": "2017-02-15",
"count": 1
},
{
"date": "2017-02-17",
"count": 2
},
{
"date": "2017-03-10",
"count": 1
},
{
"date": "2017-03-13",
"count": 2
},
{
"date": "2017-03-23",
"count": 2
},
{
"date": "2017-03-24",
"count": 1
},
{
"date": "2017-03-26",
"count": 1
},
{
"date": "2017-03-31",
"count": 1
},
{
"date": "2017-04-04",
"count": 1
},
{
"date": "2017-04-06",
"count": 1
},
{
"date": "2017-04-07",
"count": 1
},
{
"date": "2017-04-12",
"count": 1
},
{
"date": "2017-04-19",
"count": 1
},
{
"date": "2017-04-24",
"count": 1
},
{
"date": "2017-04-27",
"count": 1
},
{
"date": "2017-05-04",
"count": 1
},
{
"date": "2017-05-19",
"count": 1
},
{
"date": "2017-05-24",
"count": 1
},
{
"date": "2017-06-01",
"count": 1
},
{
"date": "2017-06-02",
"count": 1
},
{
"date": "2017-06-06",
"count": 1
},
{
"date": "2017-06-07",
"count": 2
},
{
"date": "2017-06-10",
"count": 1
},
{
"date": "2017-06-16",
"count": 1
},
{
"date": "2017-06-20",
"count": 2
},
{
"date": "2017-07-03",
"count": 1
},
{
"date": "2017-07-06",
"count": 2
},
{
"date": "2017-07-10",
"count": 1
},
{
"date": "2017-07-13",
"count": 1
},
{
"date": "2017-07-27",
"count": 2
},
{
"date": "2017-08-03",
"count": 1
},
{
"date": "2017-08-07",
"count": 1
},
{
"date": "2017-08-10",
"count": 1
},
{
"date": "2017-08-21",
"count": 1
},
{
"date": "2017-08-25",
"count": 1
},
{
"date": "2017-08-28",
"count": 2
},
{
"date": "2017-09-07",
"count": 1
},
{
"date": "2017-09-17",
"count": 1
},
{
"date": "2017-09-20",
"count": 1
},
{
"date": "2017-09-21",
"count": 1
},
{
"date": "2017-09-27",
"count": 1
},
{
"date": "2017-09-28",
"count": 1
},
{
"date": "2017-09-29",
"count": 1
},
{
"date": "2017-10-10",
"count": 1
},
{
"date": "2017-10-11",
"count": 1
},
{
"date": "2017-10-16",
"count": 2
},
{
"date": "2017-10-18",
"count": 1
},
{
"date": "2017-10-19",
"count": 1
},
{
"date": "2017-10-23",
"count": 2
},
{
"date": "2017-10-27",
"count": 1
},
{
"date": "2017-10-31",
"count": 1
},
{
"date": "2017-11-09",
"count": 1
},
{
"date": "2017-11-10",
"count": 1
},
{
"date": "2017-11-13",
"count": 1
},
{
"date": "2017-11-16",
"count": 1
},
{
"date": "2017-11-21",
"count": 1
},
{
"date": "2017-11-29",
"count": 1
},
{
"date": "2017-11-30",
"count": 2
},
{
"date": "2017-12-02",
"count": 1
},
{
"date": "2017-12-07",
"count": 1
},
{
"date": "2017-12-11",
"count": 1
},
{
"date": "2017-12-12",
"count": 1
},
{
"date": "2017-12-13",
"count": 1
},
{
"date": "2017-12-18",
"count": 1
},
{
"date": "2017-12-20",
"count": 1
},
{
"date": "2017-12-22",
"count": 2
},
{
"date": "2017-12-27",
"count": 3
},
{
"date": "2017-12-28",
"count": 1
},
{
"date": "2018-01-02",
"count": 1
},
{
"date": "2018-01-03",
"count": 3
},
{
"date": "2018-01-07",
"count": 1
},
{
"date": "2018-01-10",
"count": 1
},
{
"date": "2018-01-14",
"count": 1
},
{
"date": "2018-01-17",
"count": 1
},
{
"date": "2018-01-18",
"count": 1
},
{
"date": "2018-01-19",
"count": 1
},
{
"date": "2018-01-26",
"count": 1
},
{
"date": "2018-01-31",
"count": 1
},
{
"date": "2018-02-01",
"count": 1
},
{
"date": "2018-02-05",
"count": 1
},
{
"date": "2018-02-07",
"count": 1
},
{
"date": "2018-02-08",
"count": 1
},
{
"date": "2018-02-13",
"count": 2
},
{
"date": "2018-02-14",
"count": 1
},
{
"date": "2018-02-22",
"count": 1
},
{
"date": "2018-02-24",
"count": 1
},
{
"date": "2018-02-26",
"count": 1
},
{
"date": "2018-03-05",
"count": 1
},
{
"date": "2018-03-07",
"count": 1
},
{
"date": "2018-03-19",
"count": 1
},
{
"date": "2018-03-28",
"count": 1
},
{
"date": "2018-04-05",
"count": 1
},
{
"date": "2018-04-23",
"count": 1
},
{
"date": "2018-04-26",
"count": 1
},
{
"date": "2018-05-01",
"count": 1
},
{
"date": "2018-05-02",
"count": 1
},
{
"date": "2018-05-07",
"count": 2
},
{
"date": "2018-05-12",
"count": 1
},
{
"date": "2018-05-15",
"count": 1
},
{
"date": "2018-05-16",
"count": 1
},
{
"date": "2018-05-18",
"count": 1
},
{
"date": "2018-05-27",
"count": 1
},
{
"date": "2018-05-29",
"count": 1
},
{
"date": "2018-06-05",
"count": 1
},
{
"date": "2018-06-06",
"count": 1
},
{
"date": "2018-06-14",
"count": 1
},
{
"date": "2018-06-15",
"count": 2
},
{
"date": "2018-06-20",
"count": 1
},
{
"date": "2018-06-21",
"count": 1
},
{
"date": "2018-06-26",
"count": 1
},
{
"date": "2018-07-03",
"count": 1
},
{
"date": "2018-07-04",
"count": 1
},
{
"date": "2018-07-06",
"count": 1
},
{
"date": "2018-07-13",
"count": 1
},
{
"date": "2018-07-17",
"count": 1
},
{
"date": "2018-07-24",
"count": 1
},
{
"date": "2018-07-25",
"count": 2
},
{
"date": "2018-08-01",
"count": 1
},
{
"date": "2018-08-02",
"count": 1
},
{
"date": "2018-08-05",
"count": 1
},
{
"date": "2018-08-06",
"count": 1
},
{
"date": "2018-08-07",
"count": 1
},
{
"date": "2018-08-10",
"count": 1
},
{
"date": "2018-08-13",
"count": 2
},
{
"date": "2018-08-17",
"count": 1
},
{
"date": "2018-08-29",
"count": 1
},
{
"date": "2018-08-31",
"count": 2
},
{
"date": "2018-09-05",
"count": 1
},
{
"date": "2018-09-07",
"count": 1
},
{
"date": "2018-09-22",
"count": 1
},
{
"date": "2018-10-02",
"count": 1
},
{
"date": "2018-10-03",
"count": 1
},
{
"date": "2018-10-05",
"count": 1
},
{
"date": "2018-10-08",
"count": 2
},
{
"date": "2018-10-10",
"count": 1
},
{
"date": "2018-10-16",
"count": 1
},
{
"date": "2018-10-17",
"count": 1
},
{
"date": "2018-10-24",
"count": 1
},
{
"date": "2018-10-25",
"count": 1
},
{
"date": "2018-11-01",
"count": 1
},
{
"date": "2018-11-08",
"count": 1
},
{
"date": "2018-11-13",
"count": 1
},
{
"date": "2018-11-17",
"count": 1
},
{
"date": "2018-11-18",
"count": 1
},
{
"date": "2018-11-26",
"count": 1
},
{
"date": "2018-12-03",
"count": 1
},
{
"date": "2018-12-06",
"count": 2
},
{
"date": "2018-12-11",
"count": 1
},
{
"date": "2019-01-03",
"count": 1
},
{
"date": "2019-01-04",
"count": 1
},
{
"date": "2019-01-06",
"count": 1
},
{
"date": "2019-01-18",
"count": 1
},
{
"date": "2019-01-29",
"count": 1
},
{
"date": "2019-01-30",
"count": 2
},
{
"date": "2019-02-06",
"count": 2
},
{
"date": "2019-02-09",
"count": 1
},
{
"date": "2019-02-10",
"count": 1
},
{
"date": "2019-02-11",
"count": 1
},
{
"date": "2019-02-13",
"count": 1
},
{
"date": "2019-02-14",
"count": 1
},
{
"date": "2019-02-21",
"count": 1
},
{
"date": "2019-02-27",
"count": 1
},
{
"date": "2019-03-01",
"count": 1
},
{
"date": "2019-03-05",
"count": 1
},
{
"date": "2019-03-07",
"count": 1
},
{
"date": "2019-03-08",
"count": 1
},
{
"date": "2019-03-11",
"count": 1
},
{
"date": "2019-03-28",
"count": 1
},
{
"date": "2019-04-01",
"count": 1
},
{
"date": "2019-04-03",
"count": 1
},
{
"date": "2019-04-06",
"count": 1
},
{
"date": "2019-04-08",
"count": 2
},
{
"date": "2019-04-11",
"count": 1
},
{
"date": "2019-04-14",
"count": 1
},
{
"date": "2019-04-15",
"count": 1
},
{
"date": "2019-04-17",
"count": 1
},
{
"date": "2019-04-18",
"count": 1
},
{
"date": "2019-04-23",
"count": 2
},
{
"date": "2019-04-25",
"count": 1
},
{
"date": "2019-04-26",
"count": 1
},
{
"date": "2019-04-28",
"count": 1
},
{
"date": "2019-04-29",
"count": 2
},
{
"date": "2019-05-04",
"count": 1
},
{
"date": "2019-05-06",
"count": 1
},
{
"date": "2019-05-09",
"count": 1
},
{
"date": "2019-05-10",
"count": 1
},
{
"date": "2019-05-17",
"count": 2
},
{
"date": "2019-05-20",
"count": 1
},
{
"date": "2019-05-26",
"count": 1
},
{
"date": "2019-05-28",
"count": 3
},
{
"date": "2019-05-29",
"count": 1
},
{
"date": "2019-06-05",
"count": 1
},
{
"date": "2019-06-08",
"count": 1
},
{
"date": "2019-06-11",
"count": 1
},
{
"date": "2019-06-13",
"count": 1
},
{
"date": "2019-06-14",
"count": 1
},
{
"date": "2019-06-18",
"count": 1
},
{
"date": "2019-06-19",
"count": 1
},
{
"date": "2019-06-20",
"count": 1
},
{
"date": "2019-06-21",
"count": 1
},
{
"date": "2019-06-24",
"count": 2
},
{
"date": "2019-06-26",
"count": 1
},
{
"date": "2019-06-28",
"count": 1
},
{
"date": "2019-06-30",
"count": 1
},
{
"date": "2019-07-02",
"count": 1
},
{
"date": "2019-07-03",
"count": 3
},
{
"date": "2019-07-04",
"count": 1
},
{
"date": "2019-07-09",
"count": 1
},
{
"date": "2019-07-10",
"count": 2
},
{
"date": "2019-07-22",
"count": 1
},
{
"date": "2019-07-23",
"count": 1
},
{
"date": "2019-07-26",
"count": 1
},
{
"date": "2019-07-29",
"count": 1
},
{
"date": "2019-08-01",
"count": 1
},
{
"date": "2019-08-02",
"count": 1
},
{
"date": "2019-08-03",
"count": 1
},
{
"date": "2019-08-05",
"count": 1
},
{
"date": "2019-08-11",
"count": 1
},
{
"date": "2019-08-17",
"count": 1
},
{
"date": "2019-08-20",
"count": 1
},
{
"date": "2019-08-22",
"count": 1
},
{
"date": "2019-08-27",
"count": 1
},
{
"date": "2019-08-28",
"count": 1
},
{
"date": "2019-09-11",
"count": 1
},
{
"date": "2019-09-12",
"count": 1
},
{
"date": "2019-09-16",
"count": 1
},
{
"date": "2019-09-19",
"count": 1
},
{
"date": "2019-09-22",
"count": 1
},
{
"date": "2019-09-27",
"count": 1
},
{
"date": "2019-10-03",
"count": 1
},
{
"date": "2019-10-09",
"count": 1
},
{
"date": "2019-10-14",
"count": 1
},
{
"date": "2019-10-17",
"count": 2
},
{
"date": "2019-10-19",
"count": 1
},
{
"date": "2019-10-23",
"count": 1
},
{
"date": "2019-10-28",
"count": 1
},
{
"date": "2019-11-02",
"count": 1
},
{
"date": "2019-11-04",
"count": 1
},
{
"date": "2019-11-05",
"count": 1
},
{
"date": "2019-11-11",
"count": 2
},
{
"date": "2019-11-15",
"count": 1
},
{
"date": "2019-11-20",
"count": 1
},
{
"date": "2019-11-21",
"count": 1
},
{
"date": "2019-11-26",
"count": 1
},
{
"date": "2019-11-28",
"count": 2
},
{
"date": "2019-11-29",
"count": 2
},
{
"date": "2019-12-05",
"count": 2
},
{
"date": "2019-12-10",
"count": 2
},
{
"date": "2019-12-12",
"count": 1
},
{
"date": "2019-12-13",
"count": 1
},
{
"date": "2019-12-17",
"count": 1
},
{
"date": "2019-12-19",
"count": 1
},
{
"date": "2019-12-20",
"count": 1
},
{
"date": "2019-12-24",
"count": 1
},
{
"date": "2019-12-27",
"count": 1
},
{
"date": "2019-12-28",
"count": 1
},
{
"date": "2020-01-06",
"count": 1
},
{
"date": "2020-01-13",
"count": 2
},
{
"date": "2020-01-16",
"count": 2
},
{
"date": "2020-01-17",
"count": 1
},
{
"date": "2020-01-20",
"count": 2
},
{
"date": "2020-01-23",
"count": 1
},
{
"date": "2020-01-24",
"count": 1
},
{
"date": "2020-01-30",
"count": 1
},
{
"date": "2020-02-05",
"count": 1
},
{
"date": "2020-02-08",
"count": 1
},
{
"date": "2020-02-09",
"count": 1
},
{
"date": "2020-02-11",
"count": 1
},
{
"date": "2020-02-12",
"count": 1
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-02-22",
"count": 1
},
{
"date": "2020-02-25",
"count": 1
},
{
"date": "2020-03-04",
"count": 2
},
{
"date": "2020-03-05",
"count": 1
},
{
"date": "2020-03-06",
"count": 1
},
{
"date": "2020-03-16",
"count": 3
},
{
"date": "2020-03-18",
"count": 1
},
{
"date": "2020-03-19",
"count": 2
},
{
"date": "2020-03-26",
"count": 1
},
{
"date": "2020-04-02",
"count": 1
},
{
"date": "2020-04-15",
"count": 1
},
{
"date": "2020-04-20",
"count": 3
},
{
"date": "2020-04-21",
"count": 1
},
{
"date": "2020-04-22",
"count": 1
},
{
"date": "2020-05-06",
"count": 1
},
{
"date": "2020-05-07",
"count": 1
},
{
"date": "2020-05-12",
"count": 1
},
{
"date": "2020-05-14",
"count": 1
},
{
"date": "2020-05-18",
"count": 1
},
{
"date": "2020-05-22",
"count": 1
},
{
"date": "2020-05-26",
"count": 2
},
{
"date": "2020-06-01",
"count": 1
},
{
"date": "2020-06-09",
"count": 1
},
{
"date": "2020-06-15",
"count": 1
},
{
"date": "2020-06-16",
"count": 1
},
{
"date": "2020-06-17",
"count": 1
},
{
"date": "2020-06-22",
"count": 1
},
{
"date": "2020-06-23",
"count": 1
},
{
"date": "2020-06-30",
"count": 2
},
{
"date": "2020-07-08",
"count": 1
},
{
"date": "2020-07-16",
"count": 1
},
{
"date": "2020-07-17",
"count": 1
},
{
"date": "2020-07-18",
"count": 1
},
{
"date": "2020-07-19",
"count": 1
},
{
"date": "2020-07-21",
"count": 1
},
{
"date": "2020-07-23",
"count": 1
},
{
"date": "2020-07-26",
"count": 1
},
{
"date": "2020-07-27",
"count": 1
},
{
"date": "2020-07-29",
"count": 2
},
{
"date": "2020-07-31",
"count": 1
},
{
"date": "2020-08-06",
"count": 1
},
{
"date": "2020-08-12",
"count": 1
},
{
"date": "2020-08-14",
"count": 1
},
{
"date": "2020-08-17",
"count": 1
},
{
"date": "2020-08-21",
"count": 1
},
{
"date": "2020-08-22",
"count": 1
},
{
"date": "2020-08-28",
"count": 2
},
{
"date": "2020-09-01",
"count": 2
},
{
"date": "2020-09-03",
"count": 1
},
{
"date": "2020-09-09",
"count": 1
},
{
"date": "2020-09-10",
"count": 1
},
{
"date": "2020-09-15",
"count": 2
},
{
"date": "2020-09-28",
"count": 1
},
{
"date": "2020-10-02",
"count": 1
},
{
"date": "2020-10-04",
"count": 1
},
{
"date": "2020-10-12",
"count": 1
},
{
"date": "2020-10-13",
"count": 1
},
{
"date": "2020-10-17",
"count": 1
},
{
"date": "2020-10-19",
"count": 1
},
{
"date": "2020-10-20",
"count": 1
},
{
"date": "2020-10-21",
"count": 1
},
{
"date": "2020-10-22",
"count": 2
},
{
"date": "2020-10-23",
"count": 1
},
{
"date": "2020-10-27",
"count": 1
},
{
"date": "2020-10-29",
"count": 1
},
{
"date": "2020-11-10",
"count": 1
},
{
"date": "2020-11-12",
"count": 1
},
{
"date": "2020-11-21",
"count": 1
},
{
"date": "2020-12-03",
"count": 1
},
{
"date": "2020-12-13",
"count": 1
},
{
"date": "2020-12-15",
"count": 2
},
{
"date": "2020-12-17",
"count": 1
},
{
"date": "2021-01-04",
"count": 1
},
{
"date": "2021-01-13",
"count": 1
},
{
"date": "2021-01-18",
"count": 1
},
{
"date": "2021-01-19",
"count": 1
},
{
"date": "2021-01-20",
"count": 1
},
{
"date": "2021-01-25",
"count": 1
},
{
"date": "2021-02-09",
"count": 1
},
{
"date": "2021-02-10",
"count": 1
},
{
"date": "2021-02-12",
"count": 1
},
{
"date": "2021-02-15",
"count": 1
},
{
"date": "2021-02-22",
"count": 1
},
{
"date": "2021-02-25",
"count": 1
},
{
"date": "2021-03-01",
"count": 1
},
{
"date": "2021-03-02",
"count": 1
},
{
"date": "2021-03-04",
"count": 2
},
{
"date": "2021-03-08",
"count": 1
},
{
"date": "2021-03-09",
"count": 2
},
{
"date": "2021-03-10",
"count": 1
},
{
"date": "2021-03-15",
"count": 1
},
{
"date": "2021-03-23",
"count": 4
},
{
"date": "2021-03-31",
"count": 1
},
{
"date": "2021-04-03",
"count": 1
},
{
"date": "2021-04-07",
"count": 1
},
{
"date": "2021-04-08",
"count": 2
},
{
"date": "2021-04-09",
"count": 1
},
{
"date": "2021-04-12",
"count": 1
},
{
"date": "2021-04-15",
"count": 1
},
{
"date": "2021-04-22",
"count": 1
},
{
"date": "2021-04-23",
"count": 2
},
{
"date": "2021-04-25",
"count": 1
},
{
"date": "2021-05-01",
"count": 1
},
{
"date": "2021-05-02",
"count": 1
},
{
"date": "2021-05-04",
"count": 1
},
{
"date": "2021-05-07",
"count": 1
},
{
"date": "2021-05-14",
"count": 1
},
{
"date": "2021-05-17",
"count": 1
},
{
"date": "2021-05-18",
"count": 1
},
{
"date": "2021-05-20",
"count": 1
},
{
"date": "2021-05-22",
"count": 1
},
{
"date": "2021-05-27",
"count": 1
},
{
"date": "2021-06-03",
"count": 1
},
{
"date": "2021-06-07",
"count": 1
},
{
"date": "2021-06-11",
"count": 1
},
{
"date": "2021-06-14",
"count": 1
},
{
"date": "2021-06-17",
"count": 2
},
{
"date": "2021-07-07",
"count": 1
},
{
"date": "2021-07-08",
"count": 1
},
{
"date": "2021-07-09",
"count": 1
},
{
"date": "2021-07-11",
"count": 1
},
{
"date": "2021-07-13",
"count": 1
},
{
"date": "2021-07-26",
"count": 1
},
{
"date": "2021-07-28",
"count": 1
},
{
"date": "2021-07-29",
"count": 1
},
{
"date": "2021-08-02",
"count": 1
},
{
"date": "2021-08-06",
"count": 1
},
{
"date": "2021-08-10",
"count": 1
},
{
"date": "2021-08-11",
"count": 1
},
{
"date": "2021-08-16",
"count": 1
},
{
"date": "2021-08-19",
"count": 1
},
{
"date": "2021-08-25",
"count": 1
},
{
"date": "2021-08-27",
"count": 1
},
{
"date": "2021-09-02",
"count": 1
},
{
"date": "2021-09-05",
"count": 1
},
{
"date": "2021-09-07",
"count": 2
},
{
"date": "2021-09-23",
"count": 1
},
{
"date": "2021-09-29",
"count": 1
},
{
"date": "2021-10-06",
"count": 2
},
{
"date": "2021-10-08",
"count": 2
},
{
"date": "2021-10-13",
"count": 1
},
{
"date": "2021-10-16",
"count": 1
},
{
"date": "2021-10-20",
"count": 1
},
{
"date": "2021-10-24",
"count": 1
},
{
"date": "2021-10-26",
"count": 1
},
{
"date": "2021-10-27",
"count": 1
},
{
"date": "2021-11-02",
"count": 1
},
{
"date": "2021-11-09",
"count": 1
},
{
"date": "2021-11-10",
"count": 1
},
{
"date": "2021-11-11",
"count": 1
},
{
"date": "2021-11-15",
"count": 1
},
{
"date": "2021-11-25",
"count": 1
},
{
"date": "2021-11-26",
"count": 1
},
{
"date": "2021-12-11",
"count": 1
},
{
"date": "2021-12-19",
"count": 1
},
{
"date": "2021-12-22",
"count": 2
},
{
"date": "2021-12-23",
"count": 1
},
{
"date": "2021-12-28",
"count": 1
},
{
"date": "2022-01-03",
"count": 1
},
{
"date": "2022-01-11",
"count": 1
},
{
"date": "2022-01-12",
"count": 1
},
{
"date": "2022-01-17",
"count": 1
},
{
"date": "2022-01-18",
"count": 2
},
{
"date": "2022-01-20",
"count": 2
},
{
"date": "2022-01-21",
"count": 2
},
{
"date": "2022-01-23",
"count": 1
},
{
"date": "2022-01-24",
"count": 1
},
{
"date": "2022-01-27",
"count": 1
},
{
"date": "2022-02-03",
"count": 2
},
{
"date": "2022-02-08",
"count": 1
},
{
"date": "2022-02-11",
"count": 1
},
{
"date": "2022-02-23",
"count": 2
},
{
"date": "2022-02-24",
"count": 1
},
{
"date": "2022-03-20",
"count": 1
},
{
"date": "2022-03-22",
"count": 1
},
{
"date": "2022-03-23",
"count": 1
},
{
"date": "2022-03-28",
"count": 1
},
{
"date": "2022-03-30",
"count": 1
},
{
"date": "2022-03-31",
"count": 2
},
{
"date": "2022-04-01",
"count": 1
},
{
"date": "2022-04-03",
"count": 1
},
{
"date": "2022-04-06",
"count": 1
},
{
"date": "2022-04-07",
"count": 3
},
{
"date": "2022-04-11",
"count": 1
},
{
"date": "2022-04-13",
"count": 1
},
{
"date": "2022-04-16",
"count": 1
},
{
"date": "2022-04-23",
"count": 1
},
{
"date": "2022-04-24",
"count": 1
},
{
"date": "2022-04-28",
"count": 1
},
{
"date": "2022-05-06",
"count": 1
},
{
"date": "2022-05-09",
"count": 1
},
{
"date": "2022-05-11",
"count": 1
},
{
"date": "2022-05-20",
"count": 1
},
{
"date": "2022-05-22",
"count": 1
},
{
"date": "2022-05-23",
"count": 1
},
{
"date": "2022-05-26",
"count": 1
},
{
"date": "2022-06-01",
"count": 1
},
{
"date": "2022-06-14",
"count": 1
},
{
"date": "2022-06-15",
"count": 1
},
{
"date": "2022-06-16",
"count": 2
},
{
"date": "2022-06-22",
"count": 1
},
{
"date": "2022-06-23",
"count": 2
},
{
"date": "2022-06-25",
"count": 1
},
{
"date": "2022-06-30",
"count": 1
},
{
"date": "2022-07-01",
"count": 1
},
{
"date": "2022-07-07",
"count": 1
},
{
"date": "2022-07-21",
"count": 1
},
{
"date": "2022-07-23",
"count": 1
},
{
"date": "2022-07-26",
"count": 1
},
{
"date": "2022-08-01",
"count": 1
},
{
"date": "2022-08-11",
"count": 1
},
{
"date": "2022-08-16",
"count": 1
},
{
"date": "2022-08-19",
"count": 1
},
{
"date": "2022-08-31",
"count": 2
},
{
"date": "2022-09-01",
"count": 1
},
{
"date": "2022-09-11",
"count": 2
},
{
"date": "2022-09-27",
"count": 1
},
{
"date": "2022-09-30",
"count": 2
},
{
"date": "2022-10-04",
"count": 1
},
{
"date": "2022-10-07",
"count": 1
},
{
"date": "2022-10-10",
"count": 1
},
{
"date": "2022-10-14",
"count": 1
},
{
"date": "2022-10-17",
"count": 1
},
{
"date": "2022-10-18",
"count": 1
},
{
"date": "2022-10-19",
"count": 1
},
{
"date": "2022-10-21",
"count": 1
},
{
"date": "2022-10-22",
"count": 1
},
{
"date": "2022-11-10",
"count": 1
},
{
"date": "2022-11-15",
"count": 2
},
{
"date": "2022-11-20",
"count": 2
},
{
"date": "2022-11-21",
"count": 1
},
{
"date": "2022-11-25",
"count": 1
},
{
"date": "2022-11-30",
"count": 1
},
{
"date": "2022-12-01",
"count": 2
},
{
"date": "2022-12-02",
"count": 1
},
{
"date": "2022-12-06",
"count": 1
},
{
"date": "2022-12-14",
"count": 1
},
{
"date": "2022-12-15",
"count": 1
},
{
"date": "2022-12-16",
"count": 1
},
{
"date": "2022-12-27",
"count": 1
},
{
"date": "2023-01-04",
"count": 1
},
{
"date": "2023-01-18",
"count": 1
},
{
"date": "2023-01-28",
"count": 1
},
{
"date": "2023-01-30",
"count": 1
},
{
"date": "2023-02-01",
"count": 2
},
{
"date": "2023-02-04",
"count": 1
},
{
"date": "2023-02-16",
"count": 1
},
{
"date": "2023-02-20",
"count": 1
},
{
"date": "2023-02-21",
"count": 1
},
{
"date": "2023-03-07",
"count": 1
},
{
"date": "2023-03-08",
"count": 1
},
{
"date": "2023-03-24",
"count": 1
},
{
"date": "2023-03-26",
"count": 2
},
{
"date": "2023-04-04",
"count": 1
},
{
"date": "2023-04-05",
"count": 1
},
{
"date": "2023-04-13",
"count": 1
},
{
"date": "2023-04-14",
"count": 1
},
{
"date": "2023-04-20",
"count": 1
},
{
"date": "2023-04-21",
"count": 3
},
{
"date": "2023-04-26",
"count": 1
},
{
"date": "2023-05-06",
"count": 1
},
{
"date": "2023-05-24",
"count": 1
},
{
"date": "2023-05-26",
"count": 1
},
{
"date": "2023-05-31",
"count": 1
},
{
"date": "2023-06-01",
"count": 1
},
{
"date": "2023-06-04",
"count": 1
},
{
"date": "2023-06-07",
"count": 1
},
{
"date": "2023-06-10",
"count": 1
},
{
"date": "2023-06-20",
"count": 2
},
{
"date": "2023-06-22",
"count": 1
},
{
"date": "2023-06-26",
"count": 2
},
{
"date": "2023-06-29",
"count": 1
},
{
"date": "2023-07-16",
"count": 1
},
{
"date": "2023-07-19",
"count": 1
},
{
"date": "2023-07-20",
"count": 1
},
{
"date": "2023-07-25",
"count": 1
},
{
"date": "2023-07-26",
"count": 2
},
{
"date": "2023-08-01",
"count": 1
},
{
"date": "2023-08-15",
"count": 1
},
{
"date": "2023-08-16",
"count": 1
},
{
"date": "2023-08-24",
"count": 2
},
{
"date": "2023-08-28",
"count": 1
},
{
"date": "2023-09-01",
"count": 1
},
{
"date": "2023-09-17",
"count": 1
},
{
"date": "2023-09-18",
"count": 1
},
{
"date": "2023-09-20",
"count": 1
},
{
"date": "2023-09-27",
"count": 2
},
{
"date": "2023-10-09",
"count": 1
},
{
"date": "2023-10-12",
"count": 1
},
{
"date": "2023-10-19",
"count": 1
},
{
"date": "2023-10-30",
"count": 1
},
{
"date": "2023-10-31",
"count": 1
},
{
"date": "2023-11-02",
"count": 1
},
{
"date": "2023-11-19",
"count": 1
},
{
"date": "2023-11-29",
"count": 1
},
{
"date": "2023-12-01",
"count": 1
},
{
"date": "2023-12-03",
"count": 1
},
{
"date": "2023-12-08",
"count": 1
},
{
"date": "2023-12-09",
"count": 1
},
{
"date": "2023-12-11",
"count": 1
},
{
"date": "2023-12-12",
"count": 1
},
{
"date": "2023-12-19",
"count": 1
},
{
"date": "2024-01-09",
"count": 2
},
{
"date": "2024-01-11",
"count": 1
},
{
"date": "2024-01-20",
"count": 1
},
{
"date": "2024-02-03",
"count": 1
},
{
"date": "2024-02-07",
"count": 1
},
{
"date": "2024-02-08",
"count": 1
},
{
"date": "2024-02-10",
"count": 1
},
{
"date": "2024-02-15",
"count": 1
},
{
"date": "2024-02-24",
"count": 1
},
{
"date": "2024-02-26",
"count": 1
},
{
"date": "2024-02-27",
"count": 1
},
{
"date": "2024-03-01",
"count": 1
},
{
"date": "2024-03-14",
"count": 1
},
{
"date": "2024-03-18",
"count": 1
},
{
"date": "2024-03-20",
"count": 1
},
{
"date": "2024-03-25",
"count": 1
},
{
"date": "2024-03-27",
"count": 2
},
{
"date": "2024-03-28",
"count": 1
},
{
"date": "2024-04-01",
"count": 1
},
{
"date": "2024-04-02",
"count": 1
},
{
"date": "2024-04-05",
"count": 1
},
{
"date": "2024-04-06",
"count": 1
},
{
"date": "2024-04-08",
"count": 1
},
{
"date": "2024-04-09",
"count": 1
},
{
"date": "2024-04-10",
"count": 1
},
{
"date": "2024-04-11",
"count": 1
},
{
"date": "2024-05-02",
"count": 1
},
{
"date": "2024-05-06",
"count": 1
},
{
"date": "2024-05-15",
"count": 1
},
{
"date": "2024-05-20",
"count": 1
},
{
"date": "2024-05-25",
"count": 1
},
{
"date": "2024-06-05",
"count": 1
},
{
"date": "2024-06-07",
"count": 1
},
{
"date": "2024-06-12",
"count": 1
},
{
"date": "2024-06-14",
"count": 1
},
{
"date": "2024-06-15",
"count": 1
},
{
"date": "2024-06-16",
"count": 1
},
{
"date": "2024-06-17",
"count": 2
},
{
"date": "2024-06-21",
"count": 1
},
{
"date": "2024-06-28",
"count": 1
},
{
"date": "2024-06-30",
"count": 1
},
{
"date": "2024-07-11",
"count": 1
},
{
"date": "2024-07-17",
"count": 2
},
{
"date": "2024-07-21",
"count": 1
},
{
"date": "2024-07-26",
"count": 1
},
{
"date": "2024-07-27",
"count": 1
},
{
"date": "2024-07-31",
"count": 2
},
{
"date": "2024-08-01",
"count": 1
},
{
"date": "2024-08-07",
"count": 1
},
{
"date": "2024-08-12",
"count": 2
},
{
"date": "2024-08-14",
"count": 3
},
{
"date": "2024-08-16",
"count": 1
},
{
"date": "2024-08-19",
"count": 1
},
{
"date": "2024-08-26",
"count": 1
},
{
"date": "2024-08-27",
"count": 2
},
{
"date": "2024-09-04",
"count": 1
},
{
"date": "2024-09-09",
"count": 1
},
{
"date": "2024-09-13",
"count": 1
},
{
"date": "2024-09-16",
"count": 1
},
{
"date": "2024-09-17",
"count": 1
},
{
"date": "2024-09-20",
"count": 1
},
{
"date": "2024-09-23",
"count": 1
},
{
"date": "2024-09-26",
"count": 1
},
{
"date": "2024-09-27",
"count": 1
},
{
"date": "2024-10-04",
"count": 1
},
{
"date": "2024-10-09",
"count": 1
},
{
"date": "2024-10-11",
"count": 1
},
{
"date": "2024-10-16",
"count": 1
},
{
"date": "2024-10-19",
"count": 1
},
{
"date": "2024-10-24",
"count": 1
},
{
"date": "2024-10-28",
"count": 1
},
{
"date": "2024-10-30",
"count": 1
},
{
"date": "2024-11-01",
"count": 1
},
{
"date": "2024-11-03",
"count": 1
},
{
"date": "2024-11-04",
"count": 1
},
{
"date": "2024-11-13",
"count": 1
},
{
"date": "2024-11-17",
"count": 1
},
{
"date": "2024-11-20",
"count": 1
},
{
"date": "2024-12-01",
"count": 1
},
{
"date": "2024-12-07",
"count": 1
},
{
"date": "2024-12-09",
"count": 1
},
{
"date": "2024-12-20",
"count": 1
},
{
"date": "2025-01-02",
"count": 1
},
{
"date": "2025-01-03",
"count": 1
},
{
"date": "2025-01-08",
"count": 1
},
{
"date": "2025-01-15",
"count": 1
},
{
"date": "2025-01-30",
"count": 1
},
{
"date": "2025-01-31",
"count": 2
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-15",
"count": 1
},
{
"date": "2025-02-17",
"count": 1
},
{
"date": "2025-03-02",
"count": 1
},
{
"date": "2025-03-04",
"count": 1
},
{
"date": "2025-03-05",
"count": 1
},
{
"date": "2025-03-13",
"count": 2
},
{
"date": "2025-03-16",
"count": 1
},
{
"date": "2025-03-18",
"count": 1
},
{
"date": "2025-03-19",
"count": 1
},
{
"date": "2025-03-26",
"count": 1
},
{
"date": "2025-04-01",
"count": 1
},
{
"date": "2025-04-06",
"count": 2
},
{
"date": "2025-04-08",
"count": 2
},
{
"date": "2025-04-11",
"count": 1
},
{
"date": "2025-04-16",
"count": 1
},
{
"date": "2025-04-21",
"count": 1
},
{
"date": "2025-04-24",
"count": 1
},
{
"date": "2025-04-29",
"count": 1
},
{
"date": "2025-04-30",
"count": 1
},
{
"date": "2025-05-01",
"count": 1
},
{
"date": "2025-05-02",
"count": 1
},
{
"date": "2025-05-10",
"count": 1
},
{
"date": "2025-05-16",
"count": 1
},
{
"date": "2025-05-17",
"count": 1
},
{
"date": "2025-05-21",
"count": 1
},
{
"date": "2025-05-23",
"count": 1
},
{
"date": "2025-06-05",
"count": 1
},
{
"date": "2025-06-13",
"count": 1
},
{
"date": "2025-06-15",
"count": 1
},
{
"date": "2025-06-19",
"count": 1
},
{
"date": "2025-07-02",
"count": 1
},
{
"date": "2025-07-06",
"count": 1
},
{
"date": "2025-07-11",
"count": 1
},
{
"date": "2025-07-23",
"count": 1
},
{
"date": "2025-08-04",
"count": 1
},
{
"date": "2025-08-06",
"count": 2
},
{
"date": "2025-08-14",
"count": 1
},
{
"date": "2025-08-16",
"count": 1
},
{
"date": "2025-08-22",
"count": 2
},
{
"date": "2025-09-03",
"count": 1
},
{
"date": "2025-09-07",
"count": 1
},
{
"date": "2025-09-08",
"count": 1
},
{
"date": "2025-09-09",
"count": 1
},
{
"date": "2025-09-11",
"count": 1
},
{
"date": "2025-09-18",
"count": 1
},
{
"date": "2025-09-29",
"count": 1
},
{
"date": "2025-10-01",
"count": 1
},
{
"date": "2025-10-04",
"count": 1
},
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2025-10-10",
"count": 2
},
{
"date": "2025-10-13",
"count": 1
},
{
"date": "2025-10-14",
"count": 1
},
{
"date": "2025-10-16",
"count": 1
},
{
"date": "2025-10-23",
"count": 1
},
{
"date": "2025-11-12",
"count": 3
},
{
"date": "2025-11-13",
"count": 1
},
{
"date": "2025-11-19",
"count": 3
},
{
"date": "2025-11-25",
"count": 1
},
{
"date": "2025-11-27",
"count": 1
},
{
"date": "2025-11-30",
"count": 1
},
{
"date": "2025-12-03",
"count": 1
},
{
"date": "2025-12-05",
"count": 1
},
{
"date": "2025-12-08",
"count": 1
},
{
"date": "2025-12-09",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2025-12-15",
"count": 1
},
{
"date": "2025-12-22",
"count": 1
},
{
"date": "2025-12-25",
"count": 1
},
{
"date": "2025-12-29",
"count": 1
},
{
"date": "2026-01-02",
"count": 2
},
{
"date": "2026-01-05",
"count": 1
},
{
"date": "2026-01-10",
"count": 1
},
{
"date": "2026-01-16",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-01-23",
"count": 1
},
{
"date": "2026-01-27",
"count": 1
},
{
"date": "2026-01-29",
"count": 1
},
{
"date": "2026-01-30",
"count": 1
},
{
"date": "2026-02-03",
"count": 1
},
{
"date": "2026-02-04",
"count": 1
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-02-12",
"count": 1
},
{
"date": "2026-02-20",
"count": 1
},
{
"date": "2026-03-07",
"count": 1
},
{
"date": "2026-03-09",
"count": 1
},
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-16",
"count": 2
},
{
"date": "2026-03-26",
"count": 2
},
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-04-13",
"count": 2
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-04-29",
"count": 2
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-05-05",
"count": 3
},
{
"date": "2026-05-06",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-05",
"count": 1
},
{
"date": "2026-06-09",
"count": 2
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-17",
"count": 2
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-06-23",
"count": 2
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-06-25",
"count": 2
},
{
"date": "2026-06-28",
"count": 2
},
{
"date": "2026-06-30",
"count": 1
},
{
"date": "2026-07-01",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": false,
"collected": 1000,
"total_forks": 1264
},
"star_history": null,
"open_issues_and_prs": 95
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example",
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"mls/src/main/proto/mls_client.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"bom/build.gradle",
"build.gradle",
"core/build.gradle",
"jmail/build.gradle",
"mail/build.gradle",
"misc/build.gradle",
"mls/build.gradle",
"pg/build.gradle",
"pkix/build.gradle",
"prov/build.gradle",
"test/build.gradle",
"tls/build.gradle",
"util/build.gradle"
],
"largest_source_bytes": 1866290,
"source_files_sampled": 7893,
"oversized_source_files": 101,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1407
},
"dependencies": {
"manifests": [
"bom/build.gradle",
"build.gradle",
"core/build.gradle",
"jmail/build.gradle",
"mail/build.gradle",
"misc/build.gradle",
"mls/build.gradle",
"pg/build.gradle",
"pkix/build.gradle",
"prov/build.gradle",
"test/build.gradle",
"tls/build.gradle",
"util/build.gradle"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 31,
"merged_prs": 43,
"open_issues": 64,
"closed_ratio": 0.96,
"closed_issues": 1548,
"closed_unmerged_prs": 518
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "dghgit",
"commits": 9626,
"avatar_url": "https://avatars.githubusercontent.com/u/10509846?v=4"
},
{
"type": "User",
"login": "peterdettman",
"commits": 5852,
"avatar_url": "https://avatars.githubusercontent.com/u/3423981?v=4"
},
{
"type": "User",
"login": "mwcw",
"commits": 448,
"avatar_url": "https://avatars.githubusercontent.com/u/30947532?v=4"
},
{
"type": "User",
"login": "vanitasvitae",
"commits": 337,
"avatar_url": "https://avatars.githubusercontent.com/u/7854206?v=4"
},
{
"type": "User",
"login": "ligefeiBouncycastle",
"commits": 110,
"avatar_url": "https://avatars.githubusercontent.com/u/143379185?v=4"
},
{
"type": "User",
"login": "meganwoods",
"commits": 76,
"avatar_url": "https://avatars.githubusercontent.com/u/4627862?v=4"
},
{
"type": "User",
"login": "timw",
"commits": 46,
"avatar_url": "https://avatars.githubusercontent.com/u/670828?v=4"
},
{
"type": "User",
"login": "MikeSafonov",
"commits": 42,
"avatar_url": "https://avatars.githubusercontent.com/u/11156850?v=4"
},
{
"type": "User",
"login": "tonywasher",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/35172668?v=4"
},
{
"type": "User",
"login": "brandonweeks",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/15869?v=4"
}
],
"contributors_sampled": 100,
"top_contributor_share": 0.568
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"codeql.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 0,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 34 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected: CodeQL",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "fdc5011e1d54cb5f9687ceda5dbeefea13528bdb",
"ran_at": "2026-07-25T09:59:31Z",
"aggregate_score": 6.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T01:18:16Z",
"oldest_open_prs": [
{
"number": 126,
"created_at": "2015-12-23T20:56:29Z",
"last_comment_at": "2017-11-07T08:58:35Z",
"last_comment_author": "worsaae"
},
{
"number": 141,
"created_at": "2016-04-22T14:37:07Z",
"last_comment_at": "2017-12-22T10:45:12Z",
"last_comment_author": "marvin-enthus"
},
{
"number": 261,
"created_at": "2017-11-28T05:47:41Z",
"last_comment_at": "2017-12-13T05:44:48Z",
"last_comment_author": "inthirakumaaran"
},
{
"number": 336,
"created_at": "2018-05-02T13:34:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 590,
"created_at": "2019-09-12T10:42:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 815,
"created_at": "2020-10-22T13:33:57Z",
"last_comment_at": "2020-10-22T13:34:57Z",
"last_comment_author": "artem-smotrakov"
},
{
"number": 883,
"created_at": "2021-02-15T10:44:25Z",
"last_comment_at": "2023-02-11T14:48:59Z",
"last_comment_author": "hannesa2"
},
{
"number": 885,
"created_at": "2021-02-15T11:18:42Z",
"last_comment_at": "2025-04-12T12:58:45Z",
"last_comment_author": "dghgit"
},
{
"number": 908,
"created_at": "2021-03-16T10:03:04Z",
"last_comment_at": "2023-05-19T03:14:43Z",
"last_comment_author": "jsuper"
},
{
"number": 1517,
"created_at": "2023-10-25T22:10:04Z",
"last_comment_at": "2023-10-27T07:02:36Z",
"last_comment_author": "peterdettman"
},
{
"number": 1710,
"created_at": "2024-06-17T15:17:40Z",
"last_comment_at": "2024-06-19T13:33:10Z",
"last_comment_author": "markus-jung-vivavis"
},
{
"number": 1719,
"created_at": "2024-06-21T12:40:50Z",
"last_comment_at": "2024-06-21T12:41:48Z",
"last_comment_author": "vanitasvitae"
},
{
"number": 1740,
"created_at": "2024-07-15T19:18:40Z",
"last_comment_at": "2024-07-16T09:33:02Z",
"last_comment_author": "vladhuma"
},
{
"number": 1748,
"created_at": "2024-07-18T14:37:29Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1828,
"created_at": "2024-09-06T13:13:29Z",
"last_comment_at": "2024-09-10T14:12:42Z",
"last_comment_author": "vanitasvitae"
},
{
"number": 1996,
"created_at": "2025-02-14T05:37:10Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2026,
"created_at": "2025-03-14T00:01:06Z",
"last_comment_at": "2025-09-14T02:51:21Z",
"last_comment_author": "dghgit"
},
{
"number": 2043,
"created_at": "2025-03-27T20:01:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2107,
"created_at": "2025-06-16T22:12:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2108,
"created_at": "2025-06-16T22:15:24Z",
"last_comment_at": "2025-08-12T13:37:40Z",
"last_comment_author": "winfriedgerlach"
}
],
"last_merged_pr_at": "2025-03-21T04:34:25Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 123,
"created_at": "2015-12-14T08:52:49Z",
"last_comment_at": "2018-02-14T10:01:52Z",
"last_comment_author": "ryhaberecht"
},
{
"number": 250,
"created_at": "2017-11-09T08:14:20Z",
"last_comment_at": "2018-01-10T08:52:40Z",
"last_comment_author": "kasunbg"
},
{
"number": 279,
"created_at": "2018-01-17T16:04:06Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 443,
"created_at": "2018-12-17T11:10:11Z",
"last_comment_at": "2025-08-22T18:33:47Z",
"last_comment_author": "makkarpov"
},
{
"number": 480,
"created_at": "2019-03-15T18:37:42Z",
"last_comment_at": "2019-09-11T07:47:48Z",
"last_comment_author": "lavcraft"
},
{
"number": 596,
"created_at": "2019-09-24T08:46:06Z",
"last_comment_at": "2019-09-30T14:46:58Z",
"last_comment_author": "suraj0208"
},
{
"number": 654,
"created_at": "2020-02-06T22:13:55Z",
"last_comment_at": "2020-04-05T15:47:42Z",
"last_comment_author": "kimmerin"
},
{
"number": 731,
"created_at": "2020-06-18T05:47:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 742,
"created_at": "2020-06-30T08:47:49Z",
"last_comment_at": "2025-07-18T01:36:40Z",
"last_comment_author": "wlsdn93"
},
{
"number": 934,
"created_at": "2021-04-20T05:23:02Z",
"last_comment_at": "2022-05-10T01:06:01Z",
"last_comment_author": "adolfo-trocoli"
},
{
"number": 946,
"created_at": "2021-05-07T11:37:03Z",
"last_comment_at": "2024-11-05T12:57:59Z",
"last_comment_author": "aozmen121"
},
{
"number": 1050,
"created_at": "2021-10-26T09:21:59Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1135,
"created_at": "2022-03-30T13:37:30Z",
"last_comment_at": "2022-06-14T10:28:17Z",
"last_comment_author": "emilmuller"
},
{
"number": 1157,
"created_at": "2022-04-25T08:59:28Z",
"last_comment_at": "2022-04-26T10:29:58Z",
"last_comment_author": "peterdettman"
},
{
"number": 1165,
"created_at": "2022-05-13T08:20:31Z",
"last_comment_at": "2024-12-12T16:15:49Z",
"last_comment_author": "winfriedgerlach"
},
{
"number": 1199,
"created_at": "2022-07-30T06:59:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1289,
"created_at": "2022-11-29T19:56:04Z",
"last_comment_at": "2023-05-20T06:36:19Z",
"last_comment_author": "dghgit"
},
{
"number": 1347,
"created_at": "2023-03-06T15:07:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1440,
"created_at": "2023-06-29T12:55:19Z",
"last_comment_at": "2023-07-03T11:54:27Z",
"last_comment_author": "max-m-s"
},
{
"number": 1468,
"created_at": "2023-08-07T18:22:36Z",
"last_comment_at": "2024-09-18T17:18:02Z",
"last_comment_author": "Horcrux7"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/bcgit/bc-java",
"host": "github.com",
"name": "bc-java",
"owner": "bcgit"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"security": 63,
"vitality": 60,
"community": 82,
"governance": 52,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 60,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"commits_last_year": 1693,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 52
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "52/52 weeks with commits",
"points": 36,
"status": "met",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 52
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1693 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1693
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 82,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "excellent",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"forks": 1264,
"stars": 2670,
"watchers": 135,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2,670 stars",
"points": 55.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 2670
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1,264 forks",
"points": 25,
"status": "met",
"details": [
{
"code": "forks",
"params": {
"count": 1264
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "135 watchers",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 135
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 52,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 100,
"top_contributor_share": 0.568
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 57% of commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 57
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "100 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 100
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 34 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"merged_prs": 43,
"open_issues": 64,
"closed_issues": 1548,
"issue_closed_ratio": 0.96,
"closed_unmerged_prs": 518
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "96% of issues closed",
"points": 44.9,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 96
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "43/561 decided PRs merged",
"points": 2.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 43,
"decided": 561
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"followers": 296,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "bcgit",
"public_repos": 9,
"account_age_days": 4804
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "296 followers of bcgit",
"points": 17.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 296,
"login": "bcgit"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "9 public repos, account ~13 yr old",
"points": 19.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 9
}
},
{
"code": "account_age_years",
"params": {
"years": 13
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"crypto",
"java",
"openpgp",
"dtls",
"post-quantum-cryptography",
"tls"
],
"has_wiki": true,
"homepage": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 63,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 6.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 34 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected: CodeQL",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 8
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 70,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.47,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1407
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "47 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 25.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 47,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"bom/build.gradle",
"build.gradle",
"core/build.gradle",
"jmail/build.gradle",
"mail/build.gradle",
"misc/build.gradle",
"mls/build.gradle",
"pg/build.gradle",
"pkix/build.gradle",
"prov/build.gradle",
"test/build.gradle",
"tls/build.gradle",
"util/build.gradle"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "bom/build.gradle, build.gradle, core/build.gradle (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "bom/build.gradle, build.gradle, core/build.gradle"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Java (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 1866290,
"source_files_sampled": 7893,
"oversized_source_files": 101
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "101/7893 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 7893,
"oversized": 101
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"example",
"examples"
],
"has_mcp_signal": false,
"api_schema_files": [
"mls/src/main/proto/mls_client.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "mls/src/main/proto/mls_client.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "mls/src/main/proto/mls_client.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example, examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example, examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T09:59:54.085292Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/bcgit/bc-java.svg",
"full_name": "bcgit/bc-java",
"license_state": "standard",
"license_spdx": "MIT"
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas.