Registro públicoEn riesgo
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-26 16:22 UTC
wikimedia / mediawiki-oauthclient-php
Mirror from https://gerrit.wikimedia.org/g/mediawiki/oauthclient-php. See https://www.mediawiki.org/wiki/Developer_access for contributing.
wikimedia/mediawiki-oauthclient-php tiene un índice de salud de 48 sobre 100, lo que lo sitúa en la banda En riesgo. Su puntuación más alta es Sustainability & Governance (59/100) y la más baja, AI Readiness (34/100). Se actualizó por última vez hoy. 3 personas concentran la mayor parte del trabajo reciente.
48
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
48
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
WikimediaOrganización
2189 seguidores1963 repositorios públicosdesde feb 2009
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación |
|---|---|---|---|---|---|
| Packagist | mediawiki/oauthclient | 2.3.0 | 5028 | 12 | hace 383 días |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
46
Actividad de desarrollo
52Moderado
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 0 días |
| 5.5/36 | Cadencia de commits — 8/52 semanas con commits |
| 9.7/18 | Volumen de commits — 11 commits en el último año |
| 1/10 | OpenSSF Scorecard: Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
Datos de entrada utilizados
| commits_last_year | 11 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 8 |
Disciplina de publicación
36En riesgo
Cómo se puntúa
| 27/27 | Publica versiones — 2 versiones publicadas |
| 0/36 | Recencia de las versiones — última versión hace 2728 días |
| 5.4/27 | Cadencia de publicación — una versión cada ~976,5 días |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 2 |
| latest_release_tag | 1.0.2 |
| releases_from_tags | no |
| days_since_latest_release | 2728 |
| mean_days_between_releases | 976,5 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
48
Popularidad y adopción
29Crítico
Cómo se puntúa
| 16.2/60 | Estrellas — 11 estrellas |
| 6.5/25 | Forks — 7 forks |
| 6.5/15 | Observadores — 16 observadores |
Datos de entrada utilizados
| forks | 7 |
| stars | 11 |
| watchers | 16 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
65Moderado
Cómo se puntúa
| 22.5/22.5 | README |
| 22.5/22.5 | Licencia — licencia reconocida (GPL-3.0) |
| 0/18 | Guía CONTRIBUTING |
| 13.5/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | sí |
| has_pull_request_template | no |
Adopción en el ecosistema (descargas)
55Moderado
Cómo se puntúa
| 49.4/80 | Descargas mensuales — 5028 descargas/mes en packagist |
| 6/20 | Dependientes en el registro — 7 paquetes dependen de él |
Datos de entrada utilizados
| packages | mediawiki/oauthclient |
| dependents | 7 |
| ecosystems | packagist |
| total_downloads | 179.275 |
| monthly_downloads | 5028 |
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
59
Cómo se puntúa
| 36/54 | Factor bus — la mitad de los commits recae en 3 contribuyente(s) |
| 16.9/22.5 | Distribución de commits — el principal contribuyente firma el 25% de los commits |
| 13.5/13.5 | Amplitud de contribuyentes — 19 contribuyentes |
| 10/10 | OpenSSF Scorecard: Contributors — project has 9 contributing companies or organizations |
Datos de entrada utilizados
| bus_factor | 3 |
| contributors_sampled | 19 |
| top_contributor_share | 0,247 |
Cómo se puntúa
| 0/46.8 | Resolución de issues — sin issues o sin datos |
| 0/38.3 | Aceptación de PR — 0/10 PR decididos fusionados |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 10 |
Excluidos de la puntuación (sin datos o no aplicable): Resolución de issues. Los pesos restantes se han renormalizado.
Propiedad y custodia
79Bueno
Cómo se puntúa
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 24/25 | Alcance del propietario — 2189 seguidores de wikimedia |
| 25/25 | Trayectoria — 1963 repos públicos, cuenta de ~17 años |
Datos de entrada utilizados
| followers | 2189 |
| owner_type | Organization |
| is_verified | — |
| owner_login | wikimedia |
| public_repos | 1963 |
| account_age_days | 6363 |
Mantenimiento de paquetes
79Bueno
Cómo se puntúa
| 25/25 | Publicado y resoluble — 1 paquete(s) en packagist |
| 14/35 | Recencia de publicación — última publicación hace 383 días |
| 20/20 | Historial de versiones — 12 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | mediawiki/oauthclient |
| ecosystems | packagist |
| any_deprecated | no |
| min_days_since_publish | 383 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
40
Prácticas de ingeniería
30En riesgo
Cómo se puntúa
| 0/24 | Flujos de trabajo de CI |
| 24/24 | Pruebas presentes |
| 0/16 | Configuración de linter |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — sin datos |
Datos de entrada utilizados
| has_ci | no |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: CI-Tests. Los pesos restantes se han renormalizado.
Documentación
55Moderado
Cómo se puntúa
| 30/30 | README |
| 0/25 | Directorio de documentación |
| 15/15 | Sitio de documentación / página del proyecto — https://www.mediawiki.org/wiki/Oauthclient-php |
| 10/10 | Descripción del repositorio |
| 0/10 | Topics |
| 0/10 | Wiki |
Datos de entrada utilizados
| topics | — |
| has_wiki | no |
| homepage | https://www.mediawiki.org/wiki/Oauthclient-php |
| has_readme | sí |
| has_docs_dir | no |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
45
Postura de seguridad
31En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — sin datos |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 9 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — sin datos |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Licencia — license file detected |
| 0.8/7.5 | Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
| 0/5 | Packaging — sin datos |
| 0/5 | Pinned-Dependencies — sin datos |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — sin datos |
| 0/7.5 | Token-Permissions — sin datos |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 3,1 |
Excluidos de la puntuación (sin datos o no aplicable): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Los pesos restantes se han renormalizado.
Avisos de dependencias
100Excelente
Cómo se puntúa
| 35/35 | Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido |
| 0/25 | Dependencias indirectas libres de avisos conocidos — el conjunto transitivo no es separable de las dependencias de desarrollo y prueba en este alcance |
| 0/40 | Sin avisos pendientes — ningún aviso tiene fecha de publicación |
Datos de entrada utilizados
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 5 |
| unassessed_packages | 3 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluidos de la puntuación (sin datos o no aplicable): Dependencias indirectas libres de avisos conocidos, Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejaron 5 dependencias resueltas con OSV. 3 no pudieron evaluarse: sin versión resuelta, ecosistema no admitido o fuera de la lista de paquetes informada. Este repositorio no publica ningún paquete que el índice resuelva, por lo que se evaluó en su lugar el grafo de dependencias del repositorio. Ese grafo mezcla fijaciones de desarrollo y prueba con las dependencias distribuidas, de modo que solo se puntúan las dependencias declaradas en tiempo de ejecución; los hallazgos transitivos se informan como contexto y quedan excluidos de la puntuación. No se analiza la alcanzabilidad.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
34
Contexto y guía para agentes
38En riesgo
Cómo se puntúa
| 0/45 | Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 38.4/40 | Historial de commits legible — 72 de 100 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,72 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Cómo se puntúa
| 0/18 | Arranque con un solo comando |
| 22/22 | Pruebas automatizadas |
| 0/11 | Configuración de lint / formato |
| 0/11 | Verificación estática de tipos |
| 0/10 | Entorno reproducible |
| 0/10 | Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 100 |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — sin datos |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Pinned-Dependencies. Los pesos restantes se han renormalizado.
Legibilidad del código para modelos
55Moderado
Cómo se puntúa
| 0/45 | Código verificable por tipos — PHP sin configuración de verificación de tipos |
| 55/55 | Tamaños de archivo manejables — 0/23 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | PHP |
| largest_source_bytes | 20.361 |
| source_files_sampled | 23 |
| oversized_source_files | 0 |
Datos clave
11estrellas de GitHub
19contribuidores
11commits en los últimos 12 meses
0días desde el último push
2versiones publicadas
3factor bus
0issues abiertas
Packagistecosistemas de paquetes
Advertencias de recopilación de datos
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Más detalle
Historial de estrellas y forks 0 ★ / 7 ⇿
0Estrellas
7Forks
2Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 0Menor 0Parche 2
Cada punto abarca 8 días.
OpenSSF Scorecard 3.1 / 10
3.1agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/d | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 9 contributing companies or organizations |
| n/d | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 1 | Maintained | 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
| n/d | Packaging | packaging workflow not detected |
| n/d | Pinned-Dependencies | no dependencies found |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/d | Signed-Releases | no releases found |
| n/d | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Dependencias directas 1
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| Packagist | psr/log | ^1.0||^2.0||^3.0 | composer.json |
Todas las dependencias 8
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 1 paquetes directos y 7 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
| Registro | Paquete | Versión | Relación |
|---|---|---|---|
| Packagist | psr/log | — | directa |
| Packagist | ext-curl | — | indirecta |
| Packagist | mediawiki/mediawiki-codesniffer | 51.0.0 | indirecta |
| Packagist | mediawiki/minus-x | 2.0.1 | indirecta |
| Packagist | php | — | indirecta |
| Packagist | php-parallel-lint/php-console-highlighter | 1.0.0 | indirecta |
| Packagist | php-parallel-lint/php-parallel-lint | 1.4.0 | indirecta |
| Packagist | phpunit/phpunit | 10.5.63 | indirecta |
Avisos de dependencias 0
Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 5 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 0 tienen avisos conocidos, de los cuales 0 son directas. 3 no pudieron evaluarse: sin versión resuelta, ecosistema no admitido, o fuera de la lista de paquetes informada.
Ningún aviso conocido afecta a las dependencias evaluadas.
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 198,
"has_wiki": false,
"homepage": "https://www.mediawiki.org/wiki/Oauthclient-php",
"languages": {
"PHP": 90842
},
"pushed_at": "2026-07-26T16:15:10Z",
"created_at": "2015-10-23T20:29:20Z",
"owner_type": "Organization",
"updated_at": "2026-07-26T16:16:41Z",
"description": "Mirror from https://gerrit.wikimedia.org/g/mediawiki/oauthclient-php. See https://www.mediawiki.org/wiki/Developer_access for contributing.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "GPL-3.0",
"default_branch": "master",
"license_spdx_raw": "GPL-3.0",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "https://www.wikimedia.org",
"name": "Wikimedia",
"type": "Organization",
"login": "wikimedia",
"company": null,
"location": "United States of America",
"followers": 2189,
"avatar_url": "https://avatars.githubusercontent.com/u/56668?v=4",
"created_at": "2009-02-21T20:22:30Z",
"is_verified": null,
"public_repos": 1963,
"account_age_days": 6363
},
"license": {
"state": "standard",
"spdx_id": "GPL-3.0",
"raw_spdx": "GPL-3.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "1.0.2",
"kind": "patch",
"published_at": "2019-02-05T09:15:00Z"
},
{
"tag": "0.1.2",
"kind": "patch",
"published_at": "2016-06-03T20:20:39Z"
}
],
"recent_commits": [
{
"oid": "ceaea699367201a43e8c1abac2dccb8fe384e8dd",
"body": "With strict types the int of time() fails rawurlencode() in\nUtil::urlencode() with wrong type.\nCast time() to string and adjust some documentation.\n\nBug: T433187\nFollow-Up: Ib87104a386dc406dd6c6d155466512e2fac2d21f\nChange-Id: I954b66332cf49b4cca2888f6b68ce2f624200456",
"is_bot": false,
"headline": "Ensure Request::$parameters is a array of strings",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2026-07-26T15:23:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30522b64ededae82dfbabe6201e50a77d2cdfa43",
"body": "Change-Id: Ib761532f8d05a085fd4815a38549caf51ae170f4",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 51.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2026-05-05T06:38:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9aac1bba3655bf952063727c6e7fa69083814d50",
"body": "Require strict types on function calls to php internal functions or\non function calls within the library.\n\nBug: T422722\nChange-Id: Ib87104a386dc406dd6c6d155466512e2fac2d21f",
"is_bot": false,
"headline": "Declare strict types on all php files",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2026-04-08T17:51:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e65f90d890d513d1b381ba9cd5a12116142b3fd4",
"body": "It is always enabled and statically linked since PHP 8.0, so there is\nno need to check for it unlike with older versions.\n\n https://wiki.php.net/rfc/always_enable_json\n\nBug: T401078\nChange-Id: I8681e0841e016eb827e36ef06cb3b3858ea873f8",
"is_bot": false,
"headline": "build: Don't list json as a required extension",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2026-03-29T21:09:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "559277eed64b1e779fe6f5012c7ae7d7d69ae6ed",
"body": "* mediawiki/mediawiki-codesniffer: 49.0.0 → 50.0.0\n* mediawiki/minus-x: 1.1.3 → 2.0.1\n\nChange-Id: I554b16464345ae90116bb54845e58b6f265898a0",
"is_bot": false,
"headline": "build: Updating composer dependencies",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2026-03-01T13:34:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0008f57bd1ff05a9ffee03499ad387d2a88e5540",
"body": "2 tests triggered 1 PHP deprecation:\n\n1) oauthclient-php\\tests\\ClientTest.php:24\nMethod ReflectionMethod::setAccessible() is deprecated since 8.5, as it\nhas no effect since PHP 8.1\n\n\nBug: T406744\nChange-Id: Ie846d5e31368518e227c714726b6d79a998c7bd8",
"is_bot": false,
"headline": "tests: Remove usage of ReflectionMethod::setAccessible(), no-op",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2026-01-30T13:00:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8ea8aa1016593f967a81f6a6c87af28f32d5899",
"body": "Bug: T415723\nChange-Id: Ie529e1c67fcbb11e77ab4e5b162fc4a002102099",
"is_bot": false,
"headline": "build: Upgrade PHPUnit from 10.5.58 to 10.5.63 to unblock CI",
"author_name": "James D. Forrester",
"author_login": "jdforrester",
"committed_at": "2026-01-27T23:41:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abeaa453d037baa4bb5e7bf26e890bf498a0913f",
"body": "Change-Id: I6b52fee3589d4254086bb5bfd6b5a6300fb762ee",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 49.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2026-01-16T01:59:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11bfd69b240448b8e54451f80a3e67ab67576378",
"body": "- Update PHPUnit config for version 10 with `--migrate-configuration`\n- Enabled options to display all notices, deprecations, etc.\n\nChange-Id: Ife296abf6919cf65835b9ea5eaf464878181a86e",
"is_bot": false,
"headline": "build: Require PHP 8.1+ and update phpunit/phpunit to 10.5.58",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2025-10-12T01:06:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfd9af10422a46b4d5d82c923ca3cfb28c0a1357",
"body": "Per https://www.php.net/openssl_free_key\n> PHP 8.0.0: This function is now deprecated\n> as it doesn't have an effect anymore.\n\nAnd https://www.php.net/openssl_pkey_free\n> This function has no effect.\n> Prior to PHP 8.0.0, this function was used to close the resource.\n\nChange-Id: I780e01c64a920dd0c07cd3df16aa45799ce85365",
"is_bot": false,
"headline": "Remove deprecated openssl_free_key",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2025-10-12T01:01:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "888d538f3473b821167bce1d1e817d7ded2a5ddc",
"body": "Change-Id: I24fb5955f7278ed5ac81e71a23a394a785513351",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 48.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2025-09-07T21:19:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "838856c5a36e2c6d035c16897736268e7d641595",
"body": "Users of this library should still include their own program\ninfo in the User-Agent. Wikimedia is getting much more strict\non this.\n\nBug: T402742\nChange-Id: Ifda3eae68ac6ea6851900470627b5f4b5d5f6eed",
"is_bot": false,
"headline": "Always include the library in the user-agent.",
"author_name": "Brian Wolff",
"author_login": "bawolff",
"committed_at": "2025-08-24T21:41:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15e81485ecd3566c5fddee23bcbdd9dd93c7886b",
"body": "Add worth mentioning changes to CHANGELOG.md that captures what\nchanged since the last releast (v2.2.0).\n\nBug: T398776\nChange-Id: I98e9f741e3f5f2227dce4d40452b03dc2a404c9a",
"is_bot": false,
"headline": "Prepare to tag version 2.3.0",
"author_name": "Derick Alangi",
"author_login": "xSavitar",
"committed_at": "2025-07-08T12:43:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "879da11de0e3195a4e2e8e99adfcd79886dc1531",
"body": "Change-Id: Id72b408346271a47604f9d9fc692c0a4f5a44f41",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 47.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2025-05-15T22:44:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d2fb144287d74e3ec7746d0e9bb1a1b0a24cf60",
"body": "Change-Id: Id4ac656715c9f8f27863e4cb32adbf5fffc971f0",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 46.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2025-02-01T05:20:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "442686fd2586d7733a4e3b9729bbbbec850e9b40",
"body": "Change-Id: I426b6ef6fb11b5052fd90458a0acd3d3f70b8494",
"is_bot": false,
"headline": "build: Updating phpunit/phpunit to 9.6.21",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2024-11-30T04:08:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93cf9e642fb14d494b73bd316d2fea05d5aeaa3c",
"body": "Change-Id: I631338b4e3bd8f9f9d0adc818b2e10224004b44d",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 45.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2024-11-03T12:29:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ead9eb5ae016b5211159d9d24085d472bc123a1d",
"body": "Not set on local runs\n\nChange-Id: Id27ce57ac6ccd4807c574c1099648109eda82507",
"is_bot": false,
"headline": "build: Remove use of $PHPUNIT_ARGS",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2024-10-18T21:59:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "166aea876951706c889b8f31faefcd2de38be41a",
"body": "Change-Id: Ib87e2fe0baffe7bbe55b94e88c2af1741cd53e55",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 44.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2024-08-12T05:56:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab3a00e6cd77c62e5f50f82e1d11c4f05a98c7dc",
"body": "The Git tag for version 2.1.0 was applied to the wrong commit\nand does not actually include all of the listed changes,\nso correct release notes (and the date as well).\n\nChange-Id: Ibbc6ee43bb631c1f0dad7b4002ddd38f7ca6d775",
"is_bot": false,
"headline": "Release 2.2.0",
"author_name": "Bartosz Dziewoński",
"author_login": "MatmaRex",
"committed_at": "2024-07-19T13:42:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fad7af2f588ef234b5981e4cc5ddb45930566b4",
"body": null,
"is_bot": false,
"headline": "Merge \"Release 2.1.0\"",
"author_name": "jenkins-bot",
"author_login": null,
"committed_at": "2024-07-17T19:45:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e258e38a5401056e931607be539fe948544b52d5",
"body": "Change-Id: Iff2e0f346e6ac0500e5b1da1a896eb6a2d5d04af",
"is_bot": false,
"headline": "Release 2.1.0",
"author_name": "Erik Bernhardson",
"author_login": "ebernhardson",
"committed_at": "2024-07-11T19:55:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43a853b453cab230cc61bcb474eef9deaae3907b",
"body": "Change-Id: I9cf36b14264d4dd2c7fdea267cfadbacf83ec6cf",
"is_bot": false,
"headline": "Should be function call",
"author_name": "AManWithNoPlan",
"author_login": null,
"committed_at": "2024-07-01T12:36:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "853242832a5a8dc75a73f50877e7c40aa99af7a0",
"body": "Bug: T352814\nChange-Id: I8f9d242825ed6d25d6d4e07294c477789d916b38",
"is_bot": false,
"headline": "This variable is no longer used",
"author_name": "AManWithNoPlan",
"author_login": null,
"committed_at": "2024-07-01T12:21:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "589c220102ab67afbc40a42c594d9c07ba60584a",
"body": "* mediawiki/minus-x: 1.1.1 → 1.1.3\n* php-parallel-lint/php-parallel-lint: 1.3.2 → 1.4.0\n\nChange-Id: I4c106f77c45794e47f2a71ebe93e4d989a4d1be4",
"is_bot": false,
"headline": "build: Updating composer dependencies",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2024-05-06T04:16:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8c3e2f2d66996937e6d07bd1e8541200bd6c289",
"body": "The client so far has exclusively used the authorize endpoint to\ninitiate sessions, but mediawiki supports a second mode. The existing\nmode always prompts the user to re-verify the authorize request,\nbut in cases where only authentication is being done we can use the\nauthenticate endpoint and skip t\n[…]\nonly and degrade\nthem into authorize requests. But still, the historical behaviour was\nmantained to avoid opportunity of breaking unknown systems.\n\nChange-Id: I79496d5779225bafa8f8169a7dd88602197e845d",
"is_bot": false,
"headline": "Support authentication only sessions",
"author_name": "Erik Bernhardson",
"author_login": "ebernhardson",
"committed_at": "2024-03-15T19:36:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba5730f417d0b0a23e430187bfdea814878df17c",
"body": "Change-Id: I9ff122799919b81c50258cfeab5141ece696e753",
"is_bot": false,
"headline": "build: Upgrade mediawiki/mediawiki-codesniffer to v43.0.0",
"author_name": "James D. Forrester",
"author_login": "jdforrester",
"committed_at": "2024-01-31T15:01:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cf589856dfbf2382f6645eb56170ccdfe0de037",
"body": "Bug: T342110\nChange-Id: I97c130b7c319ae5bfd663aba77c8e90fe0cadd96",
"is_bot": false,
"headline": "build: Upgrade phpunit to 9.6.16",
"author_name": "James D. Forrester",
"author_login": "jdforrester",
"committed_at": "2024-01-31T14:57:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac9f5f796e248682a9e5441bb85a9ec963a50617",
"body": "Change-Id: I146449b0bde93670cd8c0984d207f2a64dec13c2",
"is_bot": false,
"headline": "feat: Allow to use psr/log 2 and 3",
"author_name": "Hannes Kruse",
"author_login": "octfx",
"committed_at": "2023-05-26T10:33:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f518af9488160365a9f13285de49784bbebf2af6",
"body": "To make it inherit the return value.\n\nThis avoids Symfony complaining LoggerAwareInterface::setLogger()\nwill be return void as of version 3.0.\n\nChange-Id: I63f6a44ec54828291a47f3794bd6bd1268ed3314",
"is_bot": false,
"headline": "Add @inheritDoc for Client::setLogger()",
"author_name": "Sam Wilson",
"author_login": "samwilson",
"committed_at": "2023-05-12T06:01:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77db605711071ad1ef6afc0860216a53ef8a99b2",
"body": "Change-Id: I97b708919099f471302a63e4a6facb4a9f28f465",
"is_bot": false,
"headline": "Release 2.0.0",
"author_name": "Gergő Tisza",
"author_login": "tgr",
"committed_at": "2023-03-30T19:44:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a81cd35b8f5e809b348df4d065f05a161ed3a79",
"body": "Also make error logging match that of initiate().\n\nFollows up I8524347f6686fd1b87a88d91126f9b8094fe2cf8.\n\nBug: T332429\nChange-Id: Id6a38665ba7b2d6d21febef25425bb319694b947",
"is_bot": false,
"headline": "Log errors returned by server in nicer format",
"author_name": "Gergő Tisza",
"author_login": "tgr",
"committed_at": "2023-03-21T05:53:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0f5c30ccb349075e7bd95c5eda0d33a810eba21",
"body": "Change-Id: I4a01d4058a4c35101150e3d71fa4a901b2e63dc8",
"is_bot": false,
"headline": "dev: Move history to CHANGELOG.md",
"author_name": "Bryan Davis",
"author_login": "bd808",
"committed_at": "2023-03-20T11:19:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6066d6229c647bfa7ed11d1bdbe64e10938e769",
"body": "Raise an exception when the /token response does not contain a key or\nsecret.\n\nBug: T332429\nChange-Id: I8524347f6686fd1b87a88d91126f9b8094fe2cf8",
"is_bot": false,
"headline": "Client: check for expected values in token return",
"author_name": "Bryan Davis",
"author_login": "bd808",
"committed_at": "2023-03-17T23:58:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf0d5c582c966aff606d78937012c289fd8ac232",
"body": "Change-Id: I1424ca6db82f1691bc2bf96ce6a700b114651a08",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 41.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2023-03-12T16:14:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33f558adac12c2208d809bac7e5c5fdb8871166a",
"body": "Bug: T320245\nChange-Id: Ia7a4515d5497cf58cbb8b084839704a7930c3788",
"is_bot": false,
"headline": "build: Upgrade PHPUnit from ^8.5 to 9.5.28",
"author_name": "James D. Forrester",
"author_login": "jdforrester",
"committed_at": "2023-02-25T23:37:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "310ccbc4e20bcfe7a53a9141ed21d78ef7a57b4e",
"body": "Change-Id: I2428cc94071ac1f8d8f80d69191e776282ea635b",
"is_bot": false,
"headline": "[BREAKING CHANGE] Drop PHP 7.2 and PHP 7.3 support",
"author_name": "James D. Forrester",
"author_login": "jdforrester",
"committed_at": "2023-02-25T23:35:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ad60dddc56ac1f3d4865fe1495e3ac359ff0018",
"body": "Change-Id: I94c1b333c95db6fc1ab2a91dac74bb49f351a281",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 40.0.1",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2022-11-17T03:31:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c44684f15caeeda1ce8730e48e35c10922f676f7",
"body": "* mediawiki/mediawiki-codesniffer: 38.0.0 → 39.0.0\n* php-parallel-lint/php-console-highlighter: 0.5.0 → 1.0.0\n* php-parallel-lint/php-parallel-lint: 1.3.1 → 1.3.2\n\nChange-Id: I853cbb90e2e2cdf5fba782e83b651feaef98e280",
"is_bot": false,
"headline": "build: Updating composer dependencies",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2022-05-21T19:38:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e9916afb8cb668f681c0fdf2b14bc82ac0c2e56",
"body": "* mediawiki/mediawiki-codesniffer: 37.0.0 → 38.0.0\n* php-parallel-lint/php-parallel-lint: 1.3.0 → 1.3.1\n\nAdditional changes:\n* composer.json: Updated phpcs command in composer test (T280592).\n* composer.json: Added phpcs command to scripts (T280592).\n\nChange-Id: I8ca3639ccd0c3c008ddb230fd3ca043746a9fec2",
"is_bot": false,
"headline": "build: Updating composer dependencies",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2021-10-24T18:25:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ace642e67b8292a5e351c50daca7d3f2b25fa4cb",
"body": "Change-Id: I4ca7bb3d4017691bc9646bf9b1152fe3db16f127",
"is_bot": false,
"headline": "Update changelog for 1.1 (based on git tag) and 1.2",
"author_name": "Taavi Väänänen",
"author_login": "supertassu",
"committed_at": "2021-10-21T13:34:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81edea5f545ef551cb1fb3e8937fd81c549fa94b",
"body": "Bug: T293609\nChange-Id: Ic0da0b0a5d2a1ac687c65ad9b9419b8f4e6cda25",
"is_bot": false,
"headline": "Let users to supply user-agent",
"author_name": "Martin Urbanec",
"author_login": "urbanecm",
"committed_at": "2021-10-20T03:40:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a7045f7d83147299b08b5242591025dcce967dc",
"body": "Apparently, require_once doesn't return the variables defined\nin the script. Let's declare the config as globals -- given how\neasy the demo app is, this is acceptabe IMO.\n\nChange-Id: I294e2193fc876cc8177b0980091dc0dc5943fc40",
"is_bot": false,
"headline": "Fix the demo",
"author_name": "Martin Urbanec",
"author_login": "urbanecm",
"committed_at": "2021-10-18T13:02:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33b46d714e7d026bda85993d89275854b7f3abe2",
"body": "The are required parameters after the token parameter, so it needs to\nalways be passed anyway.\n\nChange-Id: I6ebdcb2fa6ee6c9442432de877cc262fab22e690",
"is_bot": false,
"headline": "Don't default token parameter to null",
"author_name": "Alexander Vorwerk",
"author_login": "ZabeMath",
"committed_at": "2021-10-03T23:13:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6e8ff167991492a8a372722680c41522f4e4224",
"body": "Change-Id: I2e30043831c9a26b4d74456144102b49a7a53734",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 37.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2021-07-23T17:57:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1d94f9043920b8fdbc99f9ac7c8eabd944cbf49",
"body": "Use /* at the end of exclude-pattern when excluding the whole folder,\nsee Id95236edbd3d87f57719d235c7c9cee366180099 for explaination\n\nChange-Id: Ie3792995d630b085b7eafdbd84f01dcc0b1cb060",
"is_bot": false,
"headline": "build: Cleanup and improve .phpcs.xml",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2021-05-25T17:01:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6eed7d7f9504a2537fcd51a200c6cd6d99585bcb",
"body": "* mediawiki/mediawiki-codesniffer: 35.0.0 → 36.0.0\n* php-parallel-lint/php-parallel-lint: 1.2.0 → 1.3.0\n\nChange-Id: If863c4f1b2429922d1a89650014e326b93f190b3",
"is_bot": false,
"headline": "build: Updating composer dependencies",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2021-05-15T03:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "520ff24480137878f5c93a3c97a8035416fe1fac",
"body": "Bug: T278594\nChange-Id: Ic670fa9b633158b206c8c4a7964de6ede36f10b8",
"is_bot": false,
"headline": "build: Swap deprecated @codingStandardsIgnore to phpcs:ignore",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2021-03-26T23:22:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59c801e077d94fd26397e038ca07dd15934f9473",
"body": "Change-Id: I43feb8743170e8c06e5351914c2eeb47c6921e0a",
"is_bot": false,
"headline": "Remove some phpcs exclusions and fix errors",
"author_name": "Sam Wilson",
"author_login": "samwilson",
"committed_at": "2021-02-04T09:07:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "baeadf6d60fc0def0ae96b53fcfb1856dfcdee16",
"body": "* mediawiki/mediawiki-codesniffer: 34.0.0 → 35.0.0\n The following sniffs are failing and were disabled:\n * MediaWiki.Commenting.FunctionComment.NoParamType\n * MediaWiki.Commenting.PropertyDocumentation.MissingDocumentationPrivate\n\n* mediawiki/minus-x: 1.1.0 → 1.1.1\n\nChange-Id: I472c5ca60cbd99f55a01bc09904a5880edb3e48a",
"is_bot": false,
"headline": "build: Updating composer dependencies",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2021-01-31T00:35:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3232b58d5af00a86de811b4bf24478c6fc69297",
"body": "Also relax PHP requirement to allow PHP 8.0.\n\nChange-Id: I7159a278adc3136a6473c7695ec26c8a5a1df4bc",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 34.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2020-12-08T21:41:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c89ff63c6dbead42e88f12f4611208b4705e267",
"body": "The following sniffs are failing and were disabled:\n* Generic.ControlStructures.DisallowYodaConditions.Found\n* MediaWiki.Commenting.FunctionComment.ObjectTypeHintParam\n* MediaWiki.Commenting.FunctionComment.ObjectTypeHintReturn\n\nChange-Id: Iabdb9e22b074a87835b011a288ee05c6f95680f7",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 33.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2020-11-05T02:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "194eda49610b64948ef35031fa5f29227acd6730",
"body": "Change-Id: Ic009ff5d217838d00de00ef254052652997a4dac",
"is_bot": false,
"headline": "build: Updating mediawiki/minus-x to 1.1.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2020-06-12T06:48:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd178c738da0e490016638bfaa205822aef2fdaf",
"body": "* php-parallel-lint/php-console-highlighter: 0.4 → 0.5.0\n* php-parallel-lint/php-parallel-lint: 1.0.0 → 1.2.0\n\nChange-Id: Icc70698f2ebf8ad03b1d7675c98cc9be85209d11",
"is_bot": false,
"headline": "build: Updating composer dependencies",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2020-05-31T21:59:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1f53ebad4810bc95168da6bf0c9eb8baf72146d",
"body": "The following sniffs are failing and were disabled:\n* PEAR.Functions.ValidDefaultValue.NotAtEnd\n\nAdditional changes:\n* Replaced \"jakub-onderka\" packages with \"php-parallel-lint\".\n\nChange-Id: I5a4ff2ca621c6c2154760b621299010570172ab5",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 31.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2020-05-30T15:59:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fb7f238cb84fc54bab3ee04ca01de63bbd7e910",
"body": "Follows-up dropping Travis in I68ba18363439e6b5.\n\nChange-Id: I3737ef0f46799bd7d928fdd5b4e44ae09465347d",
"is_bot": false,
"headline": "Drop Travis link in README",
"author_name": "Gergő Tisza",
"author_login": "tgr",
"committed_at": "2020-04-27T08:38:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26d8d27122a17ac67362d26de744420e5bed9a44",
"body": "Change-Id: I1f96bdd345a51c79577520d73e1025c152bc3377",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 30.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2020-04-23T02:13:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8ae8a243d7d2286d47a1e90ec6605bbb8ba01fa",
"body": "Additional changes:\n* .gitignore: Added .phpunit.result.cache (T242727).\n\nChange-Id: I9a51e28d27ebb15c90112f55f41d6e6e1250bd56",
"is_bot": false,
"headline": "build: Updating mediawiki/minus-x to 1.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2020-01-30T20:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9077e773a997a0d18e08f9826b02be4736fa6754",
"body": "The following sniffs now pass and were enabled:\n* MediaWiki.Usage.PHPUnitTypeHints.MissingTypehint\n\nChange-Id: I4ee8a098065a31caa9c902b73bdf78c8a7ede7f9",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 29.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2020-01-26T00:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c94831581935b98fd128f51fc72af02ae57f6f5d",
"body": "Bug: T243647\nChange-Id: I5e1bbe89a6fbefb4e2e092a160209bf144298785",
"is_bot": false,
"headline": "Require PHPUnit 8 like MW core",
"author_name": "Daimona Eaytoy",
"author_login": "Daimona",
"committed_at": "2020-01-26T00:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9672fba0585ceb094dbb9e1be8e5a68eb496b7d1",
"body": "Like MW core + extensions and other libraries.\n\nNote: You may want to make a minor release before merging this patch.\n\nChange-Id: I33fbf886c75f0a350490e4166f10856713d9e3d2",
"is_bot": false,
"headline": "Require PHP 7.2.9+",
"author_name": "Daimona Eaytoy",
"author_login": "Daimona",
"committed_at": "2020-01-26T00:36:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fa03d6bf05af11b3ba849ca6c43f20ec78ad674",
"body": "…st-merge anyway\n\nChange-Id: I68ba18363439e6b53eb9642fde9b368563a8c93b",
"is_bot": false,
"headline": "Drop Travis testing, no extra advantage over Wikimedia CI and runs po…",
"author_name": "James D. Forrester",
"author_login": "jdforrester",
"committed_at": "2020-01-16T16:36:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5990007af3a7143c5843709ae2a8f76de80d4bc1",
"body": "composer:\n* mediawiki/minus-x: 0.3.1 → 0.3.2\n* mediawiki/mediawiki-codesniffer: 26.0.0 -> 28.0.0\n\nThe following sniffs are failing and were disabled:\n* PSR12.Properties.ConstantVisibility.NotFound\n* MediaWiki.Usage.PHPUnitTypeHints.MissingTypehint\n\nChange-Id: I6bca64ff2cf64002c56783c42db629e80106839f",
"is_bot": false,
"headline": "build: Updating composer dependencies",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2020-01-04T11:52:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8204ddd200b07d551e8f2012e9d5538a7eba0201",
"body": null,
"is_bot": false,
"headline": "Merge \"Fix code deprecated in PHP 7.4\"",
"author_name": "jenkins-bot",
"author_login": null,
"committed_at": "2019-09-16T23:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "614bfab06e132c655e7d0494cb5aac0440fa557c",
"body": "Bug: T231303\nChange-Id: I290ba6adaafa253cba18a22c8521fcf38d66c5f5",
"is_bot": false,
"headline": "Fix code deprecated in PHP 7.4",
"author_name": "GlazerMann",
"author_login": "GlazerMann",
"committed_at": "2019-09-16T23:49:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2015a0aefe30c4e01d37cdbabc11fce15241b19",
"body": "Change-Id: I19db3743a8637e8ada5f8c065fc51256488eb3f7",
"is_bot": false,
"headline": "Run travis tests on PHP 7.3",
"author_name": "GlazerMann",
"author_login": "GlazerMann",
"committed_at": "2019-09-16T23:47:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c672fe01709e87bfb3f0ac5f84b373f52e647061",
"body": "Change-Id: Id32e73c765738cac509d50bc5601c1dba6dc05a3",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 26.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2019-07-16T08:20:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7afe5220f684b940f4ff17605984e9243aac98e",
"body": "Composer does not support HHVM 4 (which is not fully PHP compatible\nanymore); use 3.18 instead.\n\nBug: T215859\nChange-Id: I79a471131dacc699e3bb42f16e54f3c1ade7775a",
"is_bot": false,
"headline": "Fix Travis builds",
"author_name": "Gergő Tisza",
"author_login": "tgr",
"committed_at": "2019-05-06T22:26:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e055cd3b55b7c3a13801097bb94ec246b5be24c6",
"body": "We should probably get rid of it, but for the time being, at least\nmake users aware of it.\n\nBug: T222550\nChange-Id: I5513d485d3ec3621a8e57b242e4b8cab41cb41c6",
"is_bot": false,
"headline": "Note curl dependency in composer.json",
"author_name": "Gergő Tisza",
"author_login": "tgr",
"committed_at": "2019-05-05T21:23:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c8b33ff91273ba50e987d380724add7051d31ea",
"body": "Change-Id: Ieff2859b3e37ac11ae043cfc93d59933711e3f7e",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 24.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2019-02-07T09:08:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab5e5b417d4df8d39032716599642fd4da4979bd",
"body": "Change-Id: I8072dc6f37a0d6d544cba22f9ba76fb622ae26ac",
"is_bot": false,
"headline": "Remove typo in test class docblock",
"author_name": "Sam Wilson",
"author_login": "samwilson",
"committed_at": "2019-02-02T17:34:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66611fdfafa4fb153d64b2fa8353f9cb53641be6",
"body": "In some situations the JSON Web Token received can be of an\nincorrect format and not contain three dot-delimited parts,\nor contains invalid base64. This adds new Exceptions when\neither of these is the case: it checks the number of parts\nfound in the JWT before trying to assign them to variables,\nand modifies the base64 decoding to be strict so we can\ncheck the return value (for false).\n\nBug: T214973\nChange-Id: Idcf8e1eebe201f8632099b6c49c117d74c302486",
"is_bot": false,
"headline": "Add error checking for JWT and base64 formats",
"author_name": "Sam Wilson",
"author_login": "samwilson",
"committed_at": "2019-01-31T20:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "890efc8817b40e15232b57d574dc7691b7c21215",
"body": "Move the demo code into a working example, and fix a couple of\nmethod parameter default values that I broke in a recent\ncommit.\n\nThe idea with the demo code is that it should work in a browser,\nand explain its processes reasonably thoroughly (without having\ntoo much extraneous code that's only required for the demo\nitself).\n\nBug: T179435\nChange-Id: Ieba8a21b140d992e2590fb625c742cb434d1eda0",
"is_bot": false,
"headline": "Add demo code and fix regression in method params",
"author_name": "Sam Wilson",
"author_login": "samwilson",
"committed_at": "2019-01-29T19:26:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebed657c0fcb3eec616dbf1f1970feb9c43dddc4",
"body": "Change-Id: I16cda5200f77b7e49d1d7a1d1859553f8373c44a",
"is_bot": false,
"headline": "Remove phpcs exceptions and fix docblocks etc.",
"author_name": "Sam Wilson",
"author_login": "samwilson",
"committed_at": "2019-01-27T17:30:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3592cce0d5b4a65b6027f264e70b8cce52232ca5",
"body": null,
"is_bot": false,
"headline": "Merge \"Improve JSON syntax error handling\"",
"author_name": "jenkins-bot",
"author_login": null,
"committed_at": "2019-01-26T20:06:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b977e6e999bfe7a80df5c1658e27704a8954496a",
"body": null,
"is_bot": false,
"headline": "Merge \"Fix sample code in README\"",
"author_name": "jenkins-bot",
"author_login": null,
"committed_at": "2019-01-26T20:06:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c90714727b54370b0add3c1f1316c47f7596eb0f",
"body": "Also mark php-json dependency.\n\nBug: T179030\nChange-Id: I342ce7cf3fd83e79f80c3e89bdb6afbf97e88c21",
"is_bot": false,
"headline": "Improve JSON syntax error handling",
"author_name": "Gergő Tisza",
"author_login": "tgr",
"committed_at": "2019-01-26T00:23:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c8f93f3cf6a13a16e8b3618e11a1ffb3c97df71",
"body": "Change-Id: Id7f5ba026dd8d8857a3dab2013e52114b542e00e",
"is_bot": false,
"headline": "Fix sample code in README",
"author_name": "Gergő Tisza",
"author_login": "tgr",
"committed_at": "2019-01-25T23:50:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19bb20eec43937eff12f52065fbac5f1137a4c17",
"body": null,
"is_bot": false,
"headline": "Merge \"Add changelog in preparation for 1.0.0 release\"",
"author_name": "Aezell",
"author_login": null,
"committed_at": "2019-01-23T18:59:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "895a03ce3c1aee83a5e2e874f70fdb0e08ed6de7",
"body": "Bug: T214440\nChange-Id: Idbc2d5384515e9dc48979259a59dce4595583e70",
"is_bot": false,
"headline": "Drop minus-x back a version to avoid PHP7.1 incompatibility",
"author_name": "Sam Wilson",
"author_login": "samwilson",
"committed_at": "2019-01-23T03:10:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80f10bc0f83d7ae0fe53d64f2f3cf8b2aef9fbc8",
"body": null,
"is_bot": false,
"headline": "Merge \"Add visibility to (public) methods missing it\"",
"author_name": "jenkins-bot",
"author_login": null,
"committed_at": "2019-01-23T01:54:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e29a21be7751c13b8e63163cc17076146f88ab17",
"body": "Change-Id: I6b0154e4f0460db9bd7a3f37bafeb188c0b19756",
"is_bot": false,
"headline": "Add changelog in preparation for 1.0.0 release",
"author_name": "Sam Wilson",
"author_login": "samwilson",
"committed_at": "2019-01-23T01:33:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "128d77442c81a013f195e522f283c5a48811af23",
"body": "Bug: T214440\nChange-Id: I603935a6ae9500b5e69189a873fbcdaee54058bb",
"is_bot": false,
"headline": "Update required PHP version and dependencies",
"author_name": "Sam Wilson",
"author_login": "samwilson",
"committed_at": "2019-01-23T01:10:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6834a81690ea9d78ad91dec25b0380146eb125da",
"body": "Change-Id: I6663c43ec894c8ecce00266930f2671c5e112aea",
"is_bot": false,
"headline": "Add visibility to (public) methods missing it",
"author_name": "Sam Wilson",
"author_login": "samwilson",
"committed_at": "2019-01-22T21:44:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b886dcba6874ed6e7f72f495f468fa6ca62039b9",
"body": "Change-Id: If62428d49a27e05e919b5bf2ce4e180f2ded4efb",
"is_bot": false,
"headline": "Improve phpdocs for Client",
"author_name": "Gergő Tisza",
"author_login": "tgr",
"committed_at": "2018-12-08T20:10:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "098f949a38d964e75d4363585fdc2d4e28b08d90",
"body": "* add autoloader\n* use HTTP for localhost\n* deduplicate base URL\n* remove noop addExtraParams call with misleading comment\n (POST parameters are always signed, except in multipart/form-data\n requests, and then they shouldn't be)\n\nChange-Id: Ic56b924b8dc1d64caef6dfd131aeafeb0758b97d",
"is_bot": false,
"headline": "Improve example code in README",
"author_name": "Gergő Tisza",
"author_login": "tgr",
"committed_at": "2018-12-08T20:05:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84151a3a52647bb12995849d85633c8407ddaa8f",
"body": "Bug: T186739\nChange-Id: I2a8c6ae213e2b7c5f91c5ab82f1e8f251b7a7924",
"is_bot": false,
"headline": "Allow file upload through the Client",
"author_name": "Antoine Lamielle",
"author_login": "0x010C",
"committed_at": "2018-12-08T19:49:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff9f4207805c2e9f41cb7b4f5ef8011fc1e19f98",
"body": "Change-Id: I853bc1df68430bb827b5573f6ca6e9d765947461",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 23.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2018-11-17T06:34:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e6ca7d7de2d87bb13c0b840a2ef5dff1afed207",
"body": "Change-Id: I4cd7012a2f768960b0974796fc85f01f93cbe1fd",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 22.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2018-09-04T02:30:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ec592e5b3e73e4fbef1af18f41c1394f74bf145",
"body": "Change-Id: I290f81170b6ce95118b64489b357d4091ff66706",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 21.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2018-07-28T21:41:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6d1de8e38e9aeb10c9c93011460f464991392e4",
"body": "Change-Id: Idb8acb8347d36b7f332dc592fa1d146864a421d3",
"is_bot": false,
"headline": "Stop travis testing on old versions of PHP",
"author_name": "Reedy",
"author_login": "reedy",
"committed_at": "2018-06-04T02:44:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c84ff83ef03636a6d7a69bfccf122ab1e127aeaf",
"body": "Update code examples in the README to use URLs that are more likely to\nwork. /wiki/ is generally for content and /w/ is for endpoints like\napi.php in most MediaWiki deployments.\n\nChange-Id: I8c4d85663539e93847b6e630fda48eb4fc4ff906",
"is_bot": false,
"headline": "Use standard /w/api.php endpoint in README",
"author_name": "Bryan Davis",
"author_login": "bd808",
"committed_at": "2018-06-04T02:40:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ad25c222e55f171c93d3190ae180abf5ed5376b",
"body": "Change-Id: I1b276c6740baa5fdce28214af54528052e887683",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 20.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2018-06-01T21:53:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a666637f2b07404ba73d8bfd1d3589e37fabf30",
"body": "Change-Id: Idde06949f74babf3034ae057d841a4c4071b7184",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 18.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2018-04-14T10:10:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a9a8039e9067a8afcadd0e4f64768bd813f62e2",
"body": "The following sniffs now pass and were enabled:\n* MediaWiki.Commenting.FunctionComment.MissingParamComment\n* MediaWiki.Usage.SuperGlobalsUsage.SuperGlobals\n\nChange-Id: I9e7ec23c492aa235536bb1300794c68e57e64041",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 17.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2018-03-29T17:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64a44491b774ad5ad959b2afa1a19e51cc299812",
"body": "Change-Id: I7c8e2727862cb0352f017ea56ef3b1c65d182825",
"is_bot": false,
"headline": "build: Updating jakub-onderka/php-parallel-lint to 1.0.0",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2018-03-10T11:02:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb17983ae1d99215a931c7d8c15e7c5002c7555d",
"body": "The Request class only use $_SERVER,\nthan the tests should not set other super globals.\n\nChange-Id: I1f36b088e10b73f0aa3fe33885a125ea88a4a9e2",
"is_bot": false,
"headline": "Remove $_GET and $_POST from tests",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2018-02-27T20:11:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3fa5b6b9fec39c3695a9f73fedd95dbe587d7cc",
"body": "Change-Id: I74b83ac18cb7d0efaf3b6fac4292e1e38dc1e94c",
"is_bot": false,
"headline": "build: Updating phpunit/phpunit to 4.8.36 || ^6.5",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2018-02-27T05:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc6c9b13942b39ae03e13033a4a866d8813dfbb7",
"body": "Change-Id: I4e009b2e92eb750909da1989fcf3b9f1b2c5fca6",
"is_bot": false,
"headline": "build: Updating mediawiki/mediawiki-codesniffer to 16.0.1",
"author_name": "libraryupgrader",
"author_login": null,
"committed_at": "2018-02-25T05:45:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75318ebcbf57972a5136a3c4ab460b24d3bc076b",
"body": "Highlight PHP code when parallel-lint fails\n\nChange-Id: I21851e51f3e7d1c8f6b9d94c0aec185c0bfbe343",
"is_bot": false,
"headline": "build: Add jakub-onderka/php-console-highlighter",
"author_name": "Umherirrender",
"author_login": "umherirrender",
"committed_at": "2018-02-24T10:51:13Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 2,
"commits_last_year": 11,
"latest_release_at": "2019-02-05T09:15:00Z",
"latest_release_tag": "1.0.2",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 8,
"days_since_latest_release": 2728,
"mean_days_between_releases": 976.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "mediawiki/oauthclient",
"exists": true,
"license": "GPL-3.0-or-later",
"keywords": [],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/mediawiki/oauthclient",
"is_deprecated": false,
"latest_version": "2.3.0",
"repository_url": "https://github.com/wikimedia/mediawiki-oauthclient-php",
"versions_count": 12,
"total_downloads": 179275,
"dependents_count": 7,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 5028,
"first_published_at": null,
"latest_published_at": "2025-07-08T12:43:45Z",
"latest_version_yanked": null,
"days_since_latest_publish": 383
}
]
},
"popularity": {
"forks": 7,
"stars": 11,
"watchers": 16,
"fork_history": {
"days": [
{
"date": "2016-05-10",
"count": 1
},
{
"date": "2017-05-14",
"count": 1
},
{
"date": "2019-01-01",
"count": 1
},
{
"date": "2019-01-22",
"count": 1
},
{
"date": "2019-02-13",
"count": 1
},
{
"date": "2024-06-07",
"count": 1
},
{
"date": "2024-07-10",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_forks": 7
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 20361,
"source_files_sampled": 23,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 5,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 3,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "psr/log",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.0||^2.0||^3.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "psr/log",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "ext-curl",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "mediawiki/mediawiki-codesniffer",
"direct": false,
"version": "51.0.0",
"ecosystem": "packagist"
},
{
"name": "mediawiki/minus-x",
"direct": false,
"version": "2.0.1",
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php-parallel-lint/php-console-highlighter",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "php-parallel-lint/php-parallel-lint",
"direct": false,
"version": "1.4.0",
"ecosystem": "packagist"
},
{
"name": "phpunit/phpunit",
"direct": false,
"version": "10.5.63",
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 8,
"direct_count": 1,
"indirect_count": 7
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 10
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "tgr",
"commits": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/145412?v=4"
},
{
"type": "User",
"login": "umherirrender",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/1174884?v=4"
},
{
"type": "User",
"login": "samwilson",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/213655?v=4"
},
{
"type": "User",
"login": "bd808",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/6469?v=4"
},
{
"type": "User",
"login": "jdforrester",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/881572?v=4"
},
{
"type": "User",
"login": "legoktm",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/81392?v=4"
},
{
"type": "User",
"login": "urbanecm",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/10050467?v=4"
},
{
"type": "User",
"login": "GlazerMann",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/17836560?v=4"
},
{
"type": "User",
"login": "ebernhardson",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/558434?v=4"
},
{
"type": "User",
"login": "Daimona",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/38216014?v=4"
}
],
"contributors_sampled": 19,
"top_contributor_share": 0.247
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 9 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 1,
"reason": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ceaea699367201a43e8c1abac2dccb8fe384e8dd",
"ran_at": "2026-07-26T16:22:47Z",
"aggregate_score": 3.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/wikimedia/mediawiki-oauthclient-php",
"host": "github.com",
"name": "mediawiki-oauthclient-php",
"owner": "wikimedia"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"security": 45,
"vitality": 46,
"community": 48,
"governance": 59,
"engineering": 40
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 46,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"commits_last_year": 11,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 8
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "8/52 weeks with commits",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 8
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "11 commits in the last year",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 11
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"releases_count": 2,
"latest_release_tag": "1.0.2",
"releases_from_tags": false,
"days_since_latest_release": 2728,
"mean_days_between_releases": 976.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2728 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2728
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~976.5 days",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 976.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 48,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"forks": 7,
"stars": 11,
"watchers": 16,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "11 stars",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 11
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "7 forks",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 7
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "16 watchers",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 16
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (GPL-3.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "GPL-3.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"packages": [
"mediawiki/oauthclient"
],
"dependents": 7,
"ecosystems": "packagist",
"total_downloads": 179275,
"monthly_downloads": 5028
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "5,028 downloads/month across packagist",
"points": 49.4,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 5028,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "7 packages depend on it",
"points": 6,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 7
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 59,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 19,
"top_contributor_share": 0.247
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 25% of commits",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 25
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "19 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 19
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 9 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 10
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "0/10 decided PRs merged",
"points": 0,
"status": "missed",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 0,
"decided": 10
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"followers": 2189,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "wikimedia",
"public_repos": 1963,
"account_age_days": 6363
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2,189 followers of wikimedia",
"points": 24,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2189,
"login": "wikimedia"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "1963 public repos, account ~17 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 1963
}
},
{
"code": "account_age_years",
"params": {
"years": 17
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"packages": [
"mediawiki/oauthclient"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 383
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 383 days ago",
"points": 14,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 383
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "12 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 12
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 40,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 30,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://www.mediawiki.org/wiki/Oauthclient-php",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.mediawiki.org/wiki/Oauthclient-php",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 3.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 9 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 5 resolved dependencies against OSV; 3 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 5
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 3
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 5,
"unassessed_packages": 3,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 5,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 22
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 34,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.72,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "72 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 38.4,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 72,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 24,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 20361,
"source_files_sampled": 23,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/23 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 23,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-26T16:22:59.003050Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/w/wikimedia/mediawiki-oauthclient-php.svg",
"full_name": "wikimedia/mediawiki-oauthclient-php",
"license_state": "standard",
"license_spdx": "GPL-3.0"
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — Packagist.