A fork of Apache Tomcat Native, based on finagle-native
C · JavaApache-2.0★ 266 estrellas⑂ 196 forksdesde abr 2014Ver en GitHub ↗
netty/netty-tcnative tiene un índice de salud de 66 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Security (79/100) y la más baja, AI Readiness (55/100). Se actualizó por última vez hace 10 días. Una sola persona concentra la mayor parte del trabajo reciente.
66
global / 100
Moderado
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala estandarizada de 1 a 100. El resultado global parte de su media ponderada, calibrada contra la distribución del registro público para que las bandas tengan significado percentil; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe un límite «En riesgo» de 34.
66
Excepcional93-100El nivel más alto del registro (≈ el 5% superior); cumple prácticamente todos los criterios evaluados
Excelente80-92Sólido en todos los frentes; carencias menores
Bueno65-79Saludable; carencias limitadas y manejables
Moderado50-64Aceptable con carencias notables; se recomienda revisión
Débil35-49Debilidades sustanciales en varias áreas
En riesgo20-34Debilidades significativas; su adopción exige cautela
Crítico1-19Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido
25/25
Dependencias indirectas libres de avisos conocidos — ninguna dependencia indirecta tiene un aviso conocido
0/40
Sin avisos pendientes — ningún aviso tiene fecha de publicación
Datos de entrada utilizados
source
osv
advisories
0
affected_packages
0
assessed_packages
1
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluidos de la puntuación (sin datos o no aplicable): Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejó el cierre de dependencias en tiempo de ejecución de maven:io.netty:netty-tcnative@2.0.81.Final —lo que arrastra la instalación del paquete publicado—: 1 paquetes. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Tiene un peso deliberadamente pequeño (4%): las herramientas para agentes son una señal real de mantenimiento, pero un repositorio sin ninguna puede alcanzar igualmente 100/100.
Arranque con un solo comando — boringssl-static/pom.xml, libressl-static/pom.xml, openssl-classes/pom.xml (convención del toolchain, sin ejecutor de tareas)
22/22
Pruebas automatizadas
0/11
Configuración de lint / formato
11/11
Verificación estática de tipos — C (tipado estático)
10/10
Entorno reproducible — Dockerfile
0/10
Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 100
0/8
Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias
0/10
OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Código verificable por tipos — C (tipado estático)
52.8/55
Tamaños de archivo manejables — 2/49 archivos fuente de más de 60 KB
Datos de entrada utilizados
primary_language
C
largest_source_bytes
117.626
source_files_sampled
49
oversized_source_files
2
Datos clave
266estrellas de GitHub
61contribuidores
64commits en los últimos 12 meses
10días desde el último push
1versiones publicadas
1factor bus
35issues abiertas
Mavenecosistemas de paquetes
Advertencias de recopilación de datos
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch maven package 'io.netty:netty-tcnative-openssl-static' from its registry
Could not fetch maven package 'io.netty:netty-tcnative-libressl-static' from its registry
Más detalle
Historial de estrellas y forks 0 ★ / 196 ⇿
0Estrellas
196Forks
1Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 0Menor 0Parche 0
Cada punto abarca 11 días.
OpenSSF Scorecard 7.4 / 10
7.4agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-30 23:31 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 5 paquetes directos y 22 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Instalar maven:io.netty:netty-tcnative@2.0.81.Final arrastra 1 paquetes, directos y transitivos: 0 tienen avisos conocidos, de los cuales 0 son dependencias directas.
Ningún aviso conocido afecta a las dependencias evaluadas.
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 3116,
"has_wiki": false,
"homepage": null,
"languages": {
"C": 354204,
"M4": 52882,
"Java": 163296,
"Ruby": 125,
"Shell": 1964
},
"pushed_at": "2026-07-20T16:55:28Z",
"created_at": "2014-04-22T04:24:17Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T16:55:40Z",
"description": "A fork of Apache Tomcat Native, based on finagle-native",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "C",
"significant_languages": [
"C",
"Java"
]
},
"owner": {
"blog": "https://netty.io",
"name": "The Netty Project",
"type": "Organization",
"login": "netty",
"company": null,
"location": null,
"followers": 412,
"avatar_url": "https://avatars.githubusercontent.com/u/473791?v=4",
"created_at": "2010-11-09T09:20:31Z",
"is_verified": null,
"public_repos": 16,
"account_age_days": 5742
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "gcc-precompile",
"kind": "other",
"published_at": "2021-02-01T08:46:08Z"
}
],
"recent_commits": [
{
"oid": "6ad94b7772fb330999d38ac2153f838cb6259357",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-07-20T16:55:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "402d9c37cd4ea4c2d282899c90b0372a8cd38bfd",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.81.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-07-20T16:55:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f44fcb9c94a1c0cb3dbd3650a2934bc530e20cea",
"body": "… most recently completed handshake (#991)\n\nMotivation:\n\nWe need to be able to get the group name to verify if PQC was used\n\nModifications:\n\nAdd method that returns the group name\n\nResult:\n\nBe able to obtain the used group",
"is_bot": false,
"headline": "Add SSL.getGroupName(...) which returns the name of the used by ssl's…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-07-07T22:19:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81ca0c510fc28a7ee178212ad890ce2d7fd6c163",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-29T13:25:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6bed2ea539e8048b759965d2d0fb5f9ce997e69",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.80.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-29T13:25:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "185daef4bbce6b34d9d7edef0e48ca3b78089138",
"body": "The previous fix (PR #986) built OpenSSL 3.x from source and symlinked\n/usr/local/ssl -> /opt/openssl-$VERSION, expecting tcnative's configure\nto find it via the default search path. This didn't work: the native\nbuild was still picking up the system OpenSSL 1.0.x.\n\nFix: pass -DopensslHome explicitly\n[…]\n6) │ libssl.so.3 │ /opt/openssl-3.6.1/lib │\n✅ │\n│ linux-aarch_64-fedora (centos7) │ libssl.so.3 │\n/opt/openssl-3.6.1-share/lib │ ✅ │\n│ linux-x86_64 (debian7) │ libssl.so.3 │ /opt/openssl-3.6.1/lib │ ✅",
"is_bot": false,
"headline": "Fix linux-x86_64 openssl-dynamic to link against OpenSSL 3.x (#989)",
"author_name": "colleenkinross",
"author_login": "colleenkinross",
"committed_at": "2026-06-26T21:51:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aa6efe4479d10bbf7517b2cd95ae122df97de4b6",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-12T06:47:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f79687ea38bb92f04b5283f3fc0ad073dd5a1e37",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.79.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-12T06:47:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47fda994ad6f60a305d2cdb5fc284044fbde9dac",
"body": "Motivation:\n\nPreviously the aarch64 cross-compile was pinned to OpenSSL 1.1.1k,\ncausing the linux-aarch_64-fedora JAR to require libssl.so.1.1 at\nruntime instead of libssl.so.3. This upgrades all three Linux build\nenvironments (centos6/x86_64, centos7/aarch64 cross-compile,\ndebian/x86_64) to build O\n[…]\n — | **Gains** linking |\n| RHEL 8.x | — | ❌ | **Loses** aarch64 linking (system has\n`libssl.so.1.1`, not `.so.3`) |\n| RHEL 8.x x86_64 / Ubuntu 20.04 | ❌ | — | No change (broken before,\nbroken after) |",
"is_bot": false,
"headline": "linux aarch_64 openssl-dynamic link to openssl3.x (#986)",
"author_name": "colleenkinross",
"author_login": "colleenkinross",
"committed_at": "2026-06-10T15:51:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a85010bc426202b2ca2b3366b881557e2c49119d",
"body": "Fix #979.\n\nGiven that `SSL_CREDENTIAL` has been in BoringSSL for a long time, we\ncould move on and make these functions mandatory for BoringSSL-based\nbuilds.\n\n---------\n\nSigned-off-by: xfding <xfding@google.com>\nCo-authored-by: Norman Maurer <norman_maurer@apple.com>",
"is_bot": false,
"headline": "Drop checks on SSL_CREDENTIAL support for older BoringSSL (#980)",
"author_name": "wieDasDing",
"author_login": "dingxiangfei2009",
"committed_at": "2026-06-10T13:58:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02d0d0350ae792f5c70d62e8f24e82771b32482f",
"body": "Motivation:\n\nNetty calls SSL.setKeyMaterial in its server-side certificate callback\n(https://docs.openssl.org/3.6/man3/SSL_CTX_set_cert_cb/ but the same\ngoing back to 1.0.2). OpenSSL invokes certificate callbacks after the\nserver receives a ClientHello.\n\nTLS 1.2 TLS sessions usually had one ClientHe\n[…]\nd have suffered from the same\nduplicate intermediates issue.\n\nModifications:\n\nClear chain before repopulate i.\n\nResult:\n\nFixes #985.\n\n---------\n\nCo-authored-by: Norman Maurer <norman_maurer@apple.com>",
"is_bot": false,
"headline": "Clear certificate chain in setKeyMaterial. (#987)",
"author_name": "Mark Williams",
"author_login": "mawiwill",
"committed_at": "2026-06-10T07:04:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3885412b515bff1257c673f70b44bb39ec780a38",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-04T04:47:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f135f1ed70f23c5dc9463e43dce9ae508752378",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.78.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-04T04:47:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c88fe9f8113bf9b8983f6ab112cfeaab4c96b87",
"body": "…mand (#984)\n\nThe two-command approach caused `clean` in the second build to wipe\ntarget/central-staging, losing the openssl-dynamic artifacts.\n\nOriginal fix attempt was\nhttps://github.com/netty/netty-tcnative/pull/981, however this did not\nwork because the output directory wasn't *delete-able* whic\n[…]\n was removed in #906, so combining\nthem is now safe. There are still differences in the flags passed, but\nthese are ignored by boringssl, so should not cause an issue\n(-DopensslArmHome, -DaprArmHome).",
"is_bot": false,
"headline": "aarch64 release: openssl-dynamic and boringssl-static into single com…",
"author_name": "colleenkinross",
"author_login": "colleenkinross",
"committed_at": "2026-06-03T21:06:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f1ceb3428872384dad6ca96cbb08a4812ddb29ab",
"body": "PR #981 did not account for central-publishing-maven-plugin deleting its\noutputDirectory before each execution. This causes two problems:\n- Visible: /root/local-staging is a Docker volume mount point and cannot\nbe deleted by the plugin, causing the release to fail immediately with\n\"Device or resourc\n[…]\nbusy\n```\n```\n docker run --rm -v ~/local-staging:/root/local-staging alpine \\\n sh -c \"mkdir -p /root/local-staging/openssl-dynamic && rm -rf /root/local-staging/openssl-dynamic && echo 'OK'\"\nOK\n```",
"is_bot": false,
"headline": "Fix release bug from pull 981 (#983)",
"author_name": "colleenkinross",
"author_login": "colleenkinross",
"committed_at": "2026-06-03T16:18:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c62b75c6a1bab20e0a6a826b60b3e368e83e6753",
"body": "The linux-aarch64 artifacts were dropped starting in 2.0.72 when PR #926\nmigrated from nexus-staging-maven-plugin to\ncentral-publishing-maven-plugin.\n\nUnlike other platforms for which we can build openssl-dynamic and\nboringssl-static in a single command, the aarch64 cross-compile requires\ntwo separa\n[…]\n-DoutputDirectory=/root/local-staging to both publish\ncalls, mirroring the original -DaltStagingDirectory behavior, then\ncopying the combined output into target/central-staging for the CI\nupload step.",
"is_bot": false,
"headline": "Restore linux-aarch64 artifacts to Maven Central publish (#981)",
"author_name": "colleenkinross",
"author_login": "colleenkinross",
"committed_at": "2026-05-21T18:51:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "25e07f6efbdad2e1051e15ee3bd13eff9c5be22a",
"body": "…978)\n\nThis reverts commit 4939940102c1727467c7248b9a6c95ed03db45d8.",
"is_bot": false,
"headline": "Revert \"Correctly build boringssl-static for linux aarch64 (#975)\" (#…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-24T14:48:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36c36feb92428e9abed233e4e7a0e5eebd94e404",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-04-23T09:49:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "318158d0ec14ad1a3e2295b775e7827100603b2f",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.77.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-04-23T09:49:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29ca2945144dfae99b5fb913c9b44a3c933d5cc6",
"body": "Motivation:\n\nWe need to override the detection of rwlocks as this not works when\ncross-compiling\n\nModifications:\n\nManual use HAVE_PTHREAD_RWLOCKS=1\n\nResult:\n\nBe able to use locks. Fixes\nhttps://github.com/netty/netty-tcnative/issues/974",
"is_bot": false,
"headline": "Ensure we can always use locks when cross-compiling (#977)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-23T09:26:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bc21d156a0aa6cc89dca93a94af4360a26945a4",
"body": "…976)\n\nMotivation:\n\nAt the moment it is really hard to understand why SSLContext.make(...)\nfails in some cases.\n\nModifications:\n\nConstruct more meaningful exceptions\n\nResult:\n\nEasier to debug",
"is_bot": false,
"headline": "Add more details to the exceptions when SSLContext.make(...) fails (#…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-23T07:11:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4939940102c1727467c7248b9a6c95ed03db45d8",
"body": "Motivation:\n\nThis reverts commit 689e4d57de6011e8711a6281b983f004097a658a as it broke\nthe cross-compilation.\n\nModifications:\n\nRevert \"Fix creation of docker image for cross compilation (#956)\"\n\nResult:\nFixes https://github.com/netty/netty-tcnative/issues/974",
"is_bot": false,
"headline": "Correctly build boringssl-static for linux aarch64 (#975)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-22T16:06:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f30be2c58d684aa6f1abf64ab590c7cae02a4ec6",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-04-19T12:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87db2eba8d604f15acab973f107e96d4fc4b1b8d",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.76.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-04-19T12:05:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beaa8587bc054cef1860f0e5a4c169a6eb990143",
"body": "Motivation:\n\nGetStringUTFChars(...) might return NULL if we run out of memory. Let's\nhandle it and not crash by return early.\n\nModifications:\n\nAdd missign NULL checks\n\nResult:\n\nMore robust code",
"is_bot": false,
"headline": "Guard against GetStringUTFChars(...) return NULL (#973)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-15T17:37:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb00c7a71c6c83e4367dcd9f0d14d2f56d4691f8",
"body": "Motivation:\n\nIf our java method throws in the keylog function we need to clear the\nexception as otherwise we might end up corrupting the JNI state\n\nModifications:\n\n- Cheack if exception was thrown and if so clear it\n\nResult:\n\nNo more risk of corrupted JNI state",
"is_bot": false,
"headline": "Clear exception if happens during keylog_cb (#971)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-14T20:30:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09d10a33ad9ca156a748c1a53d44c12713a6eb97",
"body": "… overflow (#972)\n\nMotivation:\n\nJNI has a maximum limit of how many local reference you can put on the\nstack so we should better ensure we never overflow this limit. This is\nespecially important\nwhen creating these in loops as it is impossible to know how many\niterations we have. In practice this should be no problem in our code\nbut better fix it.\n\nModifications:\n\n- Delete local references when created in loops\n\nResult:\n\nMore robust code",
"is_bot": false,
"headline": "Delete local reference when creating a lot in a loop to ensure we not…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-13T19:40:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01a0efddd3e6a5378f36b8b1e9d2f8087c12c285",
"body": "…c verifier (#970)\n\nMotivation:\n\nWe didn't correct keep state when using the async verifier\n\nModifications:\n\nKeep track of the array length and number of certs in the chain so we\ncan use them in retry path\n\nResult:\n\nThe X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY substitution will now\nfire correctly when the async verifier returns X509_V_ERR_UNSPECIFIED\ndue to a truncated chain.",
"is_bot": false,
"headline": "Correctly keep track of array len and number of certs when using asyn…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-13T18:11:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19324b1f71d00688651cc024f45cf47710e1e51b",
"body": "Motivation:\n\nWe did use the last protocol supported by the peer as fallback while we\nshould have used the last local protocol\n\nModifications:\n\n- Added last_supported_proto / last_supported_proto_len variables,\nupdated at the top of each outer iteration (right after\n++supported_protos, when it points\n[…]\nf inlen == 0) to\nlast_supported_proto != NULL, which correctly reflects\n whether we actually iterated over any of our own protocols.\n\nResult:\n\nCorrectly fallback to our last local supported protocol",
"is_bot": false,
"headline": "Fallback to correct protocol (#969)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-13T18:08:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c2533ef51555359519893373b08dcf04a238fd52",
"body": "Motivation:\n\nAll other similar setters (setCertificateCallback,\nsetSniHostnameMatcher, setKeyLogCallback, setCertRequestedCallback,\nsetSSLSessionCache) correctly place the DeleteGlobalRef outside the\nif/else.\nThis one is inconsistent and leaks the old verifier when the callback is\ncleared by passing NULL.\n\nModifications:\n\nAlways clear the global reference\n\nResult:\n\nCorrectly clear global reference",
"is_bot": false,
"headline": "Always clear global reference to the verifier (#967)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-26T20:17:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc03f16beb512b396e429ea0b2e3fa3e4c17a6ef",
"body": "Motivation:\n\nwe need to ensure we free the CRYPTO_BUFFER if the push fails as\notherwise we will leak memory\n\nModifications:\n\nAdd CRYPTO_BUFFER_free call\n\nResult:\n\nNo more leak when push to the stack fails",
"is_bot": false,
"headline": "Correctly free buffer if push fails (#966)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-26T20:10:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3da7aaa2dfa402476311f2e21555f26dbeaabf9f",
"body": "…SSL 3.x (#964)\n\nMotivation:\n\nOn OpenSSL 3.0+, OSSL_PARAM_construct_octet_string stores a raw pointer\nto the data, not a copy of it and so we need to ensure we make a copy.\n\nModifications:\n\n- hmac_key is now unconditional (no longer guarded by < 0x30000000L).\nThis gives the struct a stable, heap-all\n[…]\nnts to ticket_keys[i].hmac_key — memory owned by\nthe ticket_keys allocation — instead of into b.\n\nResult:\n\nNo more use of possible dangling pointer when using OpenSSL 3.x and more\nconsistent code-base",
"is_bot": false,
"headline": "Use-After-Free / Dangling Pointer when using session tickets and Open…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-24T00:08:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0de54ae3f95fd26d282d93655622c8896729b4cb",
"body": "Motivation:\n\nWe did miss to check the return value of apr_thread_rwlock_create\n\nModifications:\n\n- Add return value check and also guard against NULL\n\nResult:\n\nCorrectly handle failure of apr_thread_rwlock_create",
"is_bot": false,
"headline": "Correctly respect return value of apr_thread_rwlock_create (#965)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-24T00:03:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcdaf449fb295e133743dca58708c34ea50749f7",
"body": "…960)\n\nMotivation:\n\nWe need to check for NULL that might be returned by GetIntArrayElements\n\nModifications:\n\nAdd NULL check\n\nResult:\n\nGetIntArrayElements is now checked for NULL before passing the result to\ntcn_SSL_set1_curves",
"is_bot": false,
"headline": "setCurves(...) should check for GetIntArrayElements returning NULL (#…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-23T14:19:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bd4739ceb49fc08c3a451c24ddd8cd7887efe54",
"body": "… it (#961)\n\nMotivation:\n\nWe failed to initialize proto_len and so could end up to undefined\nbehavior.\n\nModifications:\n\n- proto_len is now initialized to 0 — eliminating the undefined\nbehaviour from reading it uninitialized.\n- The CHOOSE_MY_LAST_PROTOCOL branch is now guarded with proto != NULL —\nif\n[…]\nt no protocols (inlen == 0) the inner loop never runs and\nproto stays NULL,\nso we correctly fall through to SSL_TLSEXT_ERR_NOACK instead of doing\narithmetic on a null/garbage pointer.\n\nResult:\n\nFix UB",
"is_bot": false,
"headline": "Fix UB issue which can be caused by not init proto_len before reading…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-23T10:34:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f47c053af5d297317c636298b160d77304090c4b",
"body": "…tion (#963)\n\nMotivation:\n\nWe called SSL_CTX_set_info_callback on each creation of SSL. This is not\nreally correct as it should be done per context.\n\nModifications:\n\nMove SSL_CTX_set_info_callback call to SSLContext.make(...)\n\nResult:\n\nCorrect usage of SSL_CTX_set_info_callback",
"is_bot": false,
"headline": "SSL_CTX_set_info_callback should only be called once per context crea…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-23T10:34:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a96f00321e01d8439de8e5984f89753ac9462c6",
"body": "… versions (#962)\n\nMotivation:\n\nWe had a missing semicolon which would cause compile errors if we ever\nended up in the #ifdef block\n\nModifications:\n\nAdd semicolon\n\nResult:\n\nNo more compile error",
"is_bot": false,
"headline": "Add missing semicolon which would cause compile errors on old openssl…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-20T09:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3b80422f46a0c4dca24000b0bbaf12f47660e46",
"body": "…during decompression (#959)\n\nMotivation:\n\nGetByteArrayElements(...) might return NULL and if so we need to ensure\nwe don't leak the CRYPTO_BUFFER\n\nModifications:\n\nOnly allocate CRYPTO_BUFFER if GetByteArrayElements(...) does not return\nNULL\n\nResult:\n\nNo more leak of CRYPTO_BUFFER in case of failure",
"is_bot": false,
"headline": "Don't leak CRYPTO_BUFFER when GetByteArrayElements(...) returns NULL …",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-20T07:14:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95231a76f74981d0a868951e53b187d69fd6d9e0",
"body": "Motivation:\n\nWe missed to check for failed malloc and so could end up with a crash in\nthe rare cause of running out of memory.\n\nModifications:\n\nAdd NULL checks and throw OOME\n\nResult:\n\nBoth setNpnProtos0 and setAlpnProtos0 now check the OPENSSL_malloc\nreturn value before writing the length or callin\n[…]\no_len is also moved to after\nthe NULL check — previously it was written even when the allocation\nhad failed, which would leave the struct in an inconsistent state\n(non-zero length, NULL data pointer).",
"is_bot": false,
"headline": "Guard against malloc failures when configure ALPN and NPN (#958)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-20T07:14:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "67116594658c806b08e5e900917719525d5bcfcc",
"body": "…ils (#957)\n\nMotivation:\n\nWe leaked native memory when GetByteArrayElements failed.\n\nModifications:\n\nEnsure we release the native memory before early return\n\nResult:\n\nNo more memory leak",
"is_bot": false,
"headline": "Fix memory leak in setSessionTicketKeys0 when GetByteArrayElements fa…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-19T09:38:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "668baf974243aec43130d2ccce454c0f3ea096ef",
"body": "Motivation:\n\nlength is a jint, but the format specifier is %s. apr_vsnprintf will try\nto dereference the integer value as a char pointer and will either crash\nwith a segfault or produce garbage output.\n\nModifications:\n\nFix format specifier\n\nResult:\n\nNo more UB",
"is_bot": false,
"headline": "Wrong format specifier cause UB (#955)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-18T19:02:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "689e4d57de6011e8711a6281b983f004097a658a",
"body": "Motivation:\n\nDownloading of custom git fails these days but we actually don't need\nit.\n\nModifications:\n\n- Update centos version\n- Remove custom git\n- Remove enforcer config\n\nResult:\n\nBuilding of docker image works again",
"is_bot": false,
"headline": "Fix creation of docker image for cross compilation (#956)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-18T18:03:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "917bcaf9f2d8bdfb15383eed124417af79ca8be2",
"body": "**Motivation:**\n\nUpgrade dynamic linking to OpenSSL >= 3.5. Version 1.1 is not shipped in\nmany modern OSs and post-quantum key exchange algorithms are brought by\nopenSSL >= 3.5. We picked 3.6 arbitrarily and would be content with any\nversion >= 3.5.\n\n**Modifications:**\n\n Update openssl-dynamic to\n[…]\npenssl 3.6 for openssl-dynamic.\n\n---------\n\nSigned-off-by: Hiram Chirino <hiram@hiramchirino.com>\nCo-authored-by: Hiram Chirino <hiram@hiramchirino.com>\nCo-authored-by: Mingyuan Wu <my.wu@outlook.com>",
"is_bot": false,
"headline": "Build against openssl 3.6 for dynamic linking (#952)",
"author_name": "anavarr",
"author_login": "anavarr",
"committed_at": "2026-03-13T20:47:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5f9becb3e3d1d3a7f19d2f647b431abf64952d40",
"body": "…l ssl handshake (#954)\n\nRight now Netty uses `SSL.getVersion()`, which allocates a string when\nthe handshake is finished, we can easily avoid this allocation by\nintroducing a new method `SSL.getVersionInt()`, which would return the\nprotocol version as an int instead of a string.\n\n\nRelated to https://github.com/netty/netty/pull/16278",
"is_bot": false,
"headline": "Add new method SSL.getVersionInt to avoid string allocation on initia…",
"author_name": "Dmytro Dumanskiy",
"author_login": "doom369",
"committed_at": "2026-02-26T07:49:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9117d8b30e402025c452cea8f5afb5769438177",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-02-04T07:42:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1abcd04f139b7fba76871a34407a8afa47a2a55",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.75.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-02-04T07:42:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff2dc66e02e6e3fdf0188ed6c22af070f4e9cd83",
"body": "Motivation:\nThe google storage api URLs are no longer accessible.\n\nModification:\nSwitch to URLs used by the go.dev website.\n\nResult:\nBuilds should no longer fail to download go.",
"is_bot": false,
"headline": "Fix golang download URL (#951)",
"author_name": "Mingyuan Wu",
"author_login": "m1ngyuan",
"committed_at": "2026-01-08T08:35:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b83c818df2a064c9f94e040dda05dadc14d6528e",
"body": null,
"is_bot": false,
"headline": "Add jni load, unpack certChainStack in C for consistency (#949)",
"author_name": "Jared Crawford",
"author_login": "jmcrawford45",
"committed_at": "2025-12-08T08:52:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b94455e630880e09f357033315cb94aae916e687",
"body": "1. Make the `fips-boringssl-static` profile point to BoringSSL commit\n`6d503ae1cf8b2e25162435225610b8c1f063d6f4`, which is the latest revision\nthat is available for download as a tarball from\nhttps://commondatastorage.googleapis.com/chromium-boringssl-fips\n\n2. Update toolchain to clang-12 (required \n[…]\nbssl executable path (the `bssl` utility is now generated\ndirectly in the build directory rather than in a `tool/` subdirectory)\n\n5. Link with libdecrepit\n\n6. Explicitly link with C++ standard library",
"is_bot": false,
"headline": "Upgrade to BoringSSL 6d503ae1 (#950)",
"author_name": "Julian Howes",
"author_login": "jlnhws",
"committed_at": "2025-12-08T08:50:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d1173ed6fb6ede622fd29376b94ec2d68e260754",
"body": "Fix for\nhttps://github.com/netty/netty-tcnative/issues/918#issuecomment-3324760916",
"is_bot": false,
"headline": "Exclude SSL Credential api for older FIPS builds (#948)",
"author_name": "Jared Crawford",
"author_login": "jmcrawford45",
"committed_at": "2025-11-20T21:50:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4063eb20b6432f4be2e2c3af4a9254b5d4d364d",
"body": "Motivation:\n\nThe git 2.x download URL for the maven scm plugin are no longer\naccessible.\n\nModification:\n\nSwitch to URL used by the opensource.blueoptima.com website.\n\nResult:\n\nBuilds should no longer fail to download git 2.x for the maven scm\nplugin.",
"is_bot": false,
"headline": "Fix git 2.x download URL for the maven scm plugin (#947)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-11-17T19:58:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a164372d37f52a213a9aa5f365bdc1b8696843b",
"body": "Motivation:\nGitHub has deprecated the macOS 13 runners and will be removing them.\nDetails in https://github.com/actions/runner-images/issues/13046\n\nModification:\nReplace the runner OS for all Intel Mac builds with macos-15-intel.\n\nResult:\nMacOS builds now run on the latest and last version of MacOS that will\nhave Intel support.",
"is_bot": false,
"headline": "Upgrade all macOS Intel workflow runners to macOS 15 (#15840) (#946)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-11-13T10:25:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d91fac16d15924e9048c29e64478d94970712bd",
"body": "…ingssl-static (#945)\n\nChange the artifactId when building FIPS-compliant\nnetty-tcnative-boringssl-static\n\nMotivation:\n\nnetty-tcnative-boringssl when compiled for default mode or FIPS mode\nresult in the same artifactId, same classifier, same version number and\nyet have a very significant different f\n[…]\nen built with the fips-boringssl-static profile the jar file names\nwill now be\nnetty-tcnative-boringssl-static-fips-2.0.75.Final-SNAPSHOT*.jar\n\nCo-authored-by: Steve Lessard <steve.lessard@oracle.com>",
"is_bot": false,
"headline": "Change the artifactId when building FIPS-compliant netty-tcnative-bor…",
"author_name": "slessard",
"author_login": "slessard",
"committed_at": "2025-11-07T13:44:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f8dc19492d1aab6907716255ed58d9f181b4af2",
"body": "Motivation:\n\nOur JDK version was out of date\n\nModifications:\n\nUpdate to latest release\n\nResult:\n\nUse latest JDK versions on CI",
"is_bot": false,
"headline": "Update to latest JDK releases (#944)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-10-28T14:04:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35afdf98bd9df1079127d7ee8497d582eb39dd76",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-09-22T08:25:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e9ba9f6ff099ccbf36d810629c619536a37b86b",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.74.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-09-22T08:25:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e21f515b014ee63d046ed4600583b5b1d548aaa2",
"body": "Motivation:\n\nA new jni-util version was released which replaced some code which had\nno clear licensing.\n\nModifications:\n\nUpgrade to latest version\n\nResult:\n\nClear licensing of jni-util depndency",
"is_bot": false,
"headline": "Update jni-util version to clarify licensing (#942)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-09-18T21:03:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b1db993897a846df12140998c770a330e076f77",
"body": "Motivation:\n\ntcnative does not contain any code from netbsd anymore these days. Let's\nremove the old license details that refer to it.\n\nModifications:\n\nRemove entry from NOTICE.txt and remove license file\n\nResult:\n\nCleanup licensing",
"is_bot": false,
"headline": "Remove invalid / old license informations (#941)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-09-18T16:34:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37e7bc9b643a86cac07a5a1e18024d01f00ce76a",
"body": "Motivation:\n\nThe used version of BoringSSL is ASL2\n\nModifications:\n\nUpdate and so fix license informations for BoringSSL\n\nResult:\n\nInclude correct license for BoringSSL",
"is_bot": false,
"headline": "Include correct license informations for BoringSSL (#940)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-09-15T09:18:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2d68f82d6623047a25ff2ac3b371989ced69ecf",
"body": "Motivation:\n\nMotivation:\n\nIt's been a while since we updated our used BoringSSL version.\n\nModifications:\n\nUpdate to sha of current BoringSSL commit\n\nResult:\n\nUse latest BoringSSL version as of today",
"is_bot": false,
"headline": "Update to latest BoringSSL commit sha (#939)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-09-09T09:23:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5a26b961de7e8e415a6e0eb4ea24c3816b1237a",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-08-28T06:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f0de8e7b956e912b92ddb19abdecafe8a21b622",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.73.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-08-28T06:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a47a585adec8781a44f6957c2b7990c4a5013ed",
"body": "Motivation:\n\nHistorically, BoringSSL lacked a built-in method to select between RSA\nand ECDSA certificates. The selection process, especially at TLS 1.2, is\nquite complex, as detailed in [this\nlink](https://boringssl.googlesource.com/boringssl/+/5a3faaa2d50b2540c6973531841723f633f388cd/ssl/test/runn\n[…]\nt,\nconfigure them in preference order with BoringSSL, and BoringSSL will\nevaluate them according to protocol rules.\n\nImplements #918\n\n---------\n\nCo-authored-by: Norman Maurer <norman_maurer@apple.com>",
"is_bot": false,
"headline": "Support boringssl SSLCredential API (#935)",
"author_name": "Jared Crawford",
"author_login": "jmcrawford45",
"committed_at": "2025-08-15T10:03:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d463fd8deb653f9a827ef7c444350df37fd4f15e",
"body": "Motivation:\n\nBoringSSL returns GENERIC when using TLS1.3 but the JDK TrustManager\nimplementation expect UNKNOWN. We need to map it the expected value as\notherwise we will see failures.\n\nModifications:\n\nAdjust #if to also include BoringSSL\n\nResult:\n\nNo more testfailures when running netty CI with\nnetty-tcnative-boringssl-static SNAPSHOT",
"is_bot": false,
"headline": "Correctly map GENERIC to UNKNOWN when using BoringSSL (#937)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-08-14T12:06:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e46d9492f8af5513d557d634da2a99a9fda31b28",
"body": null,
"is_bot": false,
"headline": "Add missing <openssl/sha.h> include (#936)",
"author_name": "David Benjamin",
"author_login": "davidben",
"committed_at": "2025-07-16T18:33:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53102a197cb92c554fda59f7893fddbd65b6c1f7",
"body": "Hello,\n\nI'm an engineer at AWS working on AWS-LC, AWS's open-source fork of\nGoogle's BoringSSL. We would like to propose adding AWS-LC support to\nnetty-tcnative, alongside its existing support for OpenSSL, BoringSSL,\nand LibreSSL.\n\nAWS-LC shares a similar API surface area to the existing BoringSSL\ni\n[…]\nssary adjustments there for the netty-tcnative with aws-lc\nintegration to work as expected and have additional testing as\nnecessary.\n\n---------\n\nCo-authored-by: Norman Maurer <norman_maurer@apple.com>",
"is_bot": false,
"headline": "Support for building with AWS Libcrypto (AWS-LC) (#929)",
"author_name": "Sean McGrail",
"author_login": "skmcgrail",
"committed_at": "2025-06-20T22:32:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b4543ac6bf4a498eeea2998baa494824e4353459",
"body": "Motivation:\n\nThis function returns the first cipher from the preference order, but is\nnot necessarily the actual cipher that was negotiated.\n\nModifications:\n\n- Use SSL_get_current_cipher or the struct directly to obtain the used\ncipher\n\nResult:\n\nauthentication_method(...) returns the correct method.",
"is_bot": false,
"headline": "Obtain correct cipher in authentication_method(...) (#932)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-06-16T14:19:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d4e7e2a90b839012122846f9651bac8eecb51cc",
"body": "Motivation:\n\nTo be able to build libressl-static with newer cmake versions we need to\npass in some more flags\n\nModifications:\n\nAdd -DCMAKE_POLICY_VERSION_MINIMUM=3.5\n\nResult:\n\nCompilation of libressl-static works again even on cmake 4.x",
"is_bot": false,
"headline": "Fix build of libressl-static on newer CMAKE versions (#933)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-06-16T06:36:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f7d91c38e13bc1f8c1785e75dadfe291c146a2b",
"body": "Motivation:\n\nWe need to ensure we also build modules that openssl-dynamic depend on\nas otherwise the analyze might fail as it can not find the snapshot\n\nModifications:\n\nAdd -am to the build command\n\nResult:\n\nAnalyze job doesnt fail anymore",
"is_bot": false,
"headline": "Fix codeql analyze job (#931)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-06-13T09:12:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7beccb06b580fa878117e30d33204a4cfc58ed20",
"body": "Motivation:\nWe are currently using the Windows 2019 images, which will reach\nend-of-life on June 30, 2025.\n\nModification:\nChange the windows images in our GHA workflows from `windows-2019` to\n`windows-2022`.\n\nResult:\nMore up to date windows build agents.",
"is_bot": false,
"headline": "Upgrade Windows GHA images to Windows Server 2022 (#930)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-06-13T07:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06279ba6f3548a9ec3350e66e22bceff6bf5131f",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-05-22T07:33:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b18e6081361193d2427ae544b8f503585b4de302",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.72.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-05-22T07:33:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79e453eea5392a61154d58bd7c84338bf89de6d7",
"body": "…927)\n\nMotivation:\n\nWe should cancel any running / queued job when a new change was pushed\nto the affected branch. This will ensure we not tie up resources.\n\nModifications:\n\nAdd new concurrency config to workflows\n\nResult:\n\nCancel jobs that are not useful anymore",
"is_bot": false,
"headline": "Cancel running / queue jobs when a new change was pushed to branch (#…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-05-21T06:23:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c63e5233615fc46555125e9d2fa5d119bf520e0",
"body": "Motivation:\n\nOSSRH is deprecated and will be shut down soon. Let's switch to using\nmaven central\n\nModifications:\n\n- Replace old plugin with central-publishing-maven-plugin for release\n- Adjust workflow to setup the right token / password\n- Add scripts\n\nResult:\n\nSnapshot deployments and release works again",
"is_bot": false,
"headline": "Migrate using maven central (#926)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-05-20T13:58:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81b55a85d7384a20751322f8b39273c9c47b93e9",
"body": "Motivation: \n\nImproper algorithm names returned by BoringSSL with TLS 1.3 \n\nModifications:\nAlways pass `false` as the second parameter to\n`SSL_get_signature_algorithm_name()`. This forces BoringSSL to omit the\ncurve name and return algorithm names in the style expected by callers\nof `SSL.getSigAlgs()`. Previously this parameter was only false for TLS\n1.2.\n\nResult: \nFixes #923",
"is_bot": false,
"headline": "Fix SSL.getSigAlgs() on BoringSSL for TLS 1.3 (#924)",
"author_name": "Greg Rubin",
"author_login": "sfc-gh-grubin",
"committed_at": "2025-05-15T18:57:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e135a790f4876f04fe0f656d5b4b0f2ffc8df4f3",
"body": "Motivation:\n\nWe recreate the gitconfig from scratch on each step so we should not include it\n\nModifications:\n\nAdd exclude\n\nResult:\n\nCleanup",
"is_bot": false,
"headline": "Don't include git config when upload directory to prepare release",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-05-07T09:39:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b552068c6cb3c18ac09b95a201c43acd9ac94a79",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-30T09:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "992ce2c9492dabaccc099654044c5ff93efd6d10",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-30T09:48:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63fec8bff3bff51a01032d03fe80c7e3952f7966",
"body": "Motivation:\n\nWe need to import the GPG key as otherwise we can't sign as part of the release process\n\nModifications:\n\nAdd missing usage of action to import gpg key\n\nResult:\n\nSigning will work as part of the release",
"is_bot": false,
"headline": "Import GPG key during release workflow",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-30T09:43:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "562f581cb42799a8793636520b75eeacabc6ea1f",
"body": "…2.0.71.Final",
"is_bot": false,
"headline": "[maven-release-plugin] rollback the release of netty-tcnative-parent-…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-30T09:39:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "576ae84fe8a15ae9e11c13f65e1956916982dd71",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-30T09:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1cf956f84f586f82da0944044baaa5e7b0e1738",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-30T09:10:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19a734ab5ec058b7309299bec92c1c9ade72ecc4",
"body": "Motivation:\n\nWe need to also sign when we generate the uber jar as otherwise we will not have a matching signature\n\nModifications:\n\nAdd missing \"sign\"\n\nResult:\n\nCorrect signature generated during release process for the uber jar",
"is_bot": false,
"headline": "Add missing sign goal when generating uber jar",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-30T09:07:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f10a791a1d2cb471e2259303b12175b5d02f85be",
"body": "Motivation:\n\nWe also need to generate and publish a sources jar to be able to release via sonatype\n\nModifications:\n\nAdd plugin config to also generate the sources jar\n\nResult:\n\nValidation in sonatype does not fail anymore",
"is_bot": false,
"headline": "Also generate sources jar for openssl-classes",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-30T09:05:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5e7051c3ffaccbe261bf94ea587349991dd232d",
"body": "Motivation:\n\nWe missed to pass the nexusUrl and serverId while trying to stage the uber jar.\n\nModifications:\n\nAdd nexusUrl and serverId params\n\nResult:\n\nStaging of uber jar works",
"is_bot": false,
"headline": "Add missing nexusUrl and serverId",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-29T18:51:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbdfbcd958e6151797a70f10e0a07e43985847fc",
"body": "…2.0.71.Final",
"is_bot": false,
"headline": "[maven-release-plugin] rollback the release of netty-tcnative-parent-…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T18:47:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e5ddc07c8f23bea91949fff20170001ff566546",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T18:11:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0678a36533be0779166561852524bd0e93920f43",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T18:11:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eec839d73d78e49db2ab3755196616d7e4371a5c",
"body": "Motivation:\n\nWe need to specify the working directory otherwise we can't find mvnw\n\nModifications:\n\nAdd working-directory: ./prepare-release-workspace/\n\nResult:\n\nRelease workflow should be fixed",
"is_bot": false,
"headline": "Add missing working-directory",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-29T17:54:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd53b7447a9c1818c519223da010045c3429b9c6",
"body": "…2.0.71.Final",
"is_bot": false,
"headline": "[maven-release-plugin] rollback the release of netty-tcnative-parent-…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T14:59:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b8f6f76ad2aed1d242cdf86e364dc5fbf917444",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T14:12:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2666ef5fccadf3176517e0062b27188f53e6808",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T14:12:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e25fbff11f7ceb0c6629c374913baeea5e2a4ebd",
"body": null,
"is_bot": false,
"headline": "Invoke install_local_staging.sh script with correct arguments",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-29T13:53:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c549c4075f8e3e80b5db15cc2c5e7c5c5c048a8",
"body": "…2.0.71.Final",
"is_bot": false,
"headline": "[maven-release-plugin] rollback the release of netty-tcnative-parent-…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T13:44:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5add595d3dd7a907cf34a9e84493919ea0014922",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T13:22:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54b60abf9f220ca20c6cc891c4f25bf1f6b86328",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T13:22:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d57474c46b804a4412ce7a1c7127f96ee2bcdc5f",
"body": "Motivation:\n\nWe need to specify the working directory otherwise we can't find the script\n\nModifications:\n\nAdd working-directory: ./prepare-release-workspace/\n\nResult:\n\nRelease workflow should be fixed",
"is_bot": false,
"headline": "Add missing working-directory",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-29T13:20:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d06f89813422c6c87252c477088b6011d46f19a4",
"body": "…2.0.71.Final",
"is_bot": false,
"headline": "[maven-release-plugin] rollback the release of netty-tcnative-parent-…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T13:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4383cf34298ac85a54333d399a52044f8582753",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T12:59:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2996c98b0840dd0b861738d440a02154ebb46ead",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T12:59:47Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 64,
"latest_release_at": "2021-02-01T08:46:08Z",
"latest_release_tag": "gcc-precompile",
"releases_from_tags": false,
"days_since_last_push": 10,
"active_weeks_last_year": 26,
"days_since_latest_release": 2005,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "io.netty:netty-tcnative-classes",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "maven",
"matches_repo": null,
"registry_url": "https://central.sonatype.com/artifact/io.netty/netty-tcnative-classes",
"is_deprecated": false,
"latest_version": "2.0.81.Final",
"repository_url": null,
"versions_count": 36,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T17:31:27Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
},
{
"name": "io.netty:netty-tcnative",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "maven",
"matches_repo": null,
"registry_url": "https://central.sonatype.com/artifact/io.netty/netty-tcnative",
"is_deprecated": false,
"latest_version": "2.0.81.Final",
"repository_url": null,
"versions_count": 119,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T17:31:25Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 196,
"stars": 266,
"watchers": 39,
"fork_history": {
"days": [
{
"date": "2014-08-04",
"count": 1
},
{
"date": "2014-08-31",
"count": 1
},
{
"date": "2014-09-12",
"count": 1
},
{
"date": "2014-10-08",
"count": 1
},
{
"date": "2014-10-22",
"count": 1
},
{
"date": "2014-11-13",
"count": 1
},
{
"date": "2015-02-25",
"count": 1
},
{
"date": "2015-03-13",
"count": 1
},
{
"date": "2015-03-17",
"count": 1
},
{
"date": "2015-05-16",
"count": 1
},
{
"date": "2015-05-30",
"count": 1
},
{
"date": "2015-06-02",
"count": 1
},
{
"date": "2015-06-15",
"count": 1
},
{
"date": "2015-09-08",
"count": 1
},
{
"date": "2015-09-09",
"count": 1
},
{
"date": "2015-11-26",
"count": 1
},
{
"date": "2015-12-22",
"count": 1
},
{
"date": "2016-01-13",
"count": 1
},
{
"date": "2016-01-21",
"count": 1
},
{
"date": "2016-01-27",
"count": 1
},
{
"date": "2016-03-12",
"count": 1
},
{
"date": "2016-03-13",
"count": 1
},
{
"date": "2016-03-25",
"count": 1
},
{
"date": "2016-03-27",
"count": 1
},
{
"date": "2016-04-29",
"count": 1
},
{
"date": "2016-07-07",
"count": 1
},
{
"date": "2016-07-14",
"count": 1
},
{
"date": "2016-08-06",
"count": 1
},
{
"date": "2016-08-16",
"count": 1
},
{
"date": "2016-08-23",
"count": 1
},
{
"date": "2016-09-19",
"count": 1
},
{
"date": "2016-11-01",
"count": 2
},
{
"date": "2016-11-14",
"count": 1
},
{
"date": "2016-11-25",
"count": 1
},
{
"date": "2016-12-01",
"count": 1
},
{
"date": "2016-12-06",
"count": 1
},
{
"date": "2017-01-12",
"count": 1
},
{
"date": "2017-01-19",
"count": 1
},
{
"date": "2017-01-24",
"count": 1
},
{
"date": "2017-02-27",
"count": 1
},
{
"date": "2017-03-08",
"count": 1
},
{
"date": "2017-03-17",
"count": 1
},
{
"date": "2017-03-23",
"count": 1
},
{
"date": "2017-03-28",
"count": 1
},
{
"date": "2017-04-12",
"count": 1
},
{
"date": "2017-04-18",
"count": 1
},
{
"date": "2017-06-02",
"count": 1
},
{
"date": "2017-06-06",
"count": 1
},
{
"date": "2017-06-30",
"count": 1
},
{
"date": "2017-10-05",
"count": 1
},
{
"date": "2017-10-17",
"count": 1
},
{
"date": "2017-11-25",
"count": 1
},
{
"date": "2017-12-24",
"count": 1
},
{
"date": "2018-02-08",
"count": 1
},
{
"date": "2018-04-03",
"count": 1
},
{
"date": "2018-04-12",
"count": 1
},
{
"date": "2018-06-11",
"count": 1
},
{
"date": "2018-07-17",
"count": 1
},
{
"date": "2018-08-06",
"count": 1
},
{
"date": "2018-08-08",
"count": 1
},
{
"date": "2018-08-10",
"count": 1
},
{
"date": "2018-09-26",
"count": 1
},
{
"date": "2018-10-30",
"count": 1
},
{
"date": "2018-11-24",
"count": 1
},
{
"date": "2018-12-07",
"count": 1
},
{
"date": "2018-12-20",
"count": 2
},
{
"date": "2019-01-17",
"count": 1
},
{
"date": "2019-02-20",
"count": 2
},
{
"date": "2019-02-27",
"count": 1
},
{
"date": "2019-03-08",
"count": 1
},
{
"date": "2019-04-01",
"count": 1
},
{
"date": "2019-05-12",
"count": 1
},
{
"date": "2019-05-30",
"count": 1
},
{
"date": "2019-06-28",
"count": 1
},
{
"date": "2019-06-30",
"count": 1
},
{
"date": "2019-07-03",
"count": 1
},
{
"date": "2019-07-08",
"count": 1
},
{
"date": "2019-07-31",
"count": 1
},
{
"date": "2019-08-20",
"count": 1
},
{
"date": "2019-08-27",
"count": 1
},
{
"date": "2019-08-30",
"count": 1
},
{
"date": "2019-09-06",
"count": 1
},
{
"date": "2019-09-20",
"count": 1
},
{
"date": "2019-10-22",
"count": 1
},
{
"date": "2019-11-04",
"count": 1
},
{
"date": "2019-11-28",
"count": 1
},
{
"date": "2019-11-29",
"count": 1
},
{
"date": "2020-01-27",
"count": 1
},
{
"date": "2020-01-31",
"count": 1
},
{
"date": "2020-02-14",
"count": 1
},
{
"date": "2020-03-03",
"count": 2
},
{
"date": "2020-03-07",
"count": 1
},
{
"date": "2020-04-30",
"count": 1
},
{
"date": "2020-05-29",
"count": 1
},
{
"date": "2020-06-02",
"count": 1
},
{
"date": "2020-06-04",
"count": 1
},
{
"date": "2020-06-11",
"count": 1
},
{
"date": "2020-06-20",
"count": 1
},
{
"date": "2020-06-30",
"count": 1
},
{
"date": "2020-08-08",
"count": 1
},
{
"date": "2020-08-13",
"count": 1
},
{
"date": "2020-09-17",
"count": 1
},
{
"date": "2020-09-30",
"count": 1
},
{
"date": "2020-10-30",
"count": 1
},
{
"date": "2020-11-03",
"count": 1
},
{
"date": "2020-11-10",
"count": 1
},
{
"date": "2021-01-23",
"count": 1
},
{
"date": "2021-01-27",
"count": 1
},
{
"date": "2021-02-22",
"count": 1
},
{
"date": "2021-02-26",
"count": 1
},
{
"date": "2021-02-27",
"count": 1
},
{
"date": "2021-03-02",
"count": 1
},
{
"date": "2021-03-26",
"count": 1
},
{
"date": "2021-04-05",
"count": 1
},
{
"date": "2021-04-26",
"count": 1
},
{
"date": "2021-05-04",
"count": 1
},
{
"date": "2021-05-26",
"count": 1
},
{
"date": "2021-06-17",
"count": 1
},
{
"date": "2021-06-25",
"count": 1
},
{
"date": "2021-07-02",
"count": 1
},
{
"date": "2021-07-31",
"count": 1
},
{
"date": "2021-08-30",
"count": 1
},
{
"date": "2021-09-16",
"count": 1
},
{
"date": "2021-09-30",
"count": 1
},
{
"date": "2021-11-08",
"count": 1
},
{
"date": "2021-11-17",
"count": 1
},
{
"date": "2021-12-12",
"count": 2
},
{
"date": "2022-01-04",
"count": 1
},
{
"date": "2022-01-26",
"count": 1
},
{
"date": "2022-02-07",
"count": 1
},
{
"date": "2022-03-29",
"count": 1
},
{
"date": "2022-04-04",
"count": 1
},
{
"date": "2022-04-19",
"count": 2
},
{
"date": "2022-05-26",
"count": 1
},
{
"date": "2022-06-14",
"count": 1
},
{
"date": "2022-09-23",
"count": 1
},
{
"date": "2022-10-09",
"count": 1
},
{
"date": "2022-10-31",
"count": 1
},
{
"date": "2022-11-07",
"count": 1
},
{
"date": "2022-11-10",
"count": 1
},
{
"date": "2022-11-18",
"count": 1
},
{
"date": "2022-11-23",
"count": 1
},
{
"date": "2022-12-22",
"count": 1
},
{
"date": "2023-01-04",
"count": 1
},
{
"date": "2023-01-17",
"count": 2
},
{
"date": "2023-02-04",
"count": 1
},
{
"date": "2023-03-20",
"count": 1
},
{
"date": "2023-04-22",
"count": 1
},
{
"date": "2023-06-19",
"count": 1
},
{
"date": "2023-07-19",
"count": 2
},
{
"date": "2023-08-21",
"count": 1
},
{
"date": "2023-09-06",
"count": 1
},
{
"date": "2023-09-11",
"count": 1
},
{
"date": "2023-10-12",
"count": 1
},
{
"date": "2023-11-15",
"count": 1
},
{
"date": "2024-03-15",
"count": 1
},
{
"date": "2024-03-31",
"count": 1
},
{
"date": "2024-04-10",
"count": 1
},
{
"date": "2024-06-07",
"count": 1
},
{
"date": "2024-07-25",
"count": 1
},
{
"date": "2024-08-07",
"count": 1
},
{
"date": "2024-08-13",
"count": 1
},
{
"date": "2024-11-18",
"count": 1
},
{
"date": "2025-01-09",
"count": 1
},
{
"date": "2025-01-30",
"count": 1
},
{
"date": "2025-03-18",
"count": 1
},
{
"date": "2025-05-23",
"count": 1
},
{
"date": "2025-06-03",
"count": 1
},
{
"date": "2025-06-10",
"count": 1
},
{
"date": "2025-06-25",
"count": 2
},
{
"date": "2025-10-14",
"count": 1
},
{
"date": "2025-10-31",
"count": 1
},
{
"date": "2025-11-04",
"count": 1
},
{
"date": "2025-11-24",
"count": 1
},
{
"date": "2026-01-27",
"count": 1
},
{
"date": "2026-02-14",
"count": 1
},
{
"date": "2026-04-28",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-14",
"count": 1
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-11",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
},
{
"date": "2026-07-29",
"count": 1
}
],
"complete": true,
"collected": 193,
"total_forks": 196
},
"star_history": null,
"open_issues_and_prs": 42
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"boringssl-static/pom.xml",
"libressl-static/pom.xml",
"openssl-classes/pom.xml",
"openssl-dynamic/pom.xml",
"openssl-static/pom.xml",
"pom.xml"
],
"largest_source_bytes": 117626,
"source_files_sampled": 49,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"boringssl-static/pom.xml",
"libressl-static/pom.xml",
"openssl-classes/pom.xml",
"openssl-dynamic/pom.xml",
"openssl-static/pom.xml",
"pom.xml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 1,
"malicious_count": 0,
"assessed_package": "maven:io.netty:netty-tcnative@2.0.81.Final",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [
{
"name": "${project.groupId}:netty-tcnative-classes",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "${project.groupId}:netty-tcnative-classes",
"manifest": "libressl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "${project.groupId}:netty-tcnative-classes",
"manifest": "openssl-dynamic/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "${project.groupId}:netty-tcnative-classes",
"manifest": "openssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "org.apache.ant:ant",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "1.10.11"
},
{
"name": "org.apache.ant:ant-commons-net",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "1.9.6"
},
{
"name": "ant-contrib:ant-contrib",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "1.0b3"
},
{
"name": "io.netty:netty-jni-util",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "${jniUtilVersion}"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "ant-contrib:ant-contrib",
"direct": true,
"version": "1.0b3",
"ecosystem": "maven"
},
{
"name": "io.netty:netty-jni-util",
"direct": true,
"version": "0.0.10",
"ecosystem": "maven"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"direct": true,
"version": "2.0.82.Final-SNAPSHOT",
"ecosystem": "maven"
},
{
"name": "org.apache.ant:ant",
"direct": true,
"version": "1.10.11",
"ecosystem": "maven"
},
{
"name": "org.apache.ant:ant-commons-net",
"direct": true,
"version": "1.9.6",
"ecosystem": "maven"
},
{
"name": "com.github.siom79.japicmp:japicmp-maven-plugin",
"direct": false,
"version": "0.15.4",
"ecosystem": "maven"
},
{
"name": "com.googlecode.maven-download-plugin:download-maven-plugin",
"direct": false,
"version": "1.6.8",
"ecosystem": "maven"
},
{
"name": "io.github.dmlloyd.module-info:module-info",
"direct": false,
"version": "2.1",
"ecosystem": "maven"
},
{
"name": "io.netty:netty-build-common",
"direct": false,
"version": "31",
"ecosystem": "maven"
},
{
"name": "org.apache.ant:maven-antrun-plugin",
"direct": false,
"version": "1.8",
"ecosystem": "maven"
},
{
"name": "org.apache.felix:maven-bundle-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.felix:maven-bundle-plugin",
"direct": false,
"version": "5.1.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-dependency-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-jar-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-javadoc-plugin",
"direct": false,
"version": "3.3.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-source-plugin",
"direct": false,
"version": "3.3.1",
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:build-helper-maven-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:build-helper-maven-plugin",
"direct": false,
"version": "3.2.0",
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:buildnumber-maven-plugin",
"direct": false,
"version": "1.4",
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:flatten-maven-plugin",
"direct": false,
"version": "1.2.2",
"ecosystem": "maven"
},
{
"name": "org.fusesource.hawtjni:hawtjni-maven-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.fusesource.hawtjni:hawtjni-maven-plugin",
"direct": false,
"version": "1.18",
"ecosystem": "maven"
},
{
"name": "org.fusesource.hawtjni:maven-hawtjni-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.junit.jupiter:junit-jupiter-api",
"direct": false,
"version": "5.9.0",
"ecosystem": "maven"
},
{
"name": "org.junit.jupiter:junit-jupiter-engine",
"direct": false,
"version": "5.9.0",
"ecosystem": "maven"
},
{
"name": "org.sonatype.central:central-publishing-maven-plugin",
"direct": false,
"version": "0.7.0",
"ecosystem": "maven"
},
{
"name": "org.sonatype.plugins:nexus-staging-maven-plugin",
"direct": false,
"version": "1.7.0",
"ecosystem": "maven"
}
],
"collected": true,
"truncated": false,
"total_count": 27,
"direct_count": 5,
"indirect_count": 22
}
},
"maintainership": {
"issues": {
"open_prs": 7,
"merged_prs": 420,
"open_issues": 35,
"closed_ratio": 0.895,
"closed_issues": 297,
"closed_unmerged_prs": 231
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "normanmaurer",
"commits": 639,
"avatar_url": "https://avatars.githubusercontent.com/u/439362?v=4"
},
{
"type": "User",
"login": "netty-project-bot",
"commits": 111,
"avatar_url": "https://avatars.githubusercontent.com/u/78738768?v=4"
},
{
"type": "User",
"login": "Scottmitch",
"commits": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/7562868?v=4"
},
{
"type": "User",
"login": "davidben",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/109690?v=4"
},
{
"type": "User",
"login": "carl-mastrangelo",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/8943572?v=4"
},
{
"type": "User",
"login": "colleenkinross",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/276101670?v=4"
},
{
"type": "User",
"login": "trustin",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/173918?v=4"
},
{
"type": "User",
"login": "chrisvest",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/7993?v=4"
},
{
"type": "User",
"login": "NicoK",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/213026?v=4"
},
{
"type": "User",
"login": "fondemen",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/621289?v=4"
}
],
"contributors_sampled": 61,
"top_contributor_share": 0.718
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci-build.yml",
"ci-deploy.yml",
"ci-pr.yml",
"ci-release.yml",
"codeql-analysis.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 4,
"reason": "Found 12/30 approved changesets -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 14 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "16 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "6ad94b7772fb330999d38ac2153f838cb6259357",
"ran_at": "2026-07-30T23:31:28Z",
"aggregate_score": 7.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T07:17:31Z",
"oldest_open_prs": [
{
"number": 794,
"created_at": "2023-06-20T06:45:00Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 819,
"created_at": "2023-09-04T20:29:25Z",
"last_comment_at": "2023-11-17T21:58:58Z",
"last_comment_author": "pnacht"
},
{
"number": 869,
"created_at": "2024-04-26T08:36:24Z",
"last_comment_at": "2024-04-26T08:46:38Z",
"last_comment_author": "klaren"
},
{
"number": 953,
"created_at": "2026-02-12T04:47:31Z",
"last_comment_at": "2026-02-12T17:01:23Z",
"last_comment_author": "jmcrawford45"
},
{
"number": 968,
"created_at": "2026-04-11T11:03:33Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 992,
"created_at": "2026-07-23T17:51:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 993,
"created_at": "2026-07-29T05:53:41Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-07T22:19:02Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 152,
"created_at": "2016-06-08T18:21:33Z",
"last_comment_at": "2017-03-01T14:55:38Z",
"last_comment_author": "anuraaga"
},
{
"number": 257,
"created_at": "2017-03-28T17:48:00Z",
"last_comment_at": "2017-03-28T17:57:17Z",
"last_comment_author": "normanmaurer"
},
{
"number": 306,
"created_at": "2017-09-25T14:11:02Z",
"last_comment_at": "2017-10-25T05:32:45Z",
"last_comment_author": "normanmaurer"
},
{
"number": 332,
"created_at": "2018-03-14T08:01:29Z",
"last_comment_at": "2018-08-08T00:25:26Z",
"last_comment_author": "rtdavies"
},
{
"number": 463,
"created_at": "2019-05-16T14:45:13Z",
"last_comment_at": "2019-11-01T13:27:45Z",
"last_comment_author": "normanmaurer"
},
{
"number": 518,
"created_at": "2020-01-08T12:12:14Z",
"last_comment_at": "2024-02-23T10:28:44Z",
"last_comment_author": "hsomu"
},
{
"number": 530,
"created_at": "2020-02-26T15:09:42Z",
"last_comment_at": "2020-03-23T17:09:09Z",
"last_comment_author": "techpavan"
},
{
"number": 531,
"created_at": "2020-03-10T09:41:59Z",
"last_comment_at": "2021-04-05T05:53:59Z",
"last_comment_author": "shinni802"
},
{
"number": 537,
"created_at": "2020-04-11T10:39:01Z",
"last_comment_at": "2024-05-10T08:16:35Z",
"last_comment_author": "zouxyan"
},
{
"number": 551,
"created_at": "2020-06-09T11:32:19Z",
"last_comment_at": "2024-02-27T22:42:08Z",
"last_comment_author": "SercanKaraoglu"
},
{
"number": 588,
"created_at": "2020-11-12T05:16:13Z",
"last_comment_at": "2020-12-07T08:21:00Z",
"last_comment_author": "normanmaurer"
},
{
"number": 619,
"created_at": "2021-02-02T19:08:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 722,
"created_at": "2022-04-21T20:29:44Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 727,
"created_at": "2022-05-06T02:03:39Z",
"last_comment_at": "2023-07-19T08:35:53Z",
"last_comment_author": "conet"
},
{
"number": 732,
"created_at": "2022-06-25T16:08:24Z",
"last_comment_at": "2023-08-04T13:54:26Z",
"last_comment_author": "jat-chun"
},
{
"number": 746,
"created_at": "2022-09-09T23:18:30Z",
"last_comment_at": "2023-01-19T14:26:11Z",
"last_comment_author": "normanmaurer"
},
{
"number": 775,
"created_at": "2023-02-28T14:39:01Z",
"last_comment_at": "2023-07-12T22:33:37Z",
"last_comment_author": "normanmaurer"
},
{
"number": 786,
"created_at": "2023-04-25T07:07:19Z",
"last_comment_at": "2023-06-20T06:47:02Z",
"last_comment_author": "normanmaurer"
},
{
"number": 793,
"created_at": "2023-06-13T18:54:22Z",
"last_comment_at": "2023-10-24T15:37:57Z",
"last_comment_author": "pnacht"
},
{
"number": 799,
"created_at": "2023-07-12T13:23:05Z",
"last_comment_at": "2024-06-10T09:07:55Z",
"last_comment_author": "kolargol"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/netty/netty-tcnative",
"host": "github.com",
"name": "netty-tcnative",
"owner": "netty"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"security": 79,
"vitality": 60,
"community": 68,
"governance": 67,
"engineering": 57
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 60,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"commits_last_year": 64,
"human_commit_share": 1,
"days_since_last_push": 10,
"active_weeks_last_year": 26
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 10 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "26/52 weeks with commits",
"points": 18,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 26
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "64 commits in the last year",
"points": 16.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 64
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "16 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"releases_count": 1,
"latest_release_tag": "gcc-precompile",
"releases_from_tags": false,
"days_since_latest_release": 2005,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2005 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2005
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 12,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 12 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 12
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 68,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"forks": 196,
"stars": 266,
"watchers": 39,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "266 stars",
"points": 39.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 266
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "196 forks",
"points": 19.1,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 196
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "39 watchers",
"points": 8.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 39
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 67,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 61,
"top_contributor_share": 0.718
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 72% of commits",
"points": 6.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 72
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "61 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 61
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"merged_prs": 420,
"open_issues": 35,
"closed_issues": 297,
"issue_closed_ratio": 0.895,
"closed_unmerged_prs": 231
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "90% of issues closed",
"points": 41.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 90
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "420/651 decided PRs merged",
"points": 24.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 420,
"decided": 651
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 12/30 approved changesets -- score normalized to 4",
"points": 6,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"followers": 412,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "netty",
"public_repos": 16,
"account_age_days": 5742
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "412 followers of netty",
"points": 18.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 412,
"login": "netty"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "16 public repos, account ~15 yr old",
"points": 21,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 16
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"io.netty:netty-tcnative-classes",
"io.netty:netty-tcnative"
],
"ecosystems": "maven",
"any_deprecated": false,
"min_days_since_publish": 10
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on maven",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "maven"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 10 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 10
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "119 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 119
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 57,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 79,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 7.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 12/30 approved changesets -- score normalized to 4",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "16 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:io.netty:netty-tcnative@2.0.81.Final runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "maven:io.netty:netty-tcnative@2.0.81.Final",
"assessed": 1
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 1,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 1,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 13
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 55,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.62,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "62 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 33.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 62,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"boringssl-static/pom.xml",
"libressl-static/pom.xml",
"openssl-classes/pom.xml",
"openssl-dynamic/pom.xml",
"openssl-static/pom.xml",
"pom.xml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "boringssl-static/pom.xml, libressl-static/pom.xml, openssl-classes/pom.xml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "boringssl-static/pom.xml, libressl-static/pom.xml, openssl-classes/pom.xml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 117626,
"source_files_sampled": 49,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/49 source files over 60KB",
"points": 52.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 49,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.14.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch maven package 'io.netty:netty-tcnative-openssl-static' from its registry",
"Could not fetch maven package 'io.netty:netty-tcnative-libressl-static' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-30T23:31:53.819631Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/netty/netty-tcnative.svg",
"full_name": "netty/netty-tcnative",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con netty/netty-tcnative. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.14.0, esquema v0.27.0 — metodología completa · wiki de métricas.
