uber/NullAway tiene un índice de salud de 75 sobre 100, lo que lo sitúa en la banda Bueno. Su puntuación más alta es Vitality (99/100) y la más baja, Security (54/100). Se actualizó por última vez hoy. Una sola persona concentra la mayor parte del trabajo reciente.
75
global / 100
Bueno
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
75
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Más detalle
Historial de estrellas y forks 0 ★ / 352 ⇿
0Estrellas
352Forks
45Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 0Menor 3Parche 42
Cada punto abarca 9 días.
OpenSSF Scorecard 5.4 / 10
5.4agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-25 19:07 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 0 paquetes directos y 0 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Registro
Paquete
Versión
Relación
Avisos de dependencias sin evaluar
El cotejo de avisos no pudo ejecutarse para este informe: No resolved dependencies to assess
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"java",
"static-analysis",
"android",
"nullability",
"nullability-analysis",
"static-code-analysis"
],
"is_fork": false,
"size_kb": 8519,
"has_wiki": true,
"homepage": null,
"languages": {
"Java": 2770609,
"Shell": 925,
"Python": 12511
},
"pushed_at": "2026-07-25T18:29:33Z",
"created_at": "2017-09-01T17:35:57Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T20:10:50Z",
"description": "A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Java",
"significant_languages": [
"Java"
]
},
"owner": {
"blog": "http://www.uber.com",
"name": "Uber Open Source",
"type": "Organization",
"login": "uber",
"company": null,
"location": "70+ countries and counting.",
"followers": 3959,
"avatar_url": "https://avatars.githubusercontent.com/u/538264?v=4",
"created_at": "2010-12-27T20:25:41Z",
"is_verified": null,
"public_repos": 174,
"account_age_days": 5688
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.13.8",
"kind": "patch",
"published_at": "2026-07-19T03:10:54Z"
},
{
"tag": "v0.13.7",
"kind": "patch",
"published_at": "2026-06-16T17:57:09Z"
},
{
"tag": "v0.13.6",
"kind": "patch",
"published_at": "2026-06-05T16:56:51Z"
},
{
"tag": "v0.13.5",
"kind": "patch",
"published_at": "2026-06-04T17:27:46Z"
},
{
"tag": "v0.13.4",
"kind": "patch",
"published_at": "2026-04-21T17:16:44Z"
},
{
"tag": "v0.13.3",
"kind": "patch",
"published_at": "2026-04-14T06:21:17Z"
},
{
"tag": "v0.13.2",
"kind": "patch",
"published_at": "2026-04-11T09:15:11Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2026-01-27T01:53:15Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2026-01-20T15:01:20Z"
},
{
"tag": "v0.12.15",
"kind": "patch",
"published_at": "2025-12-19T19:53:05Z"
},
{
"tag": "v0.12.14",
"kind": "patch",
"published_at": "2025-12-04T18:08:32Z"
},
{
"tag": "v0.12.13",
"kind": "patch",
"published_at": "2025-12-01T15:30:52Z"
},
{
"tag": "v0.12.12",
"kind": "patch",
"published_at": "2025-11-04T19:27:46Z"
},
{
"tag": "v0.12.11",
"kind": "patch",
"published_at": "2025-10-31T15:19:42Z"
},
{
"tag": "v0.12.10",
"kind": "patch",
"published_at": "2025-09-16T18:35:08Z"
},
{
"tag": "v0.12.9",
"kind": "patch",
"published_at": "2025-08-18T18:13:27Z"
},
{
"tag": "v0.12.8",
"kind": "patch",
"published_at": "2025-08-06T15:38:11Z"
},
{
"tag": "v0.12.7",
"kind": "patch",
"published_at": "2025-04-30T02:27:18Z"
},
{
"tag": "v0.12.6",
"kind": "patch",
"published_at": "2025-03-27T21:02:10Z"
},
{
"tag": "v0.12.5",
"kind": "patch",
"published_at": "2025-03-26T03:24:49Z"
},
{
"tag": "v0.12.4",
"kind": "patch",
"published_at": "2025-02-27T23:05:15Z"
},
{
"tag": "v0.12.3",
"kind": "patch",
"published_at": "2025-01-06T15:56:33Z"
},
{
"tag": "v0.12.2",
"kind": "patch",
"published_at": "2024-12-13T16:04:32Z"
},
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2024-10-28T16:32:54Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2024-10-18T16:24:40Z"
},
{
"tag": "v0.11.3",
"kind": "patch",
"published_at": "2024-09-16T14:45:23Z"
},
{
"tag": "v0.11.2",
"kind": "patch",
"published_at": "2024-08-19T17:57:20Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2024-07-29T19:51:59Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2024-06-01T01:49:50Z"
},
{
"tag": "v0.10.26",
"kind": "patch",
"published_at": "2024-05-03T13:17:41Z"
},
{
"tag": "v0.10.25",
"kind": "patch",
"published_at": "2024-03-29T15:05:15Z"
},
{
"tag": "v0.10.24",
"kind": "patch",
"published_at": "2024-03-04T17:59:04Z"
},
{
"tag": "v0.10.23",
"kind": "patch",
"published_at": "2024-02-15T16:10:35Z"
},
{
"tag": "v0.10.22",
"kind": "patch",
"published_at": "2024-01-29T19:17:09Z"
},
{
"tag": "v0.10.21",
"kind": "patch",
"published_at": "2024-01-14T03:36:16Z"
},
{
"tag": "v0.10.20",
"kind": "patch",
"published_at": "2024-01-12T18:51:41Z"
},
{
"tag": "v0.10.19",
"kind": "patch",
"published_at": "2023-12-27T20:15:06Z"
},
{
"tag": "v0.10.18",
"kind": "patch",
"published_at": "2023-11-30T20:01:27Z"
},
{
"tag": "v0.10.17",
"kind": "patch",
"published_at": "2023-11-20T01:15:18Z"
},
{
"tag": "v0.10.16",
"kind": "patch",
"published_at": "2023-11-01T21:51:47Z"
},
{
"tag": "v0.10.15",
"kind": "patch",
"published_at": "2023-10-19T04:16:27Z"
},
{
"tag": "v0.10.14",
"kind": "patch",
"published_at": "2023-09-07T18:55:37Z"
},
{
"tag": "v0.10.13",
"kind": "patch",
"published_at": "2023-09-01T20:26:41Z"
},
{
"tag": "v0.10.12",
"kind": "patch",
"published_at": "2023-08-02T17:49:13Z"
},
{
"tag": "v0.10.11",
"kind": "patch",
"published_at": "2023-06-23T16:46:02Z"
}
],
"recent_commits": [
{
"oid": "0a04dc61e7bef3112ba60d3438073ccfdc42d0d5",
"body": "These are the latest early access builds available.\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by CodeRabbit\n\n* **Build and Testing**\n * Updated continuous integration to use JDK 28 Early Access.\n * Added JDK 28 to the supported test matrix while removi\n[…]\n * Updated code coverage tooling to a newer snapshot version.\n * Prepared JDK 28 test configuration for compatibility testing.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Test on JDK 28 early access (#1653)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-24T20:10:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e8d986f215f153eb48ecfb2f9b3556d3143cff8",
"body": "…(#1652)\n\nCodex found a simple fix for the errors.",
"is_bot": false,
"headline": "Fix Javadoc errors and allow future Javadoc errors to fail the build …",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-24T18:38:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "487680599847f36673afc1bac4b224deea8c4f32",
"body": "…627)\n\nBefore, sometimes we would sometimes emit confusing errors involving\nwilcard types like:\n```\nincompatible types: Flux<?> cannot be converted to Flux<?>\n```\nIn cases where the error is due to incompatible upper bounds (the case\nwe have observed in practice), this PR extends the error messages \n[…]\nested wildcards and array forms.\n\n* **Documentation**\n* Added a coding-style guideline requiring Javadoc for non-trivial\nmethods.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Improve wildcard mismatch diagnostics for identical-looking types (#1…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-24T17:38:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a7f21cc6a1d86b0a37f4a66fbda33b9057216c62",
"body": null,
"is_bot": false,
"headline": "Add JSpecifyExperimental configuration flag (#1648)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-24T16:48:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78055ddf7707fcf117104728c1469390d32b5d71",
"body": "… (#1647)\n\nPreviously, we only used the target type of an assignment when inferring\nthe type of a lambda / method reference when a field was being assigned.\nBut this is incorrect; we should also use declared types of local\nvariables. (I think I was confused about local inference before; the\ntop-leve\n[…]\ngenerics compilation test to remove an assertion\nfor a “returning `@Nullable`” diagnostic that no longer applies in that\nsnippet.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Fix bug with lambdas assigned to locals with a wildcard in their type…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-24T14:27:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6943dea76a574faabcb0faeb901ec5aafe4ea7dd",
"body": "This PR enables the JSpecify JDK models for all regression tests run in\nJSpecify mode.\n\nThe change exposed a bug where enabling the JDK models also enabled\nloading of external astubx files. We fix that here and only load\nexternal astubx files if JarInfer is enabled.\n\nThere were a couple of issues ex\n[…]\n outcomes for generics, conditional expressions,\nand stream filtering.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->\n\n---------\n\nCo-authored-by: Lázaro Clapp <lazaro@uber.com>",
"is_bot": false,
"headline": "Enable JSpecify JDK models for regression tests (#1646)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-24T05:12:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b9d7871dcdf2af5e684147cc12d2ef6bcd4eb0c4",
"body": null,
"is_bot": false,
"headline": "Enable JSpecify JDK models (under a flag) (#1641)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-24T04:26:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72aab40d30f84475646b28304600840399c97d4d",
"body": "…ibrary model (#1642)\n\nConsider the following case:\n```java\nclass Test {\n static boolean hasNonNullString(List<@Nullable String> strings) {\n return strings.stream()\n .filter(UnannotatedWithModels::isNonNull)\n .anyMatch(string -> true);\n }\n}\n```\nSay that the parameter of `Unannotat\n[…]\nled nullable parameters flow\ncorrectly through `Stream.filter(...)` when using method references\n(validated via `anyMatch(...)`).\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Fix handling of reference to method with `@Nullable` parameter from l…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-24T02:53:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bee56c9840f26953e99a6e1c1613476fd473587c",
"body": null,
"is_bot": false,
"headline": "Enable CodeRabbit reviews for all base branches (#1650)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-24T01:40:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79641a05ad5e6eea72c5cc6e966f4e9550f02de7",
"body": "Fixes #1643 \n\nFor calls to signature-polymorphic methods like `MethodHandle.invoke` we\nneed a more careful check for whether the call is varargs.\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by CodeRabbit\n\n* **Bug Fixes**\n* Improved handling of method calls\n[…]\n improving analysis accuracy.\n\n* **Tests**\n* Added coverage for `MethodHandle` invocations using conditional\noperator arguments.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Handle signature-polymorphic calls in InvocationArguments (#1644)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-23T01:45:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b67e9d36abc985115ae861f6605a62beeb163ff7",
"body": "This is a proposed policy on AI-generated PRs. I don't think we should\nban AI usage in contributed code, but I think we should try to ensure\nthe contributors actually understand the changes they are contributing.\nHence, the proposed text:\n\n> We allow for AI-generated code in PRs, but, we require tha\n[…]\nide,\nincluding requirements for first-time AI users to list tools used,\ndescribe usage, and include an attestation with examples.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Add policy on AI-generated PRs (#1635)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-20T19:04:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "472f94874d04c22d9a6765114c23fb8d19a2038f",
"body": "Remove support for legacy annotation locations (see [current\ndocs](https://github.com/uber/NullAway/wiki/JSpecify-Support#type-use-annotation-placement)).\nThis lets us delete a bunch of support and test code.\n\nFixes #1637 \n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n\n[…]\non generic, array, nested, and varargs types.\n* Updated initialization checks to use the complete set of applicable\nannotations.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Remove LegacyAnnotationLocations flag (#1640)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-19T22:04:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "043f276447f997adc2c3546f9a3225473622c44e",
"body": null,
"is_bot": false,
"headline": "Prepare next development version.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-07-19T02:49:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23d726cf4ad7dd38be03ed60f622e54c04fbb8b4",
"body": null,
"is_bot": false,
"headline": "Prepare for release 0.13.8.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-07-19T02:44:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de0d37b945efbffac88e18e6fb0ece13d6f3831a",
"body": "<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by CodeRabbit\n\n* **Documentation**\n * Added changelog notes for version 0.13.8.\n* Documented minor bug fixes and feature updates, including improved\nhandling of nullable results when removing items from maps.\n * Included maintenance updates for build tooling.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Release notes for 0.13.8 (#1638)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-19T02:00:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78d99948ac09e8e1bfb5ac6169b2743d71b5308b",
"body": "…ue to javac bug (#1636)\n\nDue to a bug in `javac` in JDK 17-26 (fixed in\nhttps://github.com/openjdk/jdk/pull/29928), sometimes type use\nannotations appear on record constructor parameters with position\n`FIELD` (specifically, when a compact record constructor is used). We\nwork around that bug by also\n[…]\ns a significant hack to fix this\notherwise, and it only impacts checking outside JSpecify mode, I'm not\ninclined to try to fix for when `-XDaddTypeAnnotationsToSymbol=true` is\nnot passed.\n\nFixes #1631",
"is_bot": false,
"headline": "Fix issue with reading annotations on record constructor parameters d…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-18T23:59:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "43a78f3666297a725274cd493cf3f16d8b705b09",
"body": "We improve support for conditional expressions in JSpecify mode, by\nproperly inferring types of conditional expressions where appropriate.\nWe also propagate types from the assignment context through (nested)\nconditional expressions to correctly infer types of generic method calls\nnested within such \n[…]\nmond and generic inference edge cases, and\ndataflow/loop interactions.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->\n\n---------\n\nCo-authored-by: Lázaro Clapp <lazaro@uber.com>",
"is_bot": false,
"headline": "Better support for conditional expressions in JSpecify mode (#1608)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-18T19:44:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b2e846152ebb5c03930c978986eb56edde19f890",
"body": "To stay up to date",
"is_bot": false,
"headline": "Update to Gradle 9.6.1 and AGP 9.3.0 (#1634)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-07-17T18:08:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77726c576d3866bd07e6e18ff1037ebda43d799d",
"body": "Fixes #1591.\n\nThis PR models `java.util.Map.remove(Object)` as returning nullable,\nsimilar to the existing model for `Map.get(Object)`.\n\n`Map.remove(Object)` can return `null` when there is no mapping for the\nkey, so dereferencing its result should produce a NullAway warning.\n\nChanges:\n- Add `java.u\n[…]\nty\ndiagnostic.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->\n\n---------\n\nSigned-off-by: Vinod Kumar <codingkiddo@gmail.com>\nCo-authored-by: Manu Sridharan <msridhar@gmail.com>",
"is_bot": false,
"headline": "Model Map.remove as nullable (#1623)",
"author_name": "Vinod Kumar Bengaluru",
"author_login": "codingkiddo",
"committed_at": "2026-07-15T23:34:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "addfe417f62cabca637158b6409c019c3d5443f0",
"body": "The README.md regarding Lombok is outdated. The `@lombok.Generated`\nannotation is set by default. From the [release\nnotes](https://projectlombok.org/changelog) of Lombok:\n\n> v1.18.34 (June 28th, 2024)\n> IMPROBABLE BREAKING CHANGE: Lombok now adds @lombok.Generated by\ndefault to methods and types it \n[…]\nior may break compatibility.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->\n\n---------\n\nCo-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>",
"is_bot": false,
"headline": "Update lombok section at README.md (#1624)",
"author_name": "Jacob van Lingen",
"author_login": "jevanlingen",
"committed_at": "2026-07-03T13:23:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f40a9face5bc0a7fd6a9cabc025f7f8796f1da22",
"body": "Fixes #1611 \n\nWe manually write more models for `Optional`, so we can address before\nfully fixing #950. Note that we do not model `orElseGet` as in JSpecify\nJDK right now due to false positives; see #1616.\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n## Summary by Code\n[…]\nspecify\nnullability, adding both positive compilation checks and new negative\nassertions (with one temporarily skipped scenario).\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Add more modeling for Optional (#1613)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-26T16:49:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "98096d72114bd33c9c34b80f6e516b7e075313d0",
"body": "Observed when running #1613 on Spring Framework. If have a class\n`Box<T>` with a method method `foo(T)` with a library model making it\n`foo(@Nullable T)`, and a call site invoking `foo` on a `Box<?>`, we\ncould crash trying to put an invalid `@Nullable` on the wildcard.\nInstead, we can just not substitute in the `@Nullable` annotation; our\nexisting wildcard checking logic should handle the `@Nullable` on the\nformal correctly for this case.",
"is_bot": false,
"headline": "Fix crash with library model @Nullable being applied to wildcard (#1615)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-26T02:36:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bd06129cae759acb07fa203818ed2bb6af42084",
"body": "…ype from library model (#1614)\n\nConsider:\n```java\npublic class LambdaModel {\n public static String apply(Function<String, /* @Nullable */ String> mapper) {\n return mapper.apply(\"\");\n }\n}\nvoid test() {\n LambdaModel.apply(unused -> null);\n}\n```\nHere, the `@Nullable` annotation within the comment\n[…]\ner-bound mismatch diagnostics.\n\n* **Documentation**\n* Added new modeled library API test classes to support the updated\ncoverage.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Fix issue with passing poly expression to a function parameter with t…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-26T02:18:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bb0561c07ad499a6a1d1462f5efc1a0d08f6a27c",
"body": "Closes https://github.com/uber/NullAway/issues/208\nAdd support for [reactor](https://github.com/reactor/reactor-core)\n\n- [x] A description about what and why you are contributing, even if\nit's trivial.\n\n- [x] The issue number(s) or PR number(s) in the description if you are\ncontributing in response \n[…]\n release notes by coderabbit.ai -->\n\n---------\n\nSigned-off-by: subhramit <subhramit.bb@live.in>\nSigned-off-by: Subhramit Basu <subhramit.bb@live.in>\nCo-authored-by: Manu Sridharan <msridhar@gmail.com>",
"is_bot": false,
"headline": "Add support for reactor (#1599)",
"author_name": "Subhramit Basu",
"author_login": "subhramit",
"committed_at": "2026-06-25T18:59:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "98a2ffcc1983926fb8bacfc828287928df2b64da",
"body": "…610)\n\n### Description\nThis PR addresses Issue #1538, where NullAway drops nullability facts\n(such as those established by a `.filter()` operation) when a\n`.sorted()` operation is interleaved in a Java stream pipeline.\n\n### Root Cause & Fix\nThe `StreamNullabilityPropagatorFactory` maintains a list o\n[…]\ning `filter` + `sorted` + `map` +\n`collect` with nullable inputs.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->\n\n---------\n\nCo-authored-by: Manu Sridharan <msridhar@gmail.com>",
"is_bot": false,
"headline": "Fix stream nullability propagation through sorted() (Fixes #1538) (#1…",
"author_name": "Deepak Yadav",
"author_login": "dyrpsf",
"committed_at": "2026-06-25T18:00:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a232de92ecf35a9e776aeb0277c3056c31dd15d9",
"body": "## Summary\n\nMany NullAway error messages reference syntax elements (the dereferenced\nexpression, an uninitialized field name, etc.) as plain text, which\nmakes them hard to spot in otherwise verbose messages. Some messages\nalready quote these references — e.g. `passing @Nullable parameter 'x'\nwhere @\n[…]\nts and test data.\n* **Documentation**\n* Adjusted the NullAway warning example in the README to reflect the new\nquoted formatting.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Quote syntax element references in error messages (#1620)",
"author_name": "Aryamann Singh",
"author_login": "AryamannSingh7",
"committed_at": "2026-06-24T19:11:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a388d4fc217fe3fd229a835f732cd162d30eeda2",
"body": null,
"is_bot": false,
"headline": "Prepare next development version.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-06-16T17:36:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e1f2ea1df59f28945c68e3f752b89151749754d",
"body": null,
"is_bot": false,
"headline": "Prepare for release 0.13.7.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-06-16T17:34:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32c03a46ff9c38e4f567f26d4f493422bd41bede",
"body": null,
"is_bot": false,
"headline": "Changelog for release 0.13.7 (#1609)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-16T17:32:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dd848a74b668dc6e3a3c926ec37913b92bb3307",
"body": "Fixes #1602 \n\nWe now report a warning for constructors with arguments in JPA-managed\nclasses if they miss some field initialization. We do this by\ngeneralizing the handler result to be a `FieldSkipResult` that can\nindicate a field init check should be skipped entirely or only for\nzero-arg constructo\n[…]\ns validating constructor-sensitive\nfield-initialization behavior and that zero-arg skips do not suppress\nread-before-init checks.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Report init warnings for JPA constructors with arguments (#1604)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-15T19:21:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0b3145b10473442b1963b19d8a8e528803a79fb8",
"body": null,
"is_bot": false,
"headline": "Bump Error Prone to 2.50.0 (#1601)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-14T19:39:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4d89515319bc0f581e791c44b66cc200d211da2",
"body": "Closes https://github.com/uber/NullAway/issues/871\n\nReplace the custom jacoco aggregation logic in\n`code-coverage-report/build.gradle` with Gradle's built-in\njacoco-report-aggregation plugin.\n\nThis gets rid of a lot of custom gradle code to manually create\nresolvable configurations, wiring up source\n[…]\nted and reported.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->\n\n---------\n\nSigned-off-by: subhramit <subhramit.bb@live.in>\nCo-authored-by: Manu Sridharan <msridhar@gmail.com>",
"is_bot": false,
"headline": "Switch code coverage aggregation to use built-in jacoco plugin (#1598)",
"author_name": "Subhramit Basu",
"author_login": "subhramit",
"committed_at": "2026-06-12T19:09:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2b34aa8fc09b13058e1453c9a804d5e1853d67ff",
"body": "Fixes #1578 \nFixes #1594 \n\nNow, if we have a `Stream<@Nullable Foo>` `s` and the code invokes\n`s.filter(Objects::nonNull)`, the result type is `Stream<Foo>`. This\nworks for any method that has an appropriate library model or any method\nannotated `@Contract(null -> false)`.\n\nThis PR does not handle l\n[…]\nts validating stream filter refinement, contract-based and\nlibrary-model predicates, custom predicates, and non-refining filters.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Add support for filtering null objects from streams (#1597)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-11T01:13:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0f2c373c63db1543256938abb079994cf0817ff3",
"body": null,
"is_bot": false,
"headline": "Update release instructions (#1593)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-05T17:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33eab56c98a4dd7ebe8c448974f5327c23d5023f",
"body": null,
"is_bot": false,
"headline": "Prepare next development version.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-06-05T16:25:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa850b5fe8bf3603d3e50a8993956b747f814b23",
"body": null,
"is_bot": false,
"headline": "Prepare for release 0.13.6.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-06-05T16:22:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e188182a87170b8f12ecea7cf45526bdde028dd0",
"body": null,
"is_bot": false,
"headline": "Notes for 0.13.6 release (#1592)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-05T16:17:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c09d2028545881603d1c98b11e5b7e0653cf8bc4",
"body": "<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by CodeRabbit\n\n* **New Features**\n* Added wildcard support in JSpecify mode (experimental, off by default\nwith known limitations)\n* Introduced new Jakarta Persistence field-initialization reasoning\nhandler\n * Enh\n[…]\nmultiple JSpecify-mode bugs\n\n* **Chores**\n * Updated Gradle, JaCoCo, and CI dependencies\n * Improved CI and test configuration\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Add 0.13.5 release notes to changelog (#1589)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-03T17:12:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d9d0392e94ea449669623a0bef4f42e5dd8dd357",
"body": "…6)\" (#1588)\n\nThis reverts commit 661f37443b0205102b23a99a994d409f9aa0cf14.\n\nIt turns out there are valid scenarios for `@Autowired` to be written on\na constructor (to disambiguate when multiple constructors are present).\nIn general, we don't know what other purposes custom initializer\nannotations are being used for, beyond initialization semantics. So,\nlet's not warn when they are used on constructors.",
"is_bot": false,
"headline": "Revert \"Report error when @Initializer is used on a constructor (#154…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-06-03T01:06:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec978b9b18afbe48e4c68b55a8e4919c70292a04",
"body": "Avoids issue with upcoming Node.js 20 deprecation\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by CodeRabbit\n\n* **Chores**\n* Updated continuous integration workflow to use the latest version of\nthe Codecov coverage reporting action for improved coverage tra\n[…]\nr/NullAway/pull/1587?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n<!-- review_stack_entry_end -->\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Update Codecov action to v6 (#1587)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-30T11:56:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "69ba115d7395a7d0c7d0128480b01cb604afe488",
"body": "…ation (#1584)\n\nDetects when a field is externally initialized via JPA persistence, so\nwe can skip initialization checking of such fields and avoid false\npositives.\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n## Summary by CodeRabbit\n\n* **New Features**\n* Added Jakart\n[…]\ner/NullAway/pull/1584?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n<!-- review_stack_entry_end -->\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Add a handler for Jakarta Persistence to reason about field initializ…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-30T02:58:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "661f37443b0205102b23a99a994d409f9aa0cf14",
"body": "Fixes #540\n\n## Problem\nNullAway already treats constructors as initializers by default. If a\nconstructor is annotated with `@Initializer`, NullAway silently treated\nit as a valid initializer method which has no effect and is almost\ncertainly a mistake by the developer.\n\n## Fix\nAdded a check in `matc\n[…]\nithub&utm_campaign=change_stack)\n\n<!-- review_stack_entry_end -->\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->\n\n---------\n\nCo-authored-by: Manu Sridharan <msridhar@gmail.com>",
"is_bot": false,
"headline": "Report error when @Initializer is used on a constructor (#1546)",
"author_name": "VinayakGote",
"author_login": "Vinu2111",
"committed_at": "2026-05-26T15:14:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f790ac9ef7ba642096bbcfea04126484d13d7b98",
"body": "Wildcard generics checking is still too buggy to recommend to all, but\nwe should run it on NullAway code to catch more issues with it.\n\nAlso remove `AcknowledgeRestrictiveAnnotations` as that is redundant\nwith JSpecify mode.",
"is_bot": false,
"headline": "Enable HandleWildcardGenerics flag when building NullAway (#1586)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-25T19:41:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31b14ce725d8f544eb2ec84f4912e16cfcb48c47",
"body": "See https://jspecify.dev/docs/spec/#recognized-type-use. I've seen this\nissue in real code, and developers may be confused if we just ignore, so\nI think we should give a warning. We should consider warning on other\nunrecognized locations for nullness annotations when in JSpecify mode.",
"is_bot": false,
"headline": "Detect and warn on annotations directly on wildcard types (#1579)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-25T19:04:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c183d49078ba2b75d3309250cb320b28fb086f31",
"body": "…1577)\n\nSee the new test case `unboundWildcardTypeVarUnmarked`. Previously, for\nan unbound wildcard, we neglected to check whether the corresponding\ntype variable was in `@NullUnmarked` code. If the type variable is in a\n`@NullUnmarked` scope, we treat its upper bound as `@Nullable`. Most of\nthe cod\n[…]\nr/NullAway/pull/1577?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n<!-- review_stack_entry_end -->\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Fix for unbounded wildcard passed to `@NullUnmarked` type variable (#…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-25T18:36:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e7cfb2dd1f0a20976676697c085ace20791e651",
"body": "…to generic methods (#1575)\n\nFixes #1522 \n\nWhen handling lambdas and method references passed to a generic method,\nif the generic method's formal parameter type is a class type with\nwildcards at the top level, we need to compute the _ground target type_\nfor checking. In the ground target type, wildc\n[…]\nhould be used to\ninfer types at the call site and check the lambda. In this case,\ninference succeeds, and the return of `x.orElse(null)` from the lambda\nis fine since the return type is `@Nullable V`.",
"is_bot": false,
"headline": "Use ground target types when handling lambdas and method refs passed …",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-25T18:18:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c315bd544042be53668c68e1be37469c4f686138",
"body": "Fixes #1500\n\nNullAway behaves correctly for this case. Test-only change.",
"is_bot": false,
"headline": "Enable test for issue 1500 and add comment (#1560)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-25T17:46:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1184b98169d46b7244f428fbd14a459f81736e1e",
"body": "This is a fix to an issue similar to that of #1455. See the test case\n`caffeineNestedArgToGenericMethod()`. Basically, #1473 didn't go far\nenough. Sometimes `javac` places `@Nullable` type annotations in nested\npositions where they do not belong according to proper JSpecify rules.\nNow we recurse to \n[…]\ner/NullAway/pull/1574?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n<!-- review_stack_entry_end -->\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Compensate for more annotations inserted by `javac` (#1574)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-25T17:31:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "755f7fb4c5a0529fef66ec6162549ef0e8ec399b",
"body": "Fix #1572 \n\nInfer the nullability of type arguments for locals declared with `var`,\nbased on the initializer at the variable's declaration. This change is a\nbit complex for two reasons. First, there is no efficient way with\n`javac` to get the declaration of a local from its `Symbol`. In the\ncourse o\n[…]\ner/NullAway/pull/1573?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n<!-- review_stack_entry_end -->\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Improve handling of `var`-declared local variables (#1573)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-25T16:51:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "943ee663fe726ce68cf4d2fabe8f1d16e12f070f",
"body": "Make `hasAnyAnnotationMatching` a method that works on modern versions\nof `javac`, and rename the old method with backward compatibility code\nas `hasAnyAnnotationMatchingBackCompat`. We'll use the new method in an\nupcoming PR. No logic changes.\n\n<!-- This is an auto-generated comment: release notes \n[…]\ner/NullAway/pull/1583?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n<!-- review_stack_entry_end -->\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Refactor hasAnyAnnotationMatching method (#1583)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-22T20:39:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "448da0fdafb03edfcfa2eba57516250ef5b6bfa5",
"body": "<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n## Summary by CodeRabbit\n\n* **Documentation**\n* Updated testing guidelines to clarify build command execution:\ncontributors are instructed not to run multiple Gradle build commands in\nparallel and to follow prescribed sequent\n[…]\ner/NullAway/pull/1582?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n<!-- review_stack_entry_end -->\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Tell agents not to run multiple Gradle builds in parallel (#1582)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-21T19:39:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd0428ad51999c4b83aea72548a706fa05205a55",
"body": "Discovered this issue while investigating #1500. When computing the type\nof an invocation, we may need to run inference for a generic method call\nnested within its receiver in order to compute its proper type.\n\nThis change exposed a couple of other issues, which are fixed in PRs\nstack on top of this\n[…]\ner/NullAway/pull/1571?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)\n\n<!-- review_stack_entry_end -->\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Run inference for generic method calls nested inside receivers (#1571)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-16T23:21:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "070840cd12ec41c3299563e49c17ad0d0aec6f39",
"body": "Fixes #1543.\n\nThis PR adds `com.uber.nullaway.annotations.Contract` to the\n`nullaway-annotations` artifact.\n\nNullAway already recognizes annotations whose simple name is `Contract`,\nso this provides a NullAway-owned annotation users can depend on\ndirectly.\n\nChanges:\n- Add `@Contract` annotation unde\n[…]\nway/pull/1569)\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->\n\n---------\n\nSigned-off-by: Vinod Kumar <codingkiddo@gmail.com>\nCo-authored-by: Manu Sridharan <msridhar@gmail.com>",
"is_bot": false,
"headline": "Add Contract annotation to nullaway-annotations (#1569)",
"author_name": "codingkiddo",
"author_login": "codingkiddo",
"committed_at": "2026-05-15T21:58:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9b04703048af3f13e749a43fbf494834cda6ecd7",
"body": "… (#1570)\n\nFixes #1479 \n\nNow the `stripParensAndUpdateTreePath` utility method will throw if the\nleaf of the `TreePath` passed in doesn't match `expr`. This is a good\ninvariant to enforce. There are a lot of code changes here, but they are\nall related to manipulating `TreePath`s rather than core log\n[…]\nprecise, path-aware context throughout inference and\nconstraint generation to strengthen dataflow refinement and type\nresolution.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Adjust more TreePaths to have correct leaf before calling getTreeType…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-09T05:14:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dff4b58a2fe8c60fd75f2ac38cf5e3a727b84fb6",
"body": "We now print a simple and consistent message indicating which type\nvariable was discovered to have contradictory nullability constraints.\nWe may eventually want to give more diagnostic information on _where_\nthe contradiction came from, but this is simple and an improvement over\nwhat we had before.\n\n[…]\nied to the problematic type\nvariable.\n\n* **Tests**\n* Updated tests to expect the new, more specific inference-failure\ndiagnostic.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Improve inference failure error message (#1567)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-08T02:19:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "740ffc6fe72d4313b739d4982a555c5437613b1b",
"body": "See #1529 \n\nThis test case shows how to use a `@SuppressWarnings` and\n`requireNonNull` to assert that an entire chain of field accesses is\nnon-null. Also works for method calls. Test-only change, no behavior\nchange.\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n## Summa\n[…]\non behaves consistently.\n* Also asserts that an extra/over-extended dereference still produces a\nNullAway diagnostic as expected.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Test case for trick to assert chain of accesses is non-null (#1566)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-07T18:00:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c25a84ddd5f262a3bf9ae8482dab9f69ec7255c1",
"body": "Temurin 17.0.19 for Windows [has been\nreleased](https://github.com/adoptium/temurin17-binaries/releases/tag/jdk-17.0.19%2B10),\nso we no longer need to install the Zulu distribution just for Windows.\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by CodeRabbit\n[…]\nava toolchain setup to use a unified\nconfiguration approach, simplifying the build pipeline setup across\ndifferent environments.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Use Temurin JDK 17 always in CI (#1565)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-05T18:33:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aea62eb367d046dddce4586452635f88f90c3be1",
"body": "Extend our script to apply to calls to `addInputLines` and\n`addOutputLines` and apply across tests.",
"is_bot": false,
"headline": "Use text blocks for addInputLines and addOutputLines calls (#1564)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-04T18:30:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39c4dd93a186f607db5d90ef01fc06552aff4578",
"body": "See #1170 \n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n## Summary by CodeRabbit\n\n* **Tests**\n* Refactored many unit tests to embed generated Java sources using Java\nmultiline text blocks instead of per-line string arrays.\n* Changes span JDK-17 features,\nOptional/Recor\n[…]\nvior, diagnostics, and coverage remain unchanged; edits are\nformatting/mechanism-only to improve readability and maintainability.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Use text blocks in more tests (#1563)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-04T18:29:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0dcdf2dfb6d444b06dd5bfc2ba15edca97db94aa",
"body": "No code changes\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by CodeRabbit\n\n* **Chores**\n * Updated development dependencies to latest versions\n * Removed unused dependency\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Update spotless and guava-latest deps, removed unused semver4j (#1562)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-04T16:28:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05c6ae6d9a7dc9ef4dee80e77df500cfa8412b46",
"body": "These tests work on JDK 17 with the `-XDaddTypeAnnotationsToSymbol=true`\nflag, after the JDK 17.0.19 release, due to backported support.",
"is_bot": false,
"headline": "Enable generic bytecode tests on JDK 17 (#1561)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-03T20:02:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c2780c88ed4961bf9f96b80fa74f80bfc9574e6",
"body": "See the new test cases. Use upper and lower bounds to reason about the\nnullability of accessed values of wildcard type.",
"is_bot": false,
"headline": "Fix nullability for return and parameter wildcards (#1558)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-03T19:40:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f7c7e5cf03808081872e6186d4d6a0938a86fd2",
"body": "Fixes #1552",
"is_bot": false,
"headline": "Fix wildcard inference bug with method references (#1553)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-03T19:22:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29a896a26c44bb6c4e1fe683ca5d3bc3e995e0c8",
"body": "This is an initial (incomplete) implementation of extending our generic\nmethod inference to handle wildcard types. It has known bugs and\nincompleteness (#1522, #1500, #1551, #1552), but we'll handle those in\nfollow-up PRs to keep this one at a reasonable size. This support is\nalso behind a flag and \n[…]\nd-reference, lambda, and\nstream mapping tests; introduced active and regression cases to validate\nwildcard/nullability behaviors.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Initial inference for wildcards (#1549)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-03T19:10:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "162b2a8728d491ec4e88c4a33673d1c1d3da1b15",
"body": null,
"is_bot": false,
"headline": "Add Spring Boot as an integration test (#1557)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-05-01T14:17:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc6057366e2678bcccbc7f151f45b383ff712c8c",
"body": "Fixes #1528 \n\nAdd a test case to ensure we handle this case correctly.\n\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by CodeRabbit\n\n* **Tests**\n* Added regression test to enhance validation of nullability inference\nwith generic method type parameters and me\n[…]\ndcard type\nparameters, strengthening test coverage for complex type inference\nscenarios and improving overall quality assurance.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Test case for #1528 (#1556)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-29T21:02:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da3cc0dfd115138a44cca72d539dde660e7214f1",
"body": null,
"is_bot": false,
"headline": "Test with latest Error Prone snapshot on CI (#1555)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-29T17:05:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5eaee5a81cc7a1bcca609ad98207bde95d301f4",
"body": "To stay up to date",
"is_bot": false,
"headline": "Update to Gradle 9.5.0 (#1554)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-28T19:45:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2331d6f87d3f7fc2ca5f2be63cc9cf80c92f5218",
"body": "This is to support running tests on JDK 27 ea builds. Without this,\nJacoco crashes for such tests. The tests still pass, but seeing the\nstack traces in the console is annoying and slows down the tests.",
"is_bot": false,
"headline": "Use Jacoco 0.8.15 snapshot (#1550)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-27T03:08:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41785338cad77cc0dd86d9846b218706067d97cf",
"body": "We now handle unbounded wildcards (which have an implicit upper bound\nidentical to the corresponding type variable), and cases where a `?\nsuper S` wildcard is assigned to a `? extends T` wildcard. The remaining\nunhandled cases can only arise in the context of generic type variables\nand inference, wh\n[…]\nc types.\n\n* **Tests**\n* Added test coverage for wildcard type parameters with various nullable\nand non-nullable bound scenarios.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Handle most remaining wildcard subtyping / containment cases (#1548)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-26T21:01:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f44379a601a2a82210805affa32ecba58a4f171d",
"body": "Add one more case of containment checking, handling super-bounded\nwildcards (`? super T`). Also, update a comment for another case, which\nwe'll need to handle alongside inference support.\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by CodeRabbit\n\n* **Bug F\n[…]\n type\nparameter edge cases and scenarios.\n* Updated test expectations to align with the improved type\ncompatibility diagnostics.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Handle subtype checking for wildcard super bounds (#1547)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-26T19:33:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1cee45cb50b1b8f5a2ffca0d09c8a602e0460fc7",
"body": null,
"is_bot": false,
"headline": "Initial subtype checking for wildcards (#1520)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-25T16:56:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd9289a3010267781cc2153bb8fbed013835d719",
"body": null,
"is_bot": false,
"headline": "Prepare next development version.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-04-21T16:51:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1048411efaf6530216e90ffb863f0649a770b36e",
"body": null,
"is_bot": false,
"headline": "Prepare for release 0.13.4.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-04-21T16:29:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "744100f8cc3768912d21632f5aebb11b0e19e47a",
"body": null,
"is_bot": false,
"headline": "Changelog for release 0.13.4 (#1542)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-21T16:29:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0a70387d7630f258c6cfdc66ccc508a629ef28d",
"body": "It seems that in certain cases for annotations on lambda parameters, the\n`parameter_index` field of a `TypePosition` can be negative on JDK 27.\nThis was causing a crash; fix by checking for a negative index.\n\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by \n[…]\nd parameter indexes.\n\n* **Tests**\n* Added test case for JDK 27 compatibility with generic method and\nlambda inference scenarios.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Fix crash on JDK 27 (#1541)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-21T03:54:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e3e78aa1fe08870f16252a3e8f168699f77829b5",
"body": "Run our tests on the latest JDK 27 EA build. \n\nAlso fixes our check for explicit `@Nullable` annotations on lambda\nparameters, handling a change in the types `javac` provides in JDK 27.\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n\n## Summary by CodeRabbit\n\n* **Tests*\n[…]\n Improved detection of explicit nullability annotations on lambda\nparameters for more accurate analysis with newer JDK releases.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Test on JDK 27 EA (#1540)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-20T17:32:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15a35d1eb1590bb35c8f7771aa758bfcbf302fdc",
"body": "WALA no longer relies on running on a JDK distribution that includes\n`jmod` files, so this will make running JarInfer easier.",
"is_bot": false,
"headline": "Update to WALA 1.7.1 (#1539)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-20T17:14:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "331a920041df98756c60994a2b67f27053e74e0a",
"body": "…deprecated addSourceFile (#1517)\n\n## Summary\n\nFollow-up to #1426, continuing the migration from deprecated\n`CompilationTestHelper#addSourceFile` to `addSourceLines` as described\nin #1425.\n\n## Changes\n\n**ThriftTests.java:**\n- Replace 1 `addSourceFile(\"testdata/Util.java\")` call with\n`addSourceLines`\n[…]\n organization.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->\n\nCo-authored-by: Nanook <nanookclaw@users.noreply.github.com>\nCo-authored-by: Manu Sridharan <msridhar@gmail.com>",
"is_bot": false,
"headline": "Refactor ThriftTests and Java8Tests to use addSourceLines instead of …",
"author_name": "nanookclaw",
"author_login": "nanookclaw",
"committed_at": "2026-04-15T19:38:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "480c8d3f67607d3aa1d5326948d3ef0219ac7f76",
"body": "Thank you for contributing to NullAway!\n\nPlease note that once you click \"Create Pull Request\" you will be asked\nto sign our [Uber Contributor License\nAgreement](https://cla-assistant.io/uber/NullAway) via [CLA\nassistant](https://cla-assistant.io/).\n\nBefore pressing the \"Create Pull Request\" button,\n[…]\nabbit\n\n* **Chores**\n* Enhanced module organization to improve library accessibility and\ncompatibility with modular Java systems.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Modularize the annotations JAR (#1537)",
"author_name": "Anthony Vanelverdinghe",
"author_login": "anthonyvdotbe",
"committed_at": "2026-04-15T19:26:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "26a23ce5786da76eeaeb2c7d4bd3c45ff20a728c",
"body": "Partially addresses #1525. We update WALA to get JDK 26 support.\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n## Summary by CodeRabbit\n\n* **New Features**\n * Added support for running tests on JDK 26 in addition to JDK 21.\n\n* **Chores**\n * Updated WALA library to ve\n[…]\nzed the Java toolchain to use Azul for test runs.\n* Ensured the test module JAR is built before any JDK-specific test\nexecutions.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Run regression tests on JDK 26 (#1526)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-14T19:21:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "334016d2bab88b25f6c7e51163d4ac510a5f877a",
"body": null,
"is_bot": false,
"headline": "Prepare next development version.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-04-14T06:10:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68232d259460071bef95cf05e5c508a76a2bb68d",
"body": null,
"is_bot": false,
"headline": "Prepare for release 0.13.3.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-04-14T06:04:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2d6dfa1677521cd42d02e7c883c24d9b19e2af6",
"body": null,
"is_bot": false,
"headline": "Changelog for 0.13.3 (#1527)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-14T05:06:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6855fdf29211c8145bca0f24028586f35397b2d",
"body": null,
"is_bot": false,
"headline": "Fix check for enclosing `NewClassTree` (#1524)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-13T19:51:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c08bc5742eed5521356ac2c44a4e7637aed5b5c",
"body": null,
"is_bot": false,
"headline": "Update to Checker Framework 4.0.0 (#1519)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-12T17:04:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68fc07e07bd6de78136243faa4b8d4732881e4b5",
"body": "…thod (#1518)\n\nFixes #1501 \n\nInstead, we return varargs array nullability through the previous\n`onOverrideMethodInvocationParametersNullability` handler method. We\nintroduce a new `MethodParameterNullness` type to encapsulate regular\nparameter nullability and nullability of the varargs array;\n`Metho\n[…]\nved a separate varargs hook.\n\n* **Tests**\n* Added JSpecify-mode tests exercising varargs and lambda parameter\nnullness inference.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Remove `onOverrideMethodInvocationVarargsArrayNullability` handler me…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-11T21:51:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7b5c9243f89a7a344025006942a0378500d2e954",
"body": "AssertJ's @InjectSoftAssertions annotation is used with JUnit\nSoftAssertionsExtension to inject SoftAssertions instances into test\nfields. Since the field is initialized by the framework, NullAway should\nnot require explicit initialization.\n\nThank you for contributing to NullAway!\n\nPlease note that \n[…]\nts**\n* Added test coverage verifying correct handling of AssertJ\n`@InjectSoftAssertions` annotations in JUnit 5 test frameworks.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Add @InjectSoftAssertions to default excluded field annotations (#1516)",
"author_name": "i.s.ivanov",
"author_login": "is-ivanov",
"committed_at": "2026-04-11T20:07:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "164d8f6e860fb2eff5b629758891c78013ff89c4",
"body": null,
"is_bot": false,
"headline": "Prepare next development version.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-04-11T08:24:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c3e6c8de87981ece2919c28ccb9c39d466b4460",
"body": null,
"is_bot": false,
"headline": "Prepare for release 0.13.2.",
"author_name": "Seemanta Saha",
"author_login": "seemantasaha",
"committed_at": "2026-04-11T08:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "596dc404b5e3d97184e35163ab6803d0856cbc6c",
"body": null,
"is_bot": false,
"headline": "Changelog for release 0.13.2 (#1515)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-08T20:54:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14f12d3850dc72d6a20646eed140e12751740f95",
"body": "Fixes #1511 \n\nRemove uses of some deprecated classes / methods that were deleted.\nAlso, the `ASTHelpers.enclosingPackage` method changed in a\nbackward-incompatible way; (re-)introduce `ASTHelpersBackports` so we\nhave a method we can call across versions consistently.\n\nAlso, fix a couple of new warni\n[…]\nookup utilities and stream type\npredicate handling.\n\n* **Tests**\n * Updated test cases to use default behavior in test helpers.\n\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Update to Error Prone 2.49.0 (#1514)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-08T19:38:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "97707edbb706b490f8db0ede5eeb18af7e9e4c74",
"body": "Fixes #1503\n\n<!-- This is an auto-generated comment: release notes by coderabbit.ai\n-->\n## Summary by CodeRabbit\n\n* **Bug Fixes**\n* Improved handling of captured/wildcard array types in generic\nnullability checks to avoid incorrect assumptions and crashes.\n\n* **Tests**\n* Added a test covering captured array types in ternary expressions to\nvalidate the fix.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Fix crash with captured array types (#1508)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-08T19:26:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "498636f1e0a21301de7e3637d3184fa55562f778",
"body": "Fixes #1483 \n\nWe add some specialized logic to treat Spring's `@Value` as an external\ninitializer annotation, but only when its SpEL expression does not\ncontain `null` (which would indicate the field could be initialized to\nnull). Rather than adding a whole extra `Handler` for this, we bake in a\nver\n[…]\n style recommendations for\nlocal variable annotations.\n\n* **Tests**\n * Added test coverage for Spring annotation field handling.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Support for Spring's @Value annotation (#1505)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-08T19:11:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cf60f5888446045735e1accf47b6636193b5fcb3",
"body": "…ecify mode (#1499)\n\nFixes #1431 \nFixes #1474 \n\nWe make two key changes. First, we store the inferred types of method\nreference expressions in the `inferredPolyExpressionTypes` cache,\nsimilar to what we did for lambdas, so that some later checks that\nrequire the type of the method reference get the \n[…]\neractions with generic\ninference and expected nullability diagnostics.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->\n\n---------\n\nCo-authored-by: Lázaro Clapp <lazaro@uber.com>",
"is_bot": false,
"headline": "Better handling of method references passed to generic methods in JSp…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-03T20:11:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f4dcfc9f605629508306dba6c78978277d529214",
"body": "See https://github.com/uber/NullAway/pull/1499#discussion_r3006553386.\nThis should make our error messages more consistent and less confusing.\nWe now only include `@Nullable` type use annotations.\n\nEventually, we may want to adopt [JSpecify\nshorthand](https://github.com/jspecify/jspecify/wiki/notati\n[…]\nfor clearer output.\n\n* **Tests**\n* Updated expected diagnostic texts in several tests to match the\nslimmer annotation formatting.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Print only `@Nullable` type use annotations in error messages (#1507)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-04-03T15:58:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6e5983bb385b65df3b81f53db92b264fdd33d1cc",
"body": "…er types and varargs (#1497)\n\nFixes #1480 \n\nFor array and varargs parameter types, we were not properly\ndistinguishing between `@Nullable` annotations on the array elements vs\nthe array itself.\n\nThe logic changes are in `AstubxGenerator`. We add unit tests in\n`NullnessAnnotationSerializerTest` (for\n[…]\nutputs.\n\n* **Chores**\n* Added and simplified stub methods used by tests to exercise nullable\narray/element and varargs scenarios.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "JDK javac plugin: properly handle nested annotations on array paramet…",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-03-30T21:30:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e78dc899ad7a99d7e14301e34fc2cb1d935f70ed",
"body": "Fixes #1455 \n\nFor reference here is the test case:\n```java\n@NullMarked\nclass Foo<OuterT> {\n\n interface Supplier<T extends @Nullable Object> {\n T get();\n }\n\n Supplier<@Nullable OuterT> sup;\n\n <T extends Supplier<?>> T acceptSup(T supplier) {\n return supplier;\n }\n\n void test() {\n accept\n[…]\nTests**\n* Added a unit test covering generic method type inference and warning\nbehavior for JSPECIFY-style nullability scenarios.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Re-introduce annotations elided by `javac` for certain cases (#1473)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-03-25T16:30:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d1aa5048c3fbb37e94b348e0db2eaefd4dd7ea44",
"body": "Fixes #1481, which should enable us to handle #1480 \n\nThis gives us the ability to model more nullability scenarios for\nvarargs arrays via library models. For example, we can now write a\nlibrary model for a method like [`Objects.hash(@Nullable Object\n@Nullable\n...)`](https://github.com/jspecify/jdk/\n[…]\n checks\nwhen overridden or modeled as safe.\n\n* **Tests**\n * New varargs-focused library-model tests covering JSpecify scenarios.\n<!-- end of auto-generated comment: release notes by coderabbit.ai -->",
"is_bot": false,
"headline": "Fix library modeling for varargs arrays (#1485)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-03-23T03:28:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "85af2f0d97c21c0bd2345e35544f5d9d9e32dfc0",
"body": "We should test that this passes once we get the JSpecify JDK models in\n(#950)",
"is_bot": false,
"headline": "test case for issue 1493 (#1496)",
"author_name": "Manu Sridharan",
"author_login": "msridhar",
"committed_at": "2026-03-23T00:22:33Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 45,
"commits_last_year": 279,
"latest_release_at": "2026-07-19T03:10:54Z",
"latest_release_tag": "v0.13.8",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 49,
"days_since_latest_release": 6,
"mean_days_between_releases": 23.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 75,
"has_issue_template": true,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 352,
"stars": 4082,
"watchers": 70,
"fork_history": {
"days": [
{
"date": "2017-09-06",
"count": 3
},
{
"date": "2017-09-08",
"count": 1
},
{
"date": "2017-09-11",
"count": 1
},
{
"date": "2017-10-18",
"count": 1
},
{
"date": "2017-10-21",
"count": 2
},
{
"date": "2017-10-22",
"count": 1
},
{
"date": "2017-10-26",
"count": 1
},
{
"date": "2017-11-02",
"count": 2
},
{
"date": "2017-11-03",
"count": 4
},
{
"date": "2017-11-06",
"count": 2
},
{
"date": "2017-11-11",
"count": 2
},
{
"date": "2017-11-12",
"count": 1
},
{
"date": "2017-11-17",
"count": 1
},
{
"date": "2017-11-20",
"count": 2
},
{
"date": "2017-12-01",
"count": 1
},
{
"date": "2017-12-06",
"count": 1
},
{
"date": "2017-12-07",
"count": 7
},
{
"date": "2017-12-08",
"count": 4
},
{
"date": "2017-12-09",
"count": 3
},
{
"date": "2017-12-12",
"count": 3
},
{
"date": "2017-12-14",
"count": 2
},
{
"date": "2017-12-15",
"count": 1
},
{
"date": "2017-12-16",
"count": 1
},
{
"date": "2017-12-18",
"count": 9
},
{
"date": "2017-12-19",
"count": 3
},
{
"date": "2017-12-20",
"count": 1
},
{
"date": "2017-12-21",
"count": 1
},
{
"date": "2017-12-22",
"count": 1
},
{
"date": "2017-12-23",
"count": 1
},
{
"date": "2017-12-26",
"count": 1
},
{
"date": "2017-12-28",
"count": 1
},
{
"date": "2018-01-01",
"count": 1
},
{
"date": "2018-01-02",
"count": 1
},
{
"date": "2018-01-04",
"count": 2
},
{
"date": "2018-01-06",
"count": 1
},
{
"date": "2018-01-08",
"count": 3
},
{
"date": "2018-01-17",
"count": 1
},
{
"date": "2018-02-02",
"count": 1
},
{
"date": "2018-02-04",
"count": 1
},
{
"date": "2018-02-12",
"count": 1
},
{
"date": "2018-02-14",
"count": 1
},
{
"date": "2018-02-17",
"count": 1
},
{
"date": "2018-02-22",
"count": 1
},
{
"date": "2018-02-24",
"count": 2
},
{
"date": "2018-03-07",
"count": 1
},
{
"date": "2018-03-08",
"count": 1
},
{
"date": "2018-03-12",
"count": 1
},
{
"date": "2018-03-13",
"count": 1
},
{
"date": "2018-03-19",
"count": 1
},
{
"date": "2018-03-29",
"count": 3
},
{
"date": "2018-03-30",
"count": 2
},
{
"date": "2018-04-01",
"count": 1
},
{
"date": "2018-04-02",
"count": 2
},
{
"date": "2018-04-03",
"count": 2
},
{
"date": "2018-04-04",
"count": 1
},
{
"date": "2018-04-05",
"count": 1
},
{
"date": "2018-04-06",
"count": 1
},
{
"date": "2018-04-09",
"count": 5
},
{
"date": "2018-04-10",
"count": 1
},
{
"date": "2018-04-11",
"count": 1
},
{
"date": "2018-04-12",
"count": 2
},
{
"date": "2018-04-13",
"count": 1
},
{
"date": "2018-04-14",
"count": 1
},
{
"date": "2018-04-15",
"count": 1
},
{
"date": "2018-04-17",
"count": 1
},
{
"date": "2018-04-18",
"count": 2
},
{
"date": "2018-04-21",
"count": 1
},
{
"date": "2018-05-02",
"count": 1
},
{
"date": "2018-05-03",
"count": 1
},
{
"date": "2018-05-16",
"count": 1
},
{
"date": "2018-05-17",
"count": 2
},
{
"date": "2018-06-07",
"count": 1
},
{
"date": "2018-06-11",
"count": 1
},
{
"date": "2018-06-14",
"count": 1
},
{
"date": "2018-06-15",
"count": 1
},
{
"date": "2018-06-20",
"count": 1
},
{
"date": "2018-07-04",
"count": 3
},
{
"date": "2018-07-18",
"count": 1
},
{
"date": "2018-07-23",
"count": 1
},
{
"date": "2018-08-09",
"count": 2
},
{
"date": "2018-08-13",
"count": 1
},
{
"date": "2018-08-21",
"count": 1
},
{
"date": "2018-08-28",
"count": 1
},
{
"date": "2018-09-05",
"count": 1
},
{
"date": "2018-10-02",
"count": 1
},
{
"date": "2018-10-10",
"count": 1
},
{
"date": "2018-10-15",
"count": 1
},
{
"date": "2018-10-23",
"count": 1
},
{
"date": "2018-11-01",
"count": 1
},
{
"date": "2018-11-08",
"count": 1
},
{
"date": "2018-12-09",
"count": 1
},
{
"date": "2018-12-18",
"count": 1
},
{
"date": "2018-12-20",
"count": 1
},
{
"date": "2019-01-16",
"count": 1
},
{
"date": "2019-01-27",
"count": 1
},
{
"date": "2019-02-18",
"count": 1
},
{
"date": "2019-02-26",
"count": 1
},
{
"date": "2019-03-10",
"count": 1
},
{
"date": "2019-03-25",
"count": 1
},
{
"date": "2019-04-01",
"count": 1
},
{
"date": "2019-04-15",
"count": 1
},
{
"date": "2019-05-19",
"count": 1
},
{
"date": "2019-05-21",
"count": 1
},
{
"date": "2019-05-23",
"count": 1
},
{
"date": "2019-05-30",
"count": 1
},
{
"date": "2019-06-04",
"count": 1
},
{
"date": "2019-06-09",
"count": 1
},
{
"date": "2019-06-29",
"count": 1
},
{
"date": "2019-07-03",
"count": 1
},
{
"date": "2019-07-11",
"count": 1
},
{
"date": "2019-07-19",
"count": 1
},
{
"date": "2019-08-06",
"count": 1
},
{
"date": "2019-08-12",
"count": 1
},
{
"date": "2019-08-26",
"count": 1
},
{
"date": "2019-09-04",
"count": 1
},
{
"date": "2019-09-30",
"count": 1
},
{
"date": "2019-10-01",
"count": 1
},
{
"date": "2019-10-10",
"count": 1
},
{
"date": "2019-10-11",
"count": 1
},
{
"date": "2019-11-04",
"count": 1
},
{
"date": "2019-11-18",
"count": 1
},
{
"date": "2019-12-08",
"count": 1
},
{
"date": "2019-12-12",
"count": 1
},
{
"date": "2019-12-23",
"count": 1
},
{
"date": "2019-12-26",
"count": 2
},
{
"date": "2020-01-02",
"count": 1
},
{
"date": "2020-01-05",
"count": 1
},
{
"date": "2020-01-06",
"count": 1
},
{
"date": "2020-01-15",
"count": 1
},
{
"date": "2020-02-08",
"count": 1
},
{
"date": "2020-02-11",
"count": 1
},
{
"date": "2020-03-23",
"count": 1
},
{
"date": "2020-05-07",
"count": 1
},
{
"date": "2020-05-22",
"count": 1
},
{
"date": "2020-05-23",
"count": 1
},
{
"date": "2020-06-09",
"count": 1
},
{
"date": "2020-06-11",
"count": 1
},
{
"date": "2020-06-13",
"count": 1
},
{
"date": "2020-06-15",
"count": 1
},
{
"date": "2020-06-30",
"count": 1
},
{
"date": "2020-07-12",
"count": 1
},
{
"date": "2020-07-14",
"count": 2
},
{
"date": "2020-07-24",
"count": 1
},
{
"date": "2020-10-04",
"count": 1
},
{
"date": "2020-10-08",
"count": 1
},
{
"date": "2020-11-12",
"count": 1
},
{
"date": "2020-11-24",
"count": 1
},
{
"date": "2020-12-13",
"count": 1
},
{
"date": "2020-12-27",
"count": 1
},
{
"date": "2021-01-30",
"count": 1
},
{
"date": "2021-02-10",
"count": 1
},
{
"date": "2021-02-20",
"count": 2
},
{
"date": "2021-05-12",
"count": 1
},
{
"date": "2021-05-13",
"count": 1
},
{
"date": "2021-05-26",
"count": 1
},
{
"date": "2021-06-02",
"count": 1
},
{
"date": "2021-07-13",
"count": 1
},
{
"date": "2021-08-09",
"count": 1
},
{
"date": "2021-08-24",
"count": 1
},
{
"date": "2021-08-25",
"count": 1
},
{
"date": "2021-10-20",
"count": 1
},
{
"date": "2021-10-27",
"count": 1
},
{
"date": "2021-11-16",
"count": 1
},
{
"date": "2022-01-13",
"count": 1
},
{
"date": "2022-01-14",
"count": 1
},
{
"date": "2022-01-25",
"count": 1
},
{
"date": "2022-03-20",
"count": 3
},
{
"date": "2022-03-28",
"count": 1
},
{
"date": "2022-05-23",
"count": 1
},
{
"date": "2022-06-20",
"count": 1
},
{
"date": "2022-06-22",
"count": 1
},
{
"date": "2022-08-14",
"count": 1
},
{
"date": "2022-08-16",
"count": 1
},
{
"date": "2022-08-28",
"count": 1
},
{
"date": "2022-09-30",
"count": 1
},
{
"date": "2022-10-03",
"count": 1
},
{
"date": "2022-10-04",
"count": 2
},
{
"date": "2022-10-08",
"count": 1
},
{
"date": "2022-11-21",
"count": 1
},
{
"date": "2022-12-02",
"count": 1
},
{
"date": "2022-12-13",
"count": 1
},
{
"date": "2022-12-20",
"count": 1
},
{
"date": "2022-12-25",
"count": 1
},
{
"date": "2023-01-11",
"count": 1
},
{
"date": "2023-01-18",
"count": 1
},
{
"date": "2023-01-25",
"count": 1
},
{
"date": "2023-01-27",
"count": 1
},
{
"date": "2023-02-27",
"count": 1
},
{
"date": "2023-03-04",
"count": 1
},
{
"date": "2023-04-21",
"count": 1
},
{
"date": "2023-05-04",
"count": 1
},
{
"date": "2023-06-24",
"count": 1
},
{
"date": "2023-07-18",
"count": 1
},
{
"date": "2023-08-03",
"count": 1
},
{
"date": "2023-08-17",
"count": 1
},
{
"date": "2023-08-28",
"count": 1
},
{
"date": "2023-09-11",
"count": 1
},
{
"date": "2023-10-14",
"count": 1
},
{
"date": "2023-10-30",
"count": 2
},
{
"date": "2023-11-03",
"count": 1
},
{
"date": "2023-11-15",
"count": 1
},
{
"date": "2023-11-23",
"count": 1
},
{
"date": "2023-12-01",
"count": 1
},
{
"date": "2023-12-21",
"count": 1
},
{
"date": "2024-01-10",
"count": 1
},
{
"date": "2024-01-11",
"count": 1
},
{
"date": "2024-01-18",
"count": 1
},
{
"date": "2024-01-28",
"count": 1
},
{
"date": "2024-02-16",
"count": 1
},
{
"date": "2024-03-25",
"count": 1
},
{
"date": "2024-05-06",
"count": 1
},
{
"date": "2024-05-19",
"count": 1
},
{
"date": "2024-05-28",
"count": 1
},
{
"date": "2024-06-18",
"count": 1
},
{
"date": "2024-06-20",
"count": 1
},
{
"date": "2024-06-25",
"count": 2
},
{
"date": "2024-07-14",
"count": 1
},
{
"date": "2024-08-03",
"count": 1
},
{
"date": "2024-08-19",
"count": 1
},
{
"date": "2024-09-23",
"count": 1
},
{
"date": "2024-10-13",
"count": 1
},
{
"date": "2024-10-27",
"count": 1
},
{
"date": "2024-11-07",
"count": 1
},
{
"date": "2024-11-10",
"count": 1
},
{
"date": "2024-12-08",
"count": 2
},
{
"date": "2024-12-11",
"count": 1
},
{
"date": "2025-02-18",
"count": 1
},
{
"date": "2025-02-24",
"count": 1
},
{
"date": "2025-04-03",
"count": 1
},
{
"date": "2025-05-02",
"count": 1
},
{
"date": "2025-06-04",
"count": 1
},
{
"date": "2025-06-12",
"count": 2
},
{
"date": "2025-06-17",
"count": 1
},
{
"date": "2025-06-28",
"count": 1
},
{
"date": "2025-07-13",
"count": 1
},
{
"date": "2025-07-25",
"count": 1
},
{
"date": "2025-08-09",
"count": 1
},
{
"date": "2025-08-10",
"count": 1
},
{
"date": "2025-08-15",
"count": 1
},
{
"date": "2025-08-21",
"count": 2
},
{
"date": "2025-08-25",
"count": 1
},
{
"date": "2025-09-02",
"count": 1
},
{
"date": "2025-09-05",
"count": 1
},
{
"date": "2025-09-10",
"count": 1
},
{
"date": "2025-10-26",
"count": 1
},
{
"date": "2025-11-03",
"count": 1
},
{
"date": "2025-11-20",
"count": 1
},
{
"date": "2025-12-05",
"count": 1
},
{
"date": "2025-12-06",
"count": 1
},
{
"date": "2025-12-18",
"count": 1
},
{
"date": "2025-12-19",
"count": 1
},
{
"date": "2025-12-20",
"count": 1
},
{
"date": "2025-12-29",
"count": 1
},
{
"date": "2025-12-30",
"count": 1
},
{
"date": "2026-01-02",
"count": 1
},
{
"date": "2026-01-12",
"count": 1
},
{
"date": "2026-02-04",
"count": 1
},
{
"date": "2026-02-07",
"count": 1
},
{
"date": "2026-02-09",
"count": 1
},
{
"date": "2026-03-01",
"count": 1
},
{
"date": "2026-04-04",
"count": 1
},
{
"date": "2026-04-08",
"count": 1
},
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-04-11",
"count": 1
},
{
"date": "2026-04-14",
"count": 1
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-04-16",
"count": 1
},
{
"date": "2026-04-23",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-06-01",
"count": 1
},
{
"date": "2026-06-09",
"count": 2
},
{
"date": "2026-06-10",
"count": 1
},
{
"date": "2026-06-11",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-06-22",
"count": 1
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-06-27",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
},
{
"date": "2026-07-16",
"count": 2
},
{
"date": "2026-07-17",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
},
{
"date": "2026-07-24",
"count": 1
}
],
"complete": true,
"collected": 349,
"total_forks": 352
},
"star_history": null,
"open_issues_and_prs": 151
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example",
"sample"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"annotations/build.gradle",
"build.gradle",
"buildSrc/build.gradle",
"code-coverage-report/build.gradle",
"guava-recent-unit-tests/build.gradle",
"jar-infer/android-jarinfer-models-sdk28/build.gradle",
"jar-infer/android-jarinfer-models-sdk29/build.gradle",
"jar-infer/android-jarinfer-models-sdk30/build.gradle",
"jar-infer/android-jarinfer-models-sdk31/build.gradle",
"jar-infer/jar-infer-cli/build.gradle",
"jar-infer/jar-infer-lib/build.gradle",
"jar-infer/nullaway-integration-test/build.gradle",
"jar-infer/test-android-lib-jarinfer/build.gradle",
"jar-infer/test-java-lib-jarinfer/build.gradle",
"jdk-annotations/astubx-generator-cli/build.gradle",
"jdk-annotations/astubx-generator/build.gradle",
"jdk-annotations/jdk-integration-test/build.gradle",
"jdk-annotations/test-annotated/build.gradle",
"jdk-annotations/test-unannotated/build.gradle",
"jdk-javac-plugin/build.gradle",
"jdk-recent-unit-tests/build.gradle",
"jmh/build.gradle",
"library-model/library-model-generator/build.gradle",
"nullaway-bom/build.gradle",
"nullaway/build.gradle",
"sample-app/build.gradle",
"sample-library-model/build.gradle",
"sample/build.gradle",
"test-java-lib-lombok/build.gradle",
"test-java-lib/build.gradle",
"test-java-module/build.gradle",
"test-library-models/build.gradle"
],
"largest_source_bytes": 142235,
"source_files_sampled": 351,
"oversized_source_files": 7,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1288
},
"dependencies": {
"manifests": [
"annotations/build.gradle",
"build.gradle",
"buildSrc/build.gradle",
"code-coverage-report/build.gradle",
"guava-recent-unit-tests/build.gradle",
"jdk-javac-plugin/build.gradle",
"jdk-recent-unit-tests/build.gradle",
"jmh/build.gradle",
"nullaway-bom/build.gradle",
"nullaway/build.gradle",
"sample-app/build.gradle",
"sample-library-model/build.gradle",
"sample/build.gradle",
"test-java-lib-lombok/build.gradle",
"test-java-lib/build.gradle",
"test-java-module/build.gradle",
"test-library-models/build.gradle"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 11,
"merged_prs": 962,
"open_issues": 140,
"closed_ratio": 0.765,
"closed_issues": 456,
"closed_unmerged_prs": 84
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "msridhar",
"commits": 677,
"avatar_url": "https://avatars.githubusercontent.com/u/193105?v=4"
},
{
"type": "User",
"login": "lazaroclapp",
"commits": 261,
"avatar_url": "https://avatars.githubusercontent.com/u/999768?v=4"
},
{
"type": "User",
"login": "yuxincs",
"commits": 61,
"avatar_url": "https://avatars.githubusercontent.com/u/10323518?v=4"
},
{
"type": "User",
"login": "nimakarimipour",
"commits": 24,
"avatar_url": "https://avatars.githubusercontent.com/u/11995844?v=4"
},
{
"type": "User",
"login": "armughan11",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/52311490?v=4"
},
{
"type": "User",
"login": "XN137",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/1204398?v=4"
},
{
"type": "User",
"login": "akulk022",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/116849480?v=4"
},
{
"type": "User",
"login": "seemantasaha",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/3295713?v=4"
},
{
"type": "User",
"login": "navahgar",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/2213641?v=4"
},
{
"type": "User",
"login": "haewiful",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/157419173?v=4"
}
],
"contributors_sampled": 73,
"top_contributor_share": 0.561
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"continuous-integration.yml",
"jmh-benchmark.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 4,
"reason": "12 out of 26 merged PRs checked by a CI test -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 8,
"reason": "Found 26/30 approved changesets -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 10 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "0a04dc61e7bef3112ba60d3438073ccfdc42d0d5",
"ran_at": "2026-07-25T19:07:30Z",
"aggregate_score": 5.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T20:26:59Z",
"oldest_open_prs": [
{
"number": 1322,
"created_at": "2025-11-01T04:36:10Z",
"last_comment_at": "2026-07-24T07:52:41Z",
"last_comment_author": "nimakarimipour"
},
{
"number": 1347,
"created_at": "2025-11-20T16:49:28Z",
"last_comment_at": "2026-07-15T20:33:57Z",
"last_comment_author": "msridhar"
},
{
"number": 1544,
"created_at": "2026-04-22T21:20:11Z",
"last_comment_at": "2026-05-14T17:44:09Z",
"last_comment_author": "msridhar"
},
{
"number": 1596,
"created_at": "2026-06-09T17:43:24Z",
"last_comment_at": "2026-06-24T19:52:11Z",
"last_comment_author": "msridhar"
},
{
"number": 1600,
"created_at": "2026-06-11T04:29:16Z",
"last_comment_at": "2026-06-24T21:31:07Z",
"last_comment_author": "msridhar"
},
{
"number": 1606,
"created_at": "2026-06-13T10:31:05Z",
"last_comment_at": "2026-06-13T10:37:53Z",
"last_comment_author": "coderabbitai"
},
{
"number": 1630,
"created_at": "2026-07-16T05:55:08Z",
"last_comment_at": "2026-07-21T03:26:40Z",
"last_comment_author": "Shankar-v27"
},
{
"number": 1645,
"created_at": "2026-07-22T22:29:26Z",
"last_comment_at": "2026-07-23T23:50:47Z",
"last_comment_author": "msridhar"
},
{
"number": 1649,
"created_at": "2026-07-24T01:30:28Z",
"last_comment_at": "2026-07-24T01:49:40Z",
"last_comment_author": "coderabbitai"
},
{
"number": 1654,
"created_at": "2026-07-25T03:42:40Z",
"last_comment_at": "2026-07-25T05:28:58Z",
"last_comment_author": "coderabbitai"
},
{
"number": 1655,
"created_at": "2026-07-25T16:45:12Z",
"last_comment_at": "2026-07-25T18:29:44Z",
"last_comment_author": "coderabbitai"
}
],
"last_merged_pr_at": "2026-07-24T20:10:44Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 26,
"created_at": "2017-09-24T04:07:08Z",
"last_comment_at": "2017-11-17T23:07:08Z",
"last_comment_author": "msridhar"
},
{
"number": 27,
"created_at": "2017-09-24T04:22:06Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 54,
"created_at": "2017-11-07T01:15:41Z",
"last_comment_at": "2018-08-28T18:13:42Z",
"last_comment_author": "msridhar"
},
{
"number": 83,
"created_at": "2017-12-14T23:09:39Z",
"last_comment_at": "2017-12-21T19:11:23Z",
"last_comment_author": "chengniansun"
},
{
"number": 85,
"created_at": "2017-12-17T19:24:14Z",
"last_comment_at": "2017-12-18T17:15:59Z",
"last_comment_author": "msridhar"
},
{
"number": 93,
"created_at": "2017-12-21T20:12:54Z",
"last_comment_at": "2017-12-21T22:17:29Z",
"last_comment_author": "chengniansun"
},
{
"number": 94,
"created_at": "2017-12-21T22:13:21Z",
"last_comment_at": "2018-04-05T15:36:08Z",
"last_comment_author": "msridhar"
},
{
"number": 98,
"created_at": "2017-12-31T10:47:47Z",
"last_comment_at": "2026-06-09T17:48:34Z",
"last_comment_author": "dyrpsf"
},
{
"number": 103,
"created_at": "2018-01-01T05:53:27Z",
"last_comment_at": "2018-01-03T22:36:15Z",
"last_comment_author": "msridhar"
},
{
"number": 111,
"created_at": "2018-01-05T23:09:25Z",
"last_comment_at": "2018-01-08T18:38:10Z",
"last_comment_author": "chengniansun"
},
{
"number": 115,
"created_at": "2018-01-08T19:13:15Z",
"last_comment_at": "2018-01-08T22:24:11Z",
"last_comment_author": "lazaroclapp"
},
{
"number": 134,
"created_at": "2018-03-15T00:07:50Z",
"last_comment_at": "2019-02-26T22:32:01Z",
"last_comment_author": "lazaroclapp"
},
{
"number": 159,
"created_at": "2018-04-27T21:42:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 162,
"created_at": "2018-05-08T14:37:05Z",
"last_comment_at": "2021-10-20T10:33:05Z",
"last_comment_author": "laukerta"
},
{
"number": 184,
"created_at": "2018-06-26T03:24:20Z",
"last_comment_at": "2021-05-04T16:35:24Z",
"last_comment_author": "msridhar"
},
{
"number": 215,
"created_at": "2018-08-20T23:29:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 238,
"created_at": "2018-10-02T21:54:08Z",
"last_comment_at": "2018-10-09T20:05:22Z",
"last_comment_author": "msridhar"
},
{
"number": 245,
"created_at": "2018-10-15T16:36:49Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 259,
"created_at": "2018-12-02T20:05:41Z",
"last_comment_at": "2019-09-09T18:57:35Z",
"last_comment_author": "lazaroclapp"
},
{
"number": 282,
"created_at": "2019-02-26T22:03:14Z",
"last_comment_at": "2019-04-25T00:30:51Z",
"last_comment_author": "lazaroclapp"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/uber/NullAway",
"host": "github.com",
"name": "NullAway",
"owner": "uber"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"security": 54,
"vitality": 99,
"community": 95,
"governance": 67,
"engineering": 58
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 99,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"commits_last_year": 279,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 49
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "49/52 weeks with commits",
"points": 33.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 49
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "279 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 279
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 45,
"latest_release_tag": "v0.13.8",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 23.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "45 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 45
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~23.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 23.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "excellent",
"name": "Community & Adoption",
"value": 95,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "excellent",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"forks": 352,
"stars": 4082,
"watchers": 70,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "4,082 stars",
"points": 58.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 4082
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "352 forks",
"points": 21.2,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 352
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "70 watchers",
"points": 10.2,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 70
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": true,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 7.2,
"status": "met",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 67,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 73,
"top_contributor_share": 0.561
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 56% of commits",
"points": 9.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 56
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "73 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 73
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"merged_prs": 962,
"open_issues": 140,
"closed_issues": 456,
"issue_closed_ratio": 0.765,
"closed_unmerged_prs": 84
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "76% of issues closed",
"points": 35.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 76
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "962/1046 decided PRs merged",
"points": 35.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 962,
"decided": 1046
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 26/30 approved changesets -- score normalized to 8",
"points": 12,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 3959,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "uber",
"public_repos": 174,
"account_age_days": 5688
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3,959 followers of uber",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3959,
"login": "uber"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "174 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 174
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 58,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 26 merged PRs checked by a CI test -- score normalized to 4",
"points": 8,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"java",
"static-analysis",
"android",
"nullability",
"nullability-analysis",
"static-code-analysis"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 54,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 54,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 26 merged PRs checked by a CI test -- score normalized to 4",
"points": 1,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 26/30 approved changesets -- score normalized to 8",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 8
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 66,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.87,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1288
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "87 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 87,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [
"annotations/build.gradle",
"build.gradle",
"buildSrc/build.gradle",
"code-coverage-report/build.gradle",
"guava-recent-unit-tests/build.gradle",
"jar-infer/android-jarinfer-models-sdk28/build.gradle",
"jar-infer/android-jarinfer-models-sdk29/build.gradle",
"jar-infer/android-jarinfer-models-sdk30/build.gradle",
"jar-infer/android-jarinfer-models-sdk31/build.gradle",
"jar-infer/jar-infer-cli/build.gradle",
"jar-infer/jar-infer-lib/build.gradle",
"jar-infer/nullaway-integration-test/build.gradle",
"jar-infer/test-android-lib-jarinfer/build.gradle",
"jar-infer/test-java-lib-jarinfer/build.gradle",
"jdk-annotations/astubx-generator-cli/build.gradle",
"jdk-annotations/astubx-generator/build.gradle",
"jdk-annotations/jdk-integration-test/build.gradle",
"jdk-annotations/test-annotated/build.gradle",
"jdk-annotations/test-unannotated/build.gradle",
"jdk-javac-plugin/build.gradle",
"jdk-recent-unit-tests/build.gradle",
"jmh/build.gradle",
"library-model/library-model-generator/build.gradle",
"nullaway-bom/build.gradle",
"nullaway/build.gradle",
"sample-app/build.gradle",
"sample-library-model/build.gradle",
"sample/build.gradle",
"test-java-lib-lombok/build.gradle",
"test-java-lib/build.gradle",
"test-java-module/build.gradle",
"test-library-models/build.gradle"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "annotations/build.gradle, build.gradle, buildSrc/build.gradle (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "annotations/build.gradle, build.gradle, buildSrc/build.gradle"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Java (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 142235,
"source_files_sampled": 351,
"oversized_source_files": 7
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "7/351 source files over 60KB",
"points": 53.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 351,
"oversized": 7
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"example",
"sample"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example, sample",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example, sample"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T19:07:58.774433Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/u/uber/NullAway.svg",
"full_name": "uber/NullAway",
"license_state": "standard",
"license_spdx": "MIT"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con uber/NullAway. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
