openrewrite/rewrite-github-actions tiene un índice de salud de 63 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Vitality (93/100) y la más baja, Community & Adoption (37/100). Se actualizó por última vez hace 3 días. 2 personas concentran la mayor parte del trabajo reciente.
63
global / 100
Moderado
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
63
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
Código verificable por tipos — Java (tipado estático)
55/55
Tamaños de archivo manejables — 0/100 archivos fuente de más de 60 KB
Datos de entrada utilizados
primary_language
Java
largest_source_bytes
28.457
source_files_sampled
100
oversized_source_files
0
Datos clave
1estrellas de GitHub
28contribuidores
87commits en los últimos 12 meses
3días desde el último push
100versiones publicadas
2factor bus
50issues abiertas
Mavenecosistemas de paquetes
Advertencias de recopilación de datos
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Más detalle
Historial de estrellas y forks 0 ★ / 5 ⇿
0Estrellas
5Forks
31Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 0Menor 19Parche 12
Cada punto abarca 2 días.
OpenSSF Scorecard 5.2 / 10
5.2agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-25 17:13 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 0 paquetes directos y 0 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Registro
Paquete
Versión
Relación
Avisos de dependencias sin evaluar
El cotejo de avisos no pudo ejecutarse para este informe: No resolved dependencies to assess
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"openrewrite",
"openrewrite-recipes"
],
"is_fork": false,
"size_kb": 2206,
"has_wiki": false,
"homepage": null,
"languages": {
"Java": 650248
},
"pushed_at": "2026-07-22T14:56:06Z",
"created_at": "2021-07-27T14:29:53Z",
"owner_type": "Organization",
"updated_at": "2026-07-22T14:59:57Z",
"description": "OpenRewrite recipes for performing GitHub action hygiene and migration tasks.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Java",
"significant_languages": [
"Java"
]
},
"owner": {
"blog": "https://docs.openrewrite.org",
"name": "OpenRewrite",
"type": "Organization",
"login": "openrewrite",
"company": null,
"location": "San Francisco, CA",
"followers": 984,
"avatar_url": "https://avatars.githubusercontent.com/u/61478321?v=4",
"created_at": "2020-02-25T21:27:36Z",
"is_verified": null,
"public_repos": 75,
"account_age_days": 2341
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v3.27.0",
"kind": "minor",
"published_at": "2026-07-14T05:22:32Z"
},
{
"tag": "v3.26.0",
"kind": "minor",
"published_at": "2026-07-01T06:17:54Z"
},
{
"tag": "v3.25.0",
"kind": "minor",
"published_at": "2026-06-17T09:49:55Z"
},
{
"tag": "v3.24.0",
"kind": "minor",
"published_at": "2026-06-03T13:21:10Z"
},
{
"tag": "v3.23.0",
"kind": "minor",
"published_at": "2026-05-21T10:14:55Z"
},
{
"tag": "v3.22.0",
"kind": "minor",
"published_at": "2026-05-06T23:19:34Z"
},
{
"tag": "v3.21.1",
"kind": "patch",
"published_at": "2026-04-27T09:07:55Z"
},
{
"tag": "v3.21.0",
"kind": "minor",
"published_at": "2026-04-21T07:30:04Z"
},
{
"tag": "v3.20.0",
"kind": "minor",
"published_at": "2026-04-08T12:04:32Z"
},
{
"tag": "v3.19.0",
"kind": "minor",
"published_at": "2026-03-25T09:26:50Z"
},
{
"tag": "v3.18.4",
"kind": "patch",
"published_at": "2026-03-12T12:43:58Z"
},
{
"tag": "v3.18.3",
"kind": "patch",
"published_at": "2026-03-04T16:27:32Z"
},
{
"tag": "v3.18.2",
"kind": "patch",
"published_at": "2026-02-25T12:18:50Z"
},
{
"tag": "v3.18.1",
"kind": "patch",
"published_at": "2026-02-11T08:44:03Z"
},
{
"tag": "v3.18.0",
"kind": "minor",
"published_at": "2026-01-20T19:01:33Z"
},
{
"tag": "v3.17.0",
"kind": "minor",
"published_at": "2026-01-07T15:45:13Z"
},
{
"tag": "v3.16.1",
"kind": "patch",
"published_at": "2025-12-16T15:16:47Z"
},
{
"tag": "v3.16.0",
"kind": "minor",
"published_at": "2025-12-05T10:16:19Z"
},
{
"tag": "v3.15.0",
"kind": "minor",
"published_at": "2025-11-20T11:28:42Z"
},
{
"tag": "v3.14.0",
"kind": "minor",
"published_at": "2025-11-04T13:00:20Z"
},
{
"tag": "v3.13.0",
"kind": "minor",
"published_at": "2025-10-22T10:34:11Z"
},
{
"tag": "v3.12.0",
"kind": "minor",
"published_at": "2025-10-10T17:03:44Z"
},
{
"tag": "v3.11.0",
"kind": "minor",
"published_at": "2025-09-24T12:10:48Z"
},
{
"tag": "v3.10.2",
"kind": "patch",
"published_at": "2025-09-10T10:36:02Z"
},
{
"tag": "v3.10.1",
"kind": "patch",
"published_at": "2025-08-27T15:39:05Z"
},
{
"tag": "v3.10.0",
"kind": "minor",
"published_at": "2025-08-12T20:51:02Z"
},
{
"tag": "v3.9.2",
"kind": "patch",
"published_at": "2025-07-23T21:23:15Z"
},
{
"tag": "v3.9.1",
"kind": "patch",
"published_at": "2025-07-23T10:31:19Z"
},
{
"tag": "v3.9.0",
"kind": "minor",
"published_at": "2025-07-09T13:33:37Z"
},
{
"tag": "v3.8.0",
"kind": "minor",
"published_at": "2025-06-25T10:48:43Z"
},
{
"tag": "v3.7.0",
"kind": "minor",
"published_at": "2025-05-28T14:05:03Z"
},
{
"tag": "v3.6.0",
"kind": "minor",
"published_at": "2025-05-07T16:38:04Z"
},
{
"tag": "v3.5.0",
"kind": "minor",
"published_at": "2025-04-24T16:17:14Z"
},
{
"tag": "v3.4.1",
"kind": "patch",
"published_at": "2025-04-10T14:18:23Z"
},
{
"tag": "v3.4.0",
"kind": "minor",
"published_at": "2025-04-09T17:31:44Z"
},
{
"tag": "v3.3.1",
"kind": "patch",
"published_at": "2025-03-27T16:27:16Z"
},
{
"tag": "v3.3.0",
"kind": "minor",
"published_at": "2025-03-11T18:05:35Z"
},
{
"tag": "v3.2.0",
"kind": "minor",
"published_at": "2025-02-20T16:27:42Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2025-02-07T16:55:30Z"
},
{
"tag": "v3.0.2",
"kind": "patch",
"published_at": "2025-01-24T13:11:35Z"
},
{
"tag": "v3.0.1",
"kind": "patch",
"published_at": "2025-01-17T10:55:50Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2025-01-10T16:26:20Z"
},
{
"tag": "v2.11.0",
"kind": "minor",
"published_at": "2024-12-18T17:05:05Z"
},
{
"tag": "v2.10.1",
"kind": "patch",
"published_at": "2024-11-28T16:40:10Z"
},
{
"tag": "v2.10.0",
"kind": "minor",
"published_at": "2024-11-27T16:17:54Z"
},
{
"tag": "v2.9.2",
"kind": "patch",
"published_at": "2024-11-13T15:45:06Z"
},
{
"tag": "v2.9.1",
"kind": "patch",
"published_at": "2024-11-08T20:01:08Z"
},
{
"tag": "v2.9.0",
"kind": "minor",
"published_at": "2024-11-06T19:04:08Z"
},
{
"tag": "v2.8.2",
"kind": "patch",
"published_at": "2024-10-23T13:54:25Z"
},
{
"tag": "v2.8.1",
"kind": "patch",
"published_at": "2024-10-09T15:52:14Z"
},
{
"tag": "v2.8.0",
"kind": "minor",
"published_at": "2024-09-24T16:44:30Z"
},
{
"tag": "v2.7.5",
"kind": "patch",
"published_at": "2024-09-11T16:50:18Z"
},
{
"tag": "v2.7.4",
"kind": "patch",
"published_at": "2024-08-28T13:15:46Z"
},
{
"tag": "v2.7.3",
"kind": "patch",
"published_at": "2024-08-12T18:44:11Z"
},
{
"tag": "v2.7.2",
"kind": "patch",
"published_at": "2024-08-08T08:46:12Z"
},
{
"tag": "v2.7.1",
"kind": "patch",
"published_at": "2024-07-31T11:03:17Z"
},
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2024-07-15T08:42:13Z"
},
{
"tag": "v2.6.2",
"kind": "patch",
"published_at": "2024-07-03T16:21:23Z"
},
{
"tag": "v2.6.1",
"kind": "patch",
"published_at": "2024-06-19T17:00:44Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2024-06-19T08:20:26Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2024-06-07T22:10:52Z"
},
{
"tag": "v2.4.2",
"kind": "patch",
"published_at": "2024-05-22T21:06:55Z"
},
{
"tag": "v2.4.1",
"kind": "patch",
"published_at": "2024-05-22T12:52:03Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2024-05-18T05:00:33Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2024-05-08T12:31:01Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2024-04-24T13:45:38Z"
},
{
"tag": "v2.1.7",
"kind": "patch",
"published_at": "2024-03-19T17:56:26Z"
},
{
"tag": "v2.1.6",
"kind": "patch",
"published_at": "2024-03-12T21:27:16Z"
},
{
"tag": "v2.1.5",
"kind": "patch",
"published_at": "2024-02-20T19:46:00Z"
},
{
"tag": "v2.1.4",
"kind": "patch",
"published_at": "2024-02-06T12:24:28Z"
},
{
"tag": "v2.1.3",
"kind": "patch",
"published_at": "2024-01-23T13:27:03Z"
},
{
"tag": "v2.1.2",
"kind": "patch",
"published_at": "2024-01-16T12:21:06Z"
},
{
"tag": "v2.1.1",
"kind": "patch",
"published_at": "2024-01-09T13:54:39Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2024-01-09T10:33:01Z"
},
{
"tag": "v2.0.14",
"kind": "patch",
"published_at": "2023-12-21T13:19:18Z"
},
{
"tag": "v2.0.13",
"kind": "patch",
"published_at": "2023-12-20T09:58:55Z"
},
{
"tag": "v2.0.12",
"kind": "patch",
"published_at": "2023-12-14T10:52:14Z"
},
{
"tag": "v2.0.11",
"kind": "patch",
"published_at": "2023-12-08T09:37:04Z"
},
{
"tag": "v2.0.10",
"kind": "patch",
"published_at": "2023-12-04T18:48:28Z"
},
{
"tag": "v2.0.9",
"kind": "patch",
"published_at": "2023-11-24T23:45:48Z"
},
{
"tag": "v2.0.8",
"kind": "patch",
"published_at": "2023-11-24T14:46:13Z"
},
{
"tag": "v2.0.7",
"kind": "patch",
"published_at": "2023-10-27T22:31:44Z"
},
{
"tag": "v2.0.6",
"kind": "patch",
"published_at": "2023-10-03T01:31:00Z"
},
{
"tag": "v2.0.5",
"kind": "patch",
"published_at": "2023-09-12T14:16:13Z"
},
{
"tag": "v2.0.4",
"kind": "patch",
"published_at": "2023-08-24T18:19:07Z"
},
{
"tag": "v2.0.3",
"kind": "patch",
"published_at": "2023-07-18T07:26:46Z"
},
{
"tag": "v2.0.2",
"kind": "patch",
"published_at": "2023-07-04T08:54:36Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2023-06-14T01:58:50Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2023-06-02T01:21:43Z"
},
{
"tag": "v1.20.0",
"kind": "minor",
"published_at": "2023-04-21T00:35:58Z"
},
{
"tag": "v1.19.0",
"kind": "minor",
"published_at": "2023-04-04T01:02:20Z"
},
{
"tag": "v1.18.0",
"kind": "minor",
"published_at": "2023-03-15T02:35:32Z"
},
{
"tag": "v1.17.0",
"kind": "minor",
"published_at": "2023-02-16T04:44:43Z"
},
{
"tag": "v1.16.0",
"kind": "minor",
"published_at": "2023-01-20T21:56:23Z"
},
{
"tag": "v1.15.0",
"kind": "minor",
"published_at": "2022-12-12T22:13:26Z"
},
{
"tag": "v1.14.0",
"kind": "minor",
"published_at": "2022-11-17T02:38:38Z"
},
{
"tag": "v1.13.0",
"kind": "minor",
"published_at": "2022-10-20T01:18:34Z"
},
{
"tag": "v1.12.0",
"kind": "minor",
"published_at": "2022-10-11T01:36:49Z"
},
{
"tag": "v1.11.0",
"kind": "minor",
"published_at": "2022-09-22T20:47:42Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2022-09-02T20:30:50Z"
}
],
"recent_commits": [
{
"oid": "48c75c3e1fce15a5bbc459f3d2a8fac62a24400d",
"body": null,
"is_bot": false,
"headline": "Set Develocity `projectId` to \"openrewrite\" (#206)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-07-22T14:56:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b991f1806da9bc1dc3af6ff10f9eb3ef7678decd",
"body": "Co-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Move Develocity to community.develocity.cloud",
"author_name": "tim@moderne.io",
"author_login": "timtebeek",
"committed_at": "2026-07-22T12:10:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c86697479318faece748ae8708deeca329d79ec8",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#205)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-20T09:54:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86c1c77e1692dfa4794ebf0745e77ef0b2d6dc61",
"body": "Co-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "timtebeek@gmail.com",
"author_login": "timtebeek",
"committed_at": "2026-07-13T07:45:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc8eff011dc84be422911a1d7943256457b21848",
"body": "* Match composite action definitions in action recipes\n\nGitHub Actions can be defined in composite action files (action.yml),\nnot just workflow files. Recipes that match action references now also\napply to these definitions, keyed on the required action.yml/action.yaml\nfilename rather than the conve\n[…]\ntch both workflow files and action definitions\n- Broaden ChangeAction/ChangeActionVersion JsonPath to reach\n runs.steps[].uses in composite actions\n\n* Register IsGitHubActionDefinition in recipes.csv",
"is_bot": false,
"headline": "Match composite action definitions in GitHub Action recipes (#203)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-07-10T22:25:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "216ed3ee29b77d0876567d261132fb9e70127f4c",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#202)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-06T12:49:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e623b8d4c6efeae71909b962f200b5a5afa8f0ac",
"body": "* UpgradeOfficialGitHubActions recipe\n\n* Add UpgradeOfficialGitHubActions to best practices; reuse LatestRelease comparator\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": false,
"headline": "UpgradeOfficialGitHubActions recipe (#201)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2026-06-30T17:31:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d40ee5cf382de16f3f71de77eabca468de5174d",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#200)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-29T11:40:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4aeaaf42125da33c136515c519c8b220ef1a1362",
"body": "…pt-in oldSha (#199)\n\n* Skip SHA-pinned `uses:` via opt-in `oldSha` in ChangeAction(Version)\n\nChangeActionVersion and ChangeAction stripped deliberate commit-SHA pins when rewriting a `uses:` reference. Add an opt-in `oldSha` sentinel mirroring Docker ChangeFrom's `oldDigest`:\n\n- unset -> change reg\n[…]\nome\nbefore the replacement. Updates the positional constructor callers in\nChangeActionTest and the generated recipes.csv option order to match.\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": false,
"headline": "Preserve SHA-pinned actions in ChangeAction/ChangeActionVersion via o…",
"author_name": "Merlin Bögershausen",
"author_login": "MBoegers",
"committed_at": "2026-06-29T08:23:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d9f74ec11495695db6adbab341d7e11a8f52988d",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/yESIGzVB0?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-06-23T07:37:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b759f13957322e3baf2193250bc5e3baaef7ef7",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#198)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T12:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b83c324fe11e393cfc50917f5c82637f1e809af",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(ci): bump actions/checkout from 6 to 7 (#197)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-18T19:22:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e7fa82ae1eb6771402184c1fe16aaf1a0350f5a",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.xml.security.RemoveOwaspSuppressions?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZQ%3D%3D#defaults=W3sidmFsdWUiOiIyMDI2LTA2LTE3IiwibmFtZSI6ImN1dE9mZkRhdGUifV0=\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Remove out-of-date OWASP suppressions",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-06-17T17:36:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6f5a44c4f3c7f097b5e43d5ac60e9a781cf5eab",
"body": null,
"is_bot": false,
"headline": "Pin test references to immutable patch tags to stop SHA drift (#196)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-06-16T20:46:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a3b34e9e967dd8ae61c3f3097cf09810e7b764b",
"body": "* Update known action SHAs\n\n* Update expected SHA in PinGitHubActionsToShaTest after known-SHA refresh\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": true,
"headline": "Update known action SHAs (#192)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-16T20:27:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2949c06c5ae20fb38fff56b0ee15e020d328a838",
"body": null,
"is_bot": false,
"headline": "Refresh the tibdex app token recipe (#194)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2026-06-16T14:01:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bba8bfb77d4480d103429f90c1ce491c3e0dca74",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.AddToGitignore?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZQ%3D%3D#defaults=W3sidmFsdWUiOiIuY29udGV4dC8iLCJuYW1lIjoiZW50cmllcyJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "git-ignore .context/",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2026-06-09T11:30:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d72245f48fa570796f584a2e462db0dfc0b3169",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#190)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-01T11:53:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c99c738f8c8aae162f1646a8454e86949a2d0177",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZS9PcGVuUmV3cml0ZQ%3D%3D#defaults=W3sidmFsdWUiOiI5LjUuMSIsIm5hbWUiOiJ2ZXJzaW9uIn0seyJ2YWx1ZSI6ImJpbiIsIm5hbWUiOiJkaXN0cmlidXRpb24ifSx7InZhbHVlIjoiYmFmYzE0MWI2MTlhZDYzNTBmZDk3NWZjOTAzMTU2ZGQ1YzE1MTk5OGNjOGIwNThlOGMxMDQ0YWI1ZjdiMDMxZiIsIm5hbWUiOiJkaXN0cmlidXRpb25DaGVja3N1bSJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Update Gradle wrapper 9.5.1",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-28T19:51:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd8baafbba769c6dd17c90e9288e237733c80fca",
"body": null,
"is_bot": false,
"headline": "Regenerate recipes.csv (#189)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-28T18:33:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d11ba8a4b822932a09b8d72b50d937d946c22a6",
"body": "* Update known action SHAs\n\n* Update stale codeql-action SHA in PinGitHubActionsToShaTest\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": true,
"headline": "Update known action SHAs (#188)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-26T07:35:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "befa0b4a4c1b86871e7e90a6a24bdc7a2fd9876b",
"body": "* Update known action SHAs\n\n* Update stale codeql-action SHA in PinGitHubActionsToShaTest\n\nThe codeql-action v3 SHA was updated in a3b2f53, but the test still\nreferenced the old SHA.\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": true,
"headline": "Update known action SHAs (#187)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-18T10:54:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81bb47b6fcfe52410141c93fc3dc1a87c59a3f86",
"body": "* Update test fixture to current codeql-action SHA\n\n* Remove stray worktree event file",
"is_bot": false,
"headline": "Update stale codeql-action SHA in PinGitHubActionsToShaTest (#186)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-15T12:04:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "590580154990f591fb6ed13c12efa5a1ee534996",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-15T10:52:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79aac92cdc06f923b6459193177f441aa0397e22",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#185)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-11T10:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ddfcf484450380b8c7c0dde58c1f624966d0462",
"body": "…o skip pinning SHAs (#184)",
"is_bot": false,
"headline": "feat(github-actions): Add an option of trusted owners list in order t…",
"author_name": "Mustapha Belmokhtar",
"author_login": "BelmoMusta",
"committed_at": "2026-05-06T16:00:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88a5e12f6cbbc3f5bbcbf5b0cbc3f373dd17aaca",
"body": "* Update known action SHAs\n\n* Update expected SHA in PinGitHubActionsToShaTest to match refreshed known-action-shas\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": false,
"headline": "Update known action SHAs (#183)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-04T10:40:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24130884c565efaebbf224e54cf93614da488aa5",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v6)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(ci): bump actions/checkout from 4 to 6 (#180)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-04T09:44:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a4e07c4ae9a1383a3ec1e828f6447ef748fda03",
"body": "…#182)\n\n`grep` exits 1 when an action's tags don't match the `v<N>[.<N>[.<N>]]`\npattern (e.g. `bazel-contrib/setup-bazel` uses `release-X.Y.Z`), and\nunder `pipefail` that killed the scheduled job. Append `|| true` so the\nloop skips the action instead of aborting.",
"is_bot": false,
"headline": "Tolerate actions with no matching version tags in update-known-shas (…",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-04T08:50:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e8788ddf9d0160f34a4aa2592dc621f98af80bb",
"body": "…ce boundary (#181)",
"is_bot": false,
"headline": "Fix tag comment placement when pinned `uses:` is followed by a sequen…",
"author_name": "Steve Elliott",
"author_login": "steve-aom-elliott",
"committed_at": "2026-05-02T01:19:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc0963123d655e9448955433d034a0a585c89aa4",
"body": "* Add PinGitHubActionsToSha recipe\n\nNew recipe that replaces mutable tag/branch references in GitHub Actions\nuses: declarations with immutable commit SHAs. Includes static SHA\nmapping for common actions with GitHub API fallback, configurable\nofficial action pinning, and comprehensive test coverage.\n\n[…]\nnue to round-trip\nas just `<tag>` so Dependabot/Renovate keep recognizing them.\n\n---------\n\nCo-authored-by: Steve Elliott <steve.aom.elliott@gmail.com>\nCo-authored-by: Steve Elliott <steve@moderne.io>",
"is_bot": false,
"headline": "Add recipe to pin GitHub Actions to commit SHAs (#169)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-29T22:19:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8007d783776e3e8a45020f3ec42871aa726582ad",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.ExamplesExtractor?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Extract documentation examples from tests",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2026-04-21T07:04:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce477df6d970dcb38567cd9f364fa2a3e7f71bd3",
"body": null,
"is_bot": false,
"headline": "Add GitHubActionsBestPractices recipe (#178)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-11T20:59:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d9d26054b8995d36dc559d07a2c44eeaa6326c8",
"body": "- wrapper-validation: v3 → v5 (last version before removal in v6)\n- setup-gradle: v3 → v6 (latest)",
"is_bot": false,
"headline": "Update Gradle action versions to latest (#177)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-11T20:52:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c94188483d1b2efb201d77d296b4b085c59ef6de",
"body": "* Add PreferBlockStyleJobDependencies recipe (#129)\n\nConvert flow-style `needs` sequences to block-style in GitHub Actions\nworkflows when a job depends on more than one other job.\n\n* Use ListUtils.map instead of stream()",
"is_bot": false,
"headline": "Add PreferBlockStyleJobDependencies recipe (#176)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-11T20:51:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "692e30b87493a242c7e8d91461e0ae4e679d8a77",
"body": "Using `secrets: inherit` is a security anti-pattern that passes all\nsecrets to reusable workflows, violating the principle of least\nprivilege. This is flagged by security linters like zizmor.\n\nCloses #174",
"is_bot": false,
"headline": "Remove PreferSecretsInheritWorkflow recipe (#175)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-09T12:07:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ee019859e529fa2c54a0d38406eb1dee9835bc3",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-08T08:21:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c212b94bfbfde2d44531eb1878f9d8564c4a002b",
"body": "After openrewrite/rewrite#7291, JsonPathMatcher trailing wildcards now\nexpand to individual child entries instead of matching the parent mapping.\n\n- FindMissingTimeout: change `$.jobs.*.*` to `$.jobs.*` since wildcards\n now correctly resolve to job-level entries\n- RemoveWorkflowInputArgument: navigate one fewer parent level since\n `$.jobs.*` now matches at the Entry cursor directly",
"is_bot": false,
"headline": "Fix JsonPath matchers for rewrite-yaml wildcard expansion change (#173)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-07T19:22:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08137fc782a6309e55760deb2768917253759402",
"body": "The docs system generates source code links by stripping the `Recipe`\nsuffix from class names, producing broken 404 links for all 19 security\nrecipes. Rename them to match the convention used by the other recipes.\n\nFixes https://github.com/openrewrite/rewrite-github-actions/issues/171",
"is_bot": false,
"headline": "Drop `Recipe` suffix from security recipe class names (#172)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-06T21:25:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31cdfb8891a125c09e354136e81f68b503387588",
"body": "…workflow (#170)",
"is_bot": false,
"headline": "feat(github-actions): Enable adding runners to all the jobs within a …",
"author_name": "Mustapha Belmokhtar",
"author_login": "BelmoMusta",
"committed_at": "2026-03-28T22:11:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a990e73f5b807b52c4e4ca38f225ba1bfbf1f50",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-03-27T10:19:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ededa88f8109971401303e7c4a1afc66404d82c",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.ExamplesExtractor?organizationId=QUxML01vZGVybmU%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Extract documentation examples from tests",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2026-03-25T08:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4233286a2b540a8ea741dab5c743718b6a9cbdf",
"body": null,
"is_bot": false,
"headline": "feat(dependabot-cooldown): Add the ability to exclude ecosystems (#168)",
"author_name": "Mustapha Belmokhtar",
"author_login": "BelmoMusta",
"committed_at": "2026-03-24T20:36:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af573c2845209beb2b2b3c2da7951ad63a012a48",
"body": "Add @JsonCreator to the public constructor so Jackson can\ndeserialize AddCronTrigger, fixing all AddCronTriggerTest failures\nintroduced by the Lombok Best Practices commit.",
"is_bot": false,
"headline": "Fix AddCronTrigger Jackson deserialization (#167)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-03-24T20:18:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c51d7fe06815d6488aff5915a029f2e37c587707",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.migrate.lombok.LombokBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Lombok Best Practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-03-11T22:31:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "189ca858564bd59723b784fd1927578cbc4d22c9",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sidmFsdWUiOiI5LjMuMSIsIm5hbWUiOiJ2ZXJzaW9uIn0seyJ2YWx1ZSI6ImJpbiIsIm5hbWUiOiJkaXN0cmlidXRpb24ifSx7InZhbHVlIjpmYWxzZSwib\n[…]\nmTWlzc2luZyJ9LHsidmFsdWUiOiJiMjY2ZDVmZjZiOTBlYWRhNmRjM2IyMGNiMDkwZTM3MzEzMDJlNTUzYTI3YzVkM2U0ZGYxZjBkNzZiZWFmZjA2IiwibmFtZSI6ImRpc3RyaWJ1dGlvbkNoZWNrc3VtIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Update Gradle wrapper to 9.3.1",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-02-23T19:17:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f1c75ce7edc643b9d54d052d2fc437d2c93ed155",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.DeleteSourceFiles?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sibmFtZSI6ImZpbGVQYXR0ZXJuIiwidmFsdWUiOiIuZ2l0aHViL3dvcmtmbG93cy8qLXByLnltbCJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Delete files",
"author_name": "Jonathan Schnéider",
"author_login": "jkschneider",
"committed_at": "2026-02-09T13:52:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f5376909088db9cad56e49878f2db5710019803",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseEstimatedEffortPerOccurrenceField?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Replace `getEstimatedEffortPerOccurrence()` method with field",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-17T11:52:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51f283f953c0937ae1c246484d12d44168f93fd5",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseTagsField?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Replace `getTags()` method with field",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-16T17:36:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4ed9fc727d74c8fa058ba2ce79b3ec5c034710c",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sibmFtZSI6InZlcnNpb24iLCJ2YWx1ZSI6IjkuMy4wIn0seyJuYW1lIjoiZGlzdHJpYnV0aW9uIiwidmFsdWUiOiJiaW4ifSx7Im5hbWUiOiJhZGRJZk1pc\n[…]\n1ZSI6ZmFsc2V9LHsibmFtZSI6ImRpc3RyaWJ1dGlvbkNoZWNrc3VtIiwidmFsdWUiOiIwZDU4NWY2OWRhMDkxZmM1YjJiZWNlZDg3N2ZlYWI1NWEzMDY0ZDQzYjhhMWQ0NmFlYjA3OTk2YjA5MTVlMGUwIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Update Gradle wrapper to 9.3.0",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-16T12:40:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7bd4201e61a108018a4a5ce289823b8ed09a885f",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/VUxszwdBH?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Replace `Arrays.asList` with `List.of` in tests",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-15T11:09:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80040caa3cef2d568b38e14309d46e5a4a3f2c67",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseDisplayNameAndDescriptionFields?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Replace `getDisplayName()` and `getDescription()` methods with fields",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-14T12:44:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "229ae8898e3fa0f27b10d441f73d3df3bd3ecdbb",
"body": "… (#165)\n\n* Replace `getDisplayName()` and `getDescription()` methods with fields\n\nUse this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseDisplayNameAndDescriptionFields?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <\n[…]\n41898282+github-actions[bot]@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Moderne <team@moderne.io>\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": false,
"headline": "Replace `getDisplayName()` and `getDescription()` methods with fields…",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-13T10:31:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba25156df4a3fa0c62e5e60633ac4ea8d31f91f0",
"body": null,
"is_bot": false,
"headline": "Generate a recipes.csv for the recipes defined in this repository",
"author_name": "Jonathan Schneider",
"author_login": "jkschneider",
"committed_at": "2025-12-25T19:00:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a10901ab03a0a5cd1bf582a44fc5fb533123685",
"body": "* Allow to update nested actions\n\n* `ChangeValue` does not support wildcards in replacement pattern\n\n* Address code suggestions\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": false,
"headline": "Allow updating multiple actions using a wildcard pattern (#164)",
"author_name": "Willem Jan Glerum",
"author_login": "wjglerum",
"committed_at": "2025-12-16T22:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfc0aac390722ae703dbe6287ea171dc2ba691cd",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-11-27T09:17:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c648c49913ff5d7f6db58d9d4d495c3ab2519033",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sidmFsdWUiOiI5LjIuMSIsIm5hbWUiOiJ2ZXJzaW9uIn0seyJ2YWx1ZSI6ImJpbiIsIm5hbWUiOiJkaXN0cmlidXRpb24ifSx7InZhbHVlIjpmYWxzZSwibmFtZSI6ImFkZElmTWlzc2luZyJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Gradle wrapper 9.2.1",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-11-25T18:53:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "867a35820790426835dd02e1a12768b694634d3f",
"body": "* Add .worktrees/ to .gitignore\n\nPreparing to use git worktrees for isolated feature development.\n\n* Add recipe to configure Dependabot cooldown periods\n\nAdds AddDependabotCooldown recipe to insert cooldown configuration into\ndependabot.yml files. Cooldowns delay adoption of newly published dependen\n[…]\nnd\ncomprehensive test coverage (10 tests).\n\n* Override `validate` instead of doing that in `getVisitor`\n\n* Only compose cooldown yaml when used\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": false,
"headline": "Add recipe to configure Dependabot cooldown periods (#162)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-11-25T12:37:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e068ad48fb643f4edc646f8a63b4a5dc2df3de84",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-11-12T09:12:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88ceea206d4b144578a63d8fd14e89c8e0273ce9",
"body": "* Allow both `.yml` and `.yaml` for GitHub workflow files\n\n* Extract a named precondition\n\n* Organize imports\n\n* Override `getVisitor` instead of `getRecipeList`\n\n* Do not mention path in description\n\n* Remove unused imports and update example to use .yaml extension\n\nApplied best practice recipes th\n[…]\ncom/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n* Test precondition separately\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Allow to rewrite both `.yml` and `.yaml` GitHub workflow files (#159)",
"author_name": "Willem Jan Glerum",
"author_login": "wjglerum",
"committed_at": "2025-11-10T17:49:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d26aad0ff4db9d77c22c1fc202ae00ea0bf7e486",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/Sh3Bg6DMd?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Gradle 9.2.0 (#158)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-29T21:01:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab2dfd599f40aa68795bcfc78d24ea35f9939ac6",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/FHYMFao9c?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Gradle 9.1.0 on Java 25 (#157)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-28T16:47:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8008dbb532ce70ec2d6978ee2790725b82cf3883",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices (#156)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-23T09:29:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b23cbd4a26a72a8ad85688322457e0508ecdb601",
"body": "Implements a declarative OpenRewrite recipe to automate migration\nfrom astral-sh/setup-uv@v6 to v7, handling breaking changes introduced\nin the v7.0.0 release.\n\nChanges:\n- Updates action version from v6 to v7\n- Removes deprecated server-url input (replaced by manifest-file in v7)\n- Preserves all oth\n[…]\n uses composition of existing ChangeActionVersion and\nDeleteKey recipes for a clean, maintainable implementation.\n\nFixes breaking changes from https://github.com/astral-sh/setup-uv/releases/tag/v7.0.0",
"is_bot": false,
"headline": "feat: add recipe to migrate astral-sh/setup-uv from v6 to v7 (#155)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-10-22T20:18:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6fec7fa095fff531e3953d01d3474dc2a825e461",
"body": null,
"is_bot": false,
"headline": "Fix recipe validation issue",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-20T09:27:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52cd6c71bc01a252b9fe051330323408eb7b6ed2",
"body": null,
"is_bot": false,
"headline": "Update suppressions (#153)",
"author_name": "Laurens Westerlaken",
"author_login": null,
"committed_at": "2025-10-15T10:07:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2baa6388d70fbcc081600be446094ce2a748d51",
"body": "* Refactor security recipes to use YamlHelper utility\n\nAdd YamlHelper utility class with common YAML LST traversal patterns and refactor 7 security recipes to use it, eliminating ~60-80 lines of repetitive instanceof checks and improving code consistency.\n\nChanges:\n- Add YamlHelper utility class wit\n[…]\n\n* Add @Nullable annotations to YamlHelper methods\n\n* Inline method used once, and reduce visibility\n\n* Don't extract a method used once so far\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": false,
"headline": "Refactor security recipes with YamlHelper utility (#152)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-10-11T12:37:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "310f94487434871a8b5ea883a728961e76c0653b",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Update recipe documentation examples (#151)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-04T11:19:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ed538d7f75f0fa0d9a08a1b5b16d9b5d56e9f96",
"body": "…-github-app-token (#150)\n\nAdds a new declarative recipe that migrates from tibdex/github-app-token@v2\nto the official actions/create-github-app-token@v2, updates parameter names\nfrom snake_case to kebab-case, and adds the required owner parameter.",
"is_bot": false,
"headline": "feat: add recipe to migrate tibdex/github-app-token to actions/create…",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-10-01T16:05:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05e3bd33a79cb0322d197244ca713fdfa980b87c",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices (#149)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-01T10:06:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ec60241e87643f327b51bb61fd0eba9c8152a73",
"body": "… (#148)\n\n* fix: no update non-python cache keys\n\n* refactor: update to more idiomatic Rewrite recipe\n\n* feat: add `actions/setup-node` node version recipe\n\nUpdate security recipes to use more idiomatic means for yaml traversal",
"is_bot": false,
"headline": "refactor: fix invalid `uv` change and add `actions/setup-node` recipe…",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-24T23:40:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d69cf5f324b1e8d4a8b3708d4875c29eef024dbc",
"body": "Add SetupPythonToUv recipe that migrates workflows from actions/setup-python\nto astral-sh/setup-uv for faster Python environment setup.",
"is_bot": false,
"headline": "feat: add OpenRewrite recipe to convert setup-python to UV action (#147)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-23T17:38:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4b6bc9fe2d4b2691dba17a13db2122d8175db13",
"body": "* Apply best practices\n\n* Apply formatter\n\n* Add package-info.java\n\n* Sort security recipes\n\n* Fix ForbiddenUsesRecipe",
"is_bot": false,
"headline": "Apply best practices (#146)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-09-23T10:21:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8714b3fc6892f06219ff5478457e729d803bf60",
"body": null,
"is_bot": false,
"headline": "feat: add new recipes to security insights",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-23T03:34:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "806e8bff99767733adf0108d9d1cc29a4f25d091",
"body": null,
"is_bot": false,
"headline": "feat: add more GitHub Action security-centric find recipes (#145)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-23T03:28:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5182cc8587a57251c3ff6b396c9188af8668bc59",
"body": null,
"is_bot": false,
"headline": "feat: additional GitHub Action security insight recipes (#144)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-22T23:59:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7307df24411686a1c73695bddac5ab996467513c",
"body": null,
"is_bot": false,
"headline": "feat: check for excessive permissions in GA (#143)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-22T23:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11fd2bf1f2fce87e6ac05bc417cf06825dc6f90e",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-08-09T17:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "849b0c7e89f6fddee40406ae039e69d498282255",
"body": "* Implementation stub\n\n* Simplify implementation\n\n* Removing with: if no arguments\n\n* Apply suggestions from code review\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>\n\n* Apply suggestions from code review\n\nCo-authored-by: github-actions[bot] <41898282+g\n[…]\nions[bot]@users.noreply.github.com>\n\n* Import order\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": false,
"headline": "`RemoveWorkflowInputArgument` recipe (#139)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-08T13:21:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "48aa42592a0c746407fcc67e833edcaf583a420f",
"body": "…ames (#141)\n\n* Regex to allow hyphens\n\n* Adapting tests to cover hyphens\n\n* Digits in tests",
"is_bot": false,
"headline": "`RemoveUnusedWorkflowDispatchInputs` - amend the detection of input n…",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-08T05:50:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0021b35d1768dbafa652f630d8a90f0206c0dcd5",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.RenameFile?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl#defaults%3DW3sidmFsdWUiOiIuY2xhdWRlL3NldHRpbmdzLmxvY2FsLmpzb24iLCJuYW1lIjoiZmlsZU1hdGNoZXIifSx7InZhbHVlIjoic2V0dGluZ3MuanNvbiIsIm5hbWUiOiJmaWxlTmFtZSJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "rename settings.local.json to settings.json (#140)",
"author_name": "Kyle Scully",
"author_login": "zieka",
"committed_at": "2025-08-05T17:52:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faa88b0d8945336764c6c2dddd23a447eef0cffc",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-08-05T09:51:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3eaa7d72f99aed0c9740eb8a67f67240d2789abc",
"body": null,
"is_bot": false,
"headline": "Safety check against empty workflow_dispatch (#138)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-01T12:22:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d98f92bea3bc5d1c7eeb815dd9105bf87734df1",
"body": null,
"is_bot": false,
"headline": "Handling alternate syntax for inputs (#137)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-01T12:02:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1583a469d29ee840179959f3992abfc8709404f6",
"body": "* Basic impl\n\n* Regexp as constant\n\n* Use JsonPathMatcher\n\n* Simplify removal\n\n* Merge test cases\n\n* Simplify usage detection\n\n* Merge two visitors\n\n* Test case for multiple inputs used\n\n* Fix handling of all inputs removed\n\n* Code suggestions",
"is_bot": false,
"headline": "`RemoveUnusedWorkflowDispatchInputs` recipe (#136)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-01T11:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e5f22b85943f9f5c65aa0eeaad372b853986f1a",
"body": null,
"is_bot": false,
"headline": "Fixing markdown for link (#135)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-01T05:44:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e02235ceaf1a49549765d9aec8616bf020cbae51",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/m9HsHwu2Z?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Static imports for Collections and Collectors",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-07-30T21:20:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "379fdbe4351be2444058b663603e7cfda4d14874",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: OpenRewrite Recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-07-08T15:48:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfe8ac936d5e6f88c38d458e6d762a534f2baee3",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.staticanalysis.ReorderAnnotations?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Reorder annotations alphabetically",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-07-07T10:00:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30f6874ae5716bc11bab5f92bee2693754603d59",
"body": null,
"is_bot": false,
"headline": "ReplaceSecrets and ReplaceSecretKeys",
"author_name": "Jonathan Schneider",
"author_login": "jkschneider",
"committed_at": "2025-07-05T13:33:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22ce8b302d09c58acd9e6eba118df3a1673b62f1",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl#defaults%3DW3sidmFsdWUiOmZhbHNlLCJuYW1lIjoiYWRkSWZNaXNzaW5nIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Update Gradle wrapper",
"author_name": "Shannon Pamperl",
"author_login": "shanman190",
"committed_at": "2025-07-04T15:51:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59907b1f5cfb3943b4227e1ccc20b170ad09ff8b",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/zYwEKw0Gm?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: org.openrewrite.mavencentral (#133)",
"author_name": "Laurens Westerlaken",
"author_login": null,
"committed_at": "2025-07-02T12:09:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed1d671fd7af73a15e470088169d98d27219fa88",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sidmFsdWUiOiJiaW4iLCJuYW1lIjoiZGlzdHJpYnV0aW9uIn0seyJ2YWx1ZSI6IkZhbHNlIiwibmFtZSI6ImFkZElmTWlzc2luZyJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Update Gradle wrapper",
"author_name": "Shannon Pamperl",
"author_login": "shanman190",
"committed_at": "2025-06-05T15:10:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be068ba3c4ba85c486b0e6b5c43f0240b781f592",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sibmFtZSI6ImRpc3RyaWJ1dGlvbiIsInZhbHVlIjoiYmluIn0seyJuYW1lIjoiYWRkSWZNaXNzaW5nIiwidmFsdWUiOiJGYWxzZSJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Update Gradle wrapper",
"author_name": "Shannon Pamperl",
"author_login": "shanman190",
"committed_at": "2025-05-22T17:26:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bd4a35b685b3bf35c6e544f5138c8be1bf098cc",
"body": null,
"is_bot": false,
"headline": "Added symlink to license, added link to licensing page",
"author_name": "Johan Kragt",
"author_login": "JohannisK",
"committed_at": "2025-05-01T14:10:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e81514028566f11f3d3f4f9c28feb7a802f5ff74",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: OpenRewrite Recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-04-26T21:33:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ad29f4dc2f3704ab9ae70cbd3efe97ba5c676d2",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sibmFtZSI6ImRpc3RyaWJ1dGlvbiIsInZhbHVlIjoiYmluIn0seyJuYW1lIjoiYWRkSWZNaXNzaW5nIiwidmFsdWUiOiJGYWxzZSJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Update Gradle wrapper",
"author_name": "Shannon Pamperl",
"author_login": "shanman190",
"committed_at": "2025-04-25T13:40:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fcdcf0ee59a864710cd44e0c8e04244f50cc790",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.text.CreateTextFile?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sidmFsdWUiOiItLS1cbm5hbWU6IGNpXG5cbm9uOlxuICBwdXNoOlxuICAgIGJyYW5jaGVzOlxuICAgICAgLSBtYWluXG4gICAgdGFncy1pZ25vcmU6XG4gICAgICAtIFwiKlwiXG4gIHB1bGxfcmVx\n[…]\nDb250ZW50cyJ9LHsidmFsdWUiOiIuZ2l0aHViL3dvcmtmbG93cy9jaS55bWwiLCJuYW1lIjoicmVsYXRpdmVGaWxlTmFtZSJ9LHsidmFsdWUiOiJUcnVlIiwibmFtZSI6Im92ZXJ3cml0ZUV4aXN0aW5nIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Adding OPS_GITHUB_ACTIONS_WEBHOOK for Slack notification of failures",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-04-23T07:27:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc7233103861b913a9dbd1c61b87b14de7f6f81d",
"body": null,
"is_bot": false,
"headline": "Fix MergeYaml constructor calls (#131)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-04-23T06:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86dc7d0f602c5db4d71de8a8f9b3294cc9981df4",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.ExamplesExtractor?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Extract documentation examples from tests",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-04-21T20:31:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 87,
"latest_release_at": "2026-07-14T05:22:32Z",
"latest_release_tag": "v3.27.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 36,
"days_since_latest_release": 11,
"mean_days_between_releases": 12.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 5,
"stars": 1,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2025-03-10",
"count": 1
},
{
"date": "2025-10-26",
"count": 1
},
{
"date": "2025-11-10",
"count": 1
},
{
"date": "2026-03-22",
"count": 1
},
{
"date": "2026-04-28",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 51
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"build.gradle.kts"
],
"largest_source_bytes": 28457,
"source_files_sampled": 100,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"build.gradle.kts"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 122,
"open_issues": 50,
"closed_ratio": 0.315,
"closed_issues": 23,
"closed_unmerged_prs": 10
},
"bus_factor": 2,
"bot_contributors": 3,
"top_contributors": [
{
"type": "User",
"login": "timtebeek",
"commits": 99,
"avatar_url": "https://avatars.githubusercontent.com/u/1027334?v=4"
},
{
"type": "User",
"login": "jkschneider",
"commits": 33,
"avatar_url": "https://avatars.githubusercontent.com/u/1697736?v=4"
},
{
"type": "User",
"login": "aegershman",
"commits": 31,
"avatar_url": "https://avatars.githubusercontent.com/u/5619476?v=4"
},
{
"type": "User",
"login": "greg-at-moderne",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/192309513?v=4"
},
{
"type": "User",
"login": "shanman190",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/1707798?v=4"
},
{
"type": "User",
"login": "sjungling",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/8387?v=4"
},
{
"type": "User",
"login": "yeikel",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/8935151?v=4"
},
{
"type": "User",
"login": "sambsnyd",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/8549033?v=4"
},
{
"type": "User",
"login": "knutwannheden",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/408765?v=4"
},
{
"type": "User",
"login": "natedanner",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/882752?v=4"
}
],
"contributors_sampled": 28,
"top_contributor_share": 0.381
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"publish.yml",
"repository-backup.yml",
"stale.yml",
"update-known-shas.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 9,
"reason": "22 out of 23 merged PRs checked by a CI test -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 4/19 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 9 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "48c75c3e1fce15a5bbc459f3d2a8fac62a24400d",
"ran_at": "2026-07-25T17:13:37Z",
"aggregate_score": 5.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T19:22:11Z",
"oldest_open_prs": [
{
"number": 204,
"created_at": "2026-07-13T09:31:25Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-22T14:56:05Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 7,
"created_at": "2021-10-12T20:45:28Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 10,
"created_at": "2021-10-16T19:29:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 11,
"created_at": "2021-11-03T20:16:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 20,
"created_at": "2023-01-05T09:23:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 26,
"created_at": "2023-01-26T19:01:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 27,
"created_at": "2023-01-26T19:03:49Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 28,
"created_at": "2023-01-26T19:10:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 30,
"created_at": "2023-01-26T20:21:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 32,
"created_at": "2023-01-28T23:34:48Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 33,
"created_at": "2023-01-28T23:48:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 34,
"created_at": "2023-01-28T23:51:46Z",
"last_comment_at": "2024-08-21T07:50:01Z",
"last_comment_author": "timtebeek"
},
{
"number": 35,
"created_at": "2023-01-28T23:53:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 36,
"created_at": "2023-01-29T09:08:25Z",
"last_comment_at": "2023-01-29T10:33:20Z",
"last_comment_author": "timtebeek"
},
{
"number": 40,
"created_at": "2023-02-05T06:00:35Z",
"last_comment_at": "2023-06-02T16:21:49Z",
"last_comment_author": "timtebeek"
},
{
"number": 41,
"created_at": "2023-02-05T06:07:35Z",
"last_comment_at": "2023-06-02T16:20:20Z",
"last_comment_author": "timtebeek"
},
{
"number": 42,
"created_at": "2023-02-07T22:38:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 46,
"created_at": "2023-02-11T04:29:33Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 47,
"created_at": "2023-02-11T23:52:37Z",
"last_comment_at": "2023-02-13T09:06:40Z",
"last_comment_author": "timtebeek"
},
{
"number": 48,
"created_at": "2023-02-13T04:38:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 49,
"created_at": "2023-02-21T20:12:56Z",
"last_comment_at": "2023-02-22T10:33:51Z",
"last_comment_author": "timtebeek"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/openrewrite/rewrite-github-actions",
"host": "github.com",
"name": "rewrite-github-actions",
"owner": "openrewrite"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"security": 52,
"vitality": 93,
"community": 37,
"governance": 64,
"engineering": 63
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 93,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 88,
"inputs": {
"commits_last_year": 87,
"human_commit_share": 0.89,
"days_since_last_push": 3,
"active_weeks_last_year": 36
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "36/52 weeks with commits",
"points": 24.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 36
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "87 commits in the last year",
"points": 17.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 87
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v3.27.0",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 12.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~12.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 12.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 3,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 3 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 3
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 37,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 7,
"inputs": {
"forks": 5,
"stars": 1,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "1 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 1
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 28,
"top_contributor_share": 0.381
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 38% of commits",
"points": 13.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 38
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "28 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 28
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 9 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"merged_prs": 122,
"open_issues": 50,
"closed_issues": 23,
"issue_closed_ratio": 0.315,
"closed_unmerged_prs": 10
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "32% of issues closed",
"points": 14.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 32
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "122/132 decided PRs merged",
"points": 35.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 122,
"decided": 132
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 4/19 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"followers": 984,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "openrewrite",
"public_repos": 75,
"account_age_days": 2341
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "984 followers of openrewrite",
"points": 21.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 984,
"login": "openrewrite"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "75 public repos, account ~6 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 75
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 63,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "22 out of 23 merged PRs checked by a CI test -- score normalized to 9",
"points": 18,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [
"openrewrite",
"openrewrite-recipes"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "2 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 2
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 52,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 52,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "22 out of 23 merged PRs checked by a CI test -- score normalized to 9",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 4/19 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 9 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.921,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "82 of 89 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 82,
"sampled": 89
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [
"build.gradle.kts"
],
"dependency_bot_commit_share": 0.02
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "build.gradle.kts (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "build.gradle.kts"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Java (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "2 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 28457,
"source_files_sampled": 100,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/100 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 100,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T17:14:00.764938Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/openrewrite/rewrite-github-actions.svg",
"full_name": "openrewrite/rewrite-github-actions",
"license_state": "custom",
"license_spdx": null
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con openrewrite/rewrite-github-actions. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
