Alfresco / alfresco-java-sdk

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

Each point covers 5 days.

Full resolved dependency set from the GitHub dependency graph: 22 direct and 97 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

Installing maven:org.alfresco:alfresco-java-rest-api-common@7.3.3-A.2 pulls in 58 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.

No known advisories affect the assessed dependencies.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [
        "alfresco",
        "java",
        "sdk",
        "events",
        "rest-client",
        "out-of-process"
      ],
      "is_fork": false,
      "size_kb": 3915,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Java": 277807,
        "Scala": 521,
        "Shell": 8020,
        "Mustache": 50417
      },
      "pushed_at": "2026-07-23T21:03:26Z",
      "created_at": "2021-01-19T17:02:13Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T07:45:29Z",
      "description": "Alfresco Out-Of-Process SDK for Java Developers",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "develop",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Java",
      "significant_languages": [
        "Java",
        "Mustache"
      ]
    },
    "owner": {
      "blog": "https://www.alfresco.com",
      "name": "Alfresco Software",
      "type": "Organization",
      "login": "Alfresco",
      "company": null,
      "location": null,
      "followers": 435,
      "avatar_url": "https://avatars.githubusercontent.com/u/391127?v=4",
      "created_at": "2010-09-07T20:28:19Z",
      "is_verified": null,
      "public_repos": 137,
      "account_age_days": 5799
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "7.3.2",
          "kind": "patch",
          "published_at": "2026-06-04T09:23:57Z"
        },
        {
          "tag": "7.3.1",
          "kind": "patch",
          "published_at": "2026-04-23T10:43:33Z"
        },
        {
          "tag": "7.1.0",
          "kind": "minor",
          "published_at": "2025-03-18T06:12:53Z"
        },
        {
          "tag": "7.0.0",
          "kind": "major",
          "published_at": "2024-12-11T12:22:56Z"
        },
        {
          "tag": "6.4.0",
          "kind": "minor",
          "published_at": "2024-11-22T10:18:57Z"
        },
        {
          "tag": "6.3.0",
          "kind": "minor",
          "published_at": "2024-11-05T11:15:24Z"
        },
        {
          "tag": "6.2.0",
          "kind": "minor",
          "published_at": "2024-04-18T10:52:38Z"
        },
        {
          "tag": "6.2-M1",
          "kind": "other",
          "published_at": "2024-04-03T10:59:34Z"
        },
        {
          "tag": "v6.1.0",
          "kind": "minor",
          "published_at": "2024-03-06T13:20:54Z"
        },
        {
          "tag": "6.1-M3",
          "kind": "other",
          "published_at": "2024-01-25T09:12:50Z"
        },
        {
          "tag": "6.1-M2",
          "kind": "other",
          "published_at": "2024-01-09T15:38:58Z"
        },
        {
          "tag": "6.1-M1",
          "kind": "other",
          "published_at": "2023-12-27T16:03:46Z"
        },
        {
          "tag": "6.0.0",
          "kind": "major",
          "published_at": "2023-11-10T10:00:49Z"
        },
        {
          "tag": "6.0-M1",
          "kind": "other",
          "published_at": "2023-07-19T06:13:35Z"
        },
        {
          "tag": "v5.0.5",
          "kind": "patch",
          "published_at": "2022-07-05T14:59:48Z"
        },
        {
          "tag": "v5.2.0",
          "kind": "minor",
          "published_at": "2022-06-09T14:01:04Z"
        },
        {
          "tag": "v5.1.4",
          "kind": "patch",
          "published_at": "2022-06-09T11:28:51Z"
        },
        {
          "tag": "v5.1.3",
          "kind": "patch",
          "published_at": "2022-01-20T11:13:35Z"
        },
        {
          "tag": "v5.1.2",
          "kind": "patch",
          "published_at": "2021-11-15T13:25:55Z"
        },
        {
          "tag": "v5.1.1",
          "kind": "patch",
          "published_at": "2021-10-06T12:19:25Z"
        },
        {
          "tag": "v5.1.0",
          "kind": "minor",
          "published_at": "2021-10-04T10:40:08Z"
        },
        {
          "tag": "v5.0.4",
          "kind": "patch",
          "published_at": "2021-09-10T11:40:01Z"
        },
        {
          "tag": "v5.0.3",
          "kind": "patch",
          "published_at": "2021-08-26T09:50:28Z"
        },
        {
          "tag": "v5.0.2",
          "kind": "patch",
          "published_at": "2021-07-06T13:38:01Z"
        },
        {
          "tag": "v5.0.1",
          "kind": "patch",
          "published_at": "2021-05-21T10:23:27Z"
        },
        {
          "tag": "v5.0.0",
          "kind": "major",
          "published_at": "2021-03-19T15:33:59Z"
        },
        {
          "tag": "v5.0.0-M1",
          "kind": "prerelease",
          "published_at": "2021-03-18T17:38:44Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "42094adc9742f203a3bc34da3135dc9f5bce66f2",
          "body": "* Add workflow_dispatch inputs to trigger Maven Central release step independently\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n* Add tag existence validation for workflow_dispatch publishing\n\n* Handle Maven Ce\n[…]\nred-by: Abhra Poddar <abhra.poddar@hyland.com>\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\nCo-authored-by: Giovanni Toraldo <giovanni.toraldo@hyland.com>",
          "is_bot": false,
          "headline": "Enhancing workflow_dispatch to include input for release (#432)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-07-23T07:45:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a5cd2bd05a9865ebb3d480da1158fe95e38f6654",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-21T12:46:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30ff404b826d5a57ea31ce79ae71dafe582b224b",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.3",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-21T12:46:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "353aa119e50536adf31ae5e63d5a4a36c0638737",
          "body": "Please [release] and [publish] Alfresco OOP SDK 7.3.3 GA",
          "is_bot": false,
          "headline": "ACS-12198 : Please [release] and [publish] Alfresco OOP SDK 7.3.3 GA",
          "author_name": "Abhra Poddar",
          "author_login": "AbhraPoddar",
          "committed_at": "2026-07-21T12:39:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00d5b0c91da64ef584b4bd378f93bb1710a24a4b",
          "body": "ACS-12198 : Please [release] and [publish] Alfresco Out-of-Process SDK 7.3.3 GA",
          "is_bot": false,
          "headline": "ACS-12198 : Please [release] and [publish] Alfresco OOP SDK 7.3.3 GA",
          "author_name": "Abhra Poddar",
          "author_login": "AbhraPoddar",
          "committed_at": "2026-07-21T11:38:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a165e2c57f51c32d891557a166e7d2e16dda2798",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-13T10:20:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1af875cff9770c5b29754128ad876327a7f2578d",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.3-A.2",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-13T10:20:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5612325fbf69ba693786091a20be9a82dea37853",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-12157]: [release] [publish] Alfresco OOP SDK 7.3.3-A.2",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-07-13T10:14:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2651dabb17d8da4f695cb504acc17e3555d9535",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-13T08:31:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83ae9a5c4e4ea088b725cd9624cf5129c9884db2",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.3-A.1",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-07-13T08:31:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89f1d76c995507cd0765351a7ee767c89097122f",
          "body": "…(#425)",
          "is_bot": false,
          "headline": "[ACS-12157]: 7.3.3-A.1-SNAPSHOT [release] [publish] Alfresco OOP SDK …",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-07-13T08:24:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ebbe66478cbb51d0d927d54ddb23463fef901092",
          "body": "* Bump logback-core 1.5.37\n\n* Bump logback-classic to 1.5.37",
          "is_bot": false,
          "headline": "Bump logback-core 1.5.37 (#421)",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-07-09T09:07:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a48809fa4caf303afc10fe3fd956334670550ac",
          "body": "…1 (#420)\n\nBumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.22.0 to 2.22.1.\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n  dependency-version: 2.22.1\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.fasterxml.jackson.core:jackson-databind from 2.22.0 to 2.22.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-09T07:10:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b9d3b2bbeb3ed546a874c8963e586a3bcdd002b0",
          "body": "…n.core) (#419)\n\n* Bump jackson-databind to 2.22 (com.fatserxml) and 3.2.0 (tools.jackson.core)",
          "is_bot": false,
          "headline": "Bump jackson-databind to 2.22 (com.fasterxml) and 3.2.0 (tools.jackso…",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-07-02T13:28:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab1aa2ad2e6bc4b1c925009e1c1c9aa24e0f1ca0",
          "body": null,
          "is_bot": false,
          "headline": "ACS-1194 Added workflow permissions to CI (#417)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-26T15:28:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "854d68c4b4a305e60e44e6133e9da65d471028c2",
          "body": null,
          "is_bot": false,
          "headline": "ACS-12027 Removed unused ci secrets (#416)",
          "author_name": "Sayan Bhattacharya",
          "author_login": "bsayan2",
          "committed_at": "2026-06-17T06:38:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89434c83d32273147373641793e9d0138b9ed34d",
          "body": null,
          "is_bot": false,
          "headline": "ACS-12005 Remove Veracode integration (#414)",
          "author_name": "Gerard Olenski",
          "author_login": "gerardolenski",
          "committed_at": "2026-06-11T07:51:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "771d3866139923e8a1d12c9440fde266cf0c5243",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-04T08:39:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92ef6dd2f376673a91368c69e6de9cec0794b31a",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-04T08:39:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7af0844d81530c75eb93b2d9eda9899c489a2bc",
          "body": "…#410)\n\nBump AGS version and java sdk version",
          "is_bot": false,
          "headline": "[ACS-11837] : Please [release] and [publish] Alfresco OOP SDK 7.3.2 (…",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-06-04T08:31:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fde0dcf8284cc8a80fe463c451c596824bdacfcc",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T18:25:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66ede78be4f3aef0071de194d2ff1d4a54df01af",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.12",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T18:25:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a4c76473b0290f224fc413fdbefcbda043bed18",
          "body": "…12 (#409)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T18:18:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4c79f47cbc6f8ba927f2f1860a5c117153229fc",
          "body": null,
          "is_bot": false,
          "headline": "ACS-11431 List samples by name in mvn cmd (#408)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T18:10:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e75c3d386457c7773c8d55550d69476fb72085d0",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T17:58:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c79d5b879e0cdd77a473717980ffd271d3eeced7",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.11",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T17:58:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c2b18e4db91a2e0c1bbd38dcfdc198d7cb4a8ac",
          "body": "…11 (#407)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T17:33:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e6806d10877f270ff97762a93d028e717b3984a",
          "body": "…ssword in CI (#406)",
          "is_bot": false,
          "headline": "[ACS-11431] Add description to poms and updated MAVEN_USERNAME and pa…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T17:25:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e0f2bf557a069ba9cf3f509978ab90b8909291a",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T15:23:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77ca21b3c121e26a0e40487eef667af2346b2bbb",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.10",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T15:23:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "252983823556830c1c2dd73fc06783830355d83e",
          "body": "…10 (#405)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T15:16:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4e3d196629b8a43ab3123e8eae1dd6288c8bc8d",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-11431] Updated mvn command to leave out integration tests (#404)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T15:06:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a2cf602642a8a88009bddbdeb7112ed9ebccf07",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T14:03:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6c2452239a3ace962ba5dabbc50790ef23fb8eb",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.9",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T14:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15539963409662b3af1eb341089d97fa3dc44306",
          "body": "…9 (#403)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T13:56:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "574d5c58ff07e79b928a9777b030be699ffaf1c8",
          "body": null,
          "is_bot": false,
          "headline": "ACS-11431 Update mvn comand to be fully qualified (#400)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T13:06:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5aa34832584a0c930c5e7ee16c26745008d3ff45",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T01:30:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3dba34c97a7aecb9c924d1f0054b928877eda74f",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.8",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-03T01:30:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "963f957bcce63a258ef6b4b88d42c1157aa4d21f",
          "body": "…8 (#399)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T01:23:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42477a0b2dcc632209918a21ec6efbcdb1b35090",
          "body": null,
          "is_bot": false,
          "headline": "ACS-11431 Updated mvn command (#398)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-03T01:15:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d3e2aa5c11c3fe5fa27926f5aabcc873a99ab9d",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T19:56:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4573e5e60a275f1b469c990a8f08162b8be6aeb5",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.7",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T19:56:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c94c147cb561179140e0c92516dd952e8c475ae",
          "body": "…7 (#397)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T19:50:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8b6a689ebb37f40fe4726eb1a22b63b86ef34eb",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-11431] Updated CI to not push samples to maven (#396)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T19:44:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b3ce7445ffe3f46d1023b45748616d38f212d58",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T19:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c290567ab9e947fe60be808748e65fe15d89d807",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.6",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T19:16:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "878c815e2738ab72bf469a117a092e2a3a7077fa",
          "body": "…6 (#395)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T19:09:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c22012baf87107985bdea3e2d75e7034ad9da39",
          "body": null,
          "is_bot": false,
          "headline": "ACS-11431 Added \"-Dmaven.deploy.skip=true\" to maven_release.sh (#394)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T17:54:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "594b7131474a5c558edf7542471dd18838a0775c",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T16:47:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60a13be6c4477cb0d79ac6c3aa66fa4252a97dec",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.5",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-02T16:47:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08aac67ee2916e5f1fd2270b11eb0a22366f0b24",
          "body": "…5 (#393)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T16:41:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c052a3406ad5e88fe0dc4296cd305bfac955d1a7",
          "body": "…4 (#392)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T15:09:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c523f3a6227b74742a6edea8d1b76a02ed248bfb",
          "body": "…o maven (#391)",
          "is_bot": false,
          "headline": "[ACS-11431] Fix issue where artifacts are still not being published t…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-02T14:24:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fb7548c3ba4fb7db040e8c9345ab662aaa13c79",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-01T21:26:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea57fc74d1c878906eb84dd774264f7e8ccbda65",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.4",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-06-01T21:26:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbdd5ae72a1251a6eca0169d53fc67d5d44ef014",
          "body": "…4 (#390)",
          "is_bot": false,
          "headline": "[ACS-11431] Please [release] and [publish] Alfresco Java SDK 7.3.2-A.…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-01T21:20:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42b3446ea20d0a56e7ab117dfe3bdf7fa93552f9",
          "body": "…ally create/upload the Central bundle for all modules (#389)",
          "is_bot": false,
          "headline": "patch the Maven Central job to run deploy lifecycle which should actu…",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-06-01T15:48:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06c76d7ed73a60b247d318f6e940c5f8696208c1",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-29T10:16:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f908afb54ac60980b398036ad0aea41c9ead7337",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.3",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-29T10:16:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5cb1bc8060c4b5d87cb274f2dee98ff82b2195f",
          "body": "bump alpha release version",
          "is_bot": false,
          "headline": "[ACS-11836]: [release] [publish] Alfresco OOP SDK 7.3.2-A.3",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-05-29T10:10:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "873f62c54c61780f9d61acb69f65ca522a7838a3",
          "body": "* Fixed issue where GPG key failed to import\n\n* Addressed env in Init step as per Dhavl, removed Validate step for Gio, fixed mvn command\n\n* Import GPG Key now leverages ghaction-crazy-max/import-gpg\n\n* Using action I created in alfresco-build-tools for importing GPG key\n\n* removed blank space\n\n---------\n\nCo-authored-by: Dhaval Patel <pateldhaval.kanubhai@hyland.com>",
          "is_bot": false,
          "headline": "ACS-11431 Fixing issue where GPG key failed to import (#386)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-05-29T09:05:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbb9f8f6cacac440a05e6b7ae8d86f01586f5da2",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-25T13:26:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef07b9d83bf04101ec2cb9451fbad394c40753ab",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.2",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-25T13:26:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "923a77c98557b83bea5385c51772d053f1068d2f",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-11836]: [release] [publish] Alfresco OOP SDK 7.3.2-A.2",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-05-25T13:20:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64cb1a3774f6d58b6154c3cd4369514cf45669a9",
          "body": "* Bump tomcat-embed-core and related artifacts to resolve CVE\n\nNow under dependency tree we can see it is updated\n\n+- org.apache.tomcat.embed:tomcat-embed-core:jar:11.0.22:compile\n+- org.apache.tomcat.embed:tomcat-embed-el:jar:11.0.22:compile\n+- org.apache.tomcat.embed:tomcat-embed-websocket:jar:11.\n[…]\n/appendix/dependency-versions/properties.html\n\n* Updating comments on xml file as suggested in PR\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: Upgrade Tomcat to 11.0.22 to resolve critical CVEs (#384)",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-05-25T12:09:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "32f1226c54da74196ee2d32c913d0040dc98cefe",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-25T07:20:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d3da17293b317fed4119887f64ef3ac67031af8",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.2-A.1",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-05-25T07:20:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7bc1e1ca8f52872451c07131154faffcc7c6015",
          "body": "* Adding env variables back to ci to resolve release error\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n* moved env variable from job level to step level as those only needed there\n\n* Potential fix for pull req\n[…]\n: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n* Removing comments\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "[ACS-11836]: [release] [publish] Alfresco OOP SDK 7.3.2-A.1",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-05-25T07:10:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d4c29d125633b8a2883b3a2a52bd654f80b45c43",
          "body": "* remove check_version block from ci\n\n* Removed needs: check_version",
          "is_bot": false,
          "headline": "ACS-11431 Remove unnecessary check_version block (#383)",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-05-25T06:00:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "390731e5cb2a18f032e86c6a50f668cf30839619",
          "body": "*[ACS-11836]: [release] Alfresco OOP SDK 7.3.2-A.1\n\n* bump ags version",
          "is_bot": false,
          "headline": "[ACS-11836]: [release] Alfresco OOP SDK 7.3.2-A.1",
          "author_name": "Dhaval Patel",
          "author_login": "dpatel-alfresco",
          "committed_at": "2026-05-22T11:22:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e17c1404a2d9517739515e1f049dda892287bf68",
          "body": "* Added an sdk-release Maven profile with the Sonatype Central publishing plugin plus source and GPG signing, added Central credentials to the CI settings template, and added workflow logic to gate Central publication to GA versions only and publish them to Maven Central after the existing release j\n[…]\nd the workflow so it no longer uses envsubst in ci.yml and instead just installs the static settings template, because the template now uses Maven’s ${env.*} notation consistently in .ci.settings.xml.",
          "is_bot": false,
          "headline": "ACS-11431 Fixed publishing to Maven Central upon release",
          "author_name": "Adam Decatur",
          "author_login": "adecatur72",
          "committed_at": "2026-05-21T15:05:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8c7126dc8f46a2b0f1e2408e9f2fb297a0332ce",
          "body": null,
          "is_bot": false,
          "headline": "Bumped spring-security-web from 7.0.4.jar → 7.0.5.jar (#380)",
          "author_name": "Sanjoy Das",
          "author_login": "SanjoyHyland2025",
          "committed_at": "2026-05-19T08:43:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8521651191ad43c810e409bbec4d849ee4927fe",
          "body": "This resolves the vulnerable spring-boot-security:4.0.5 pulled transitively via: alfresco-java-rest-api-common → spring-boot-starter-security-oauth2-client:4.0.5 → spring-boot-security:4.0.5",
          "is_bot": false,
          "headline": "Bumped spring-boot-starter-parent from 4.0.5 → 4.0.6 (#371)",
          "author_name": "Sanjoy Das",
          "author_login": "SanjoyHyland2025",
          "committed_at": "2026-05-14T09:12:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d68d2e5ae90af71751db725404056e1c3a4158c2",
          "body": "…e (#367)\n\nBumps [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) from 7.0.6 to 7.0.7.\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.6...v7.0.7)\n\n---\n[…]\nendency-version: 7.0.7\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.springframework:spring-webmvc in /samples/oauth2-feign-sampl…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T04:47:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bbe3ae9d808c06a767f99f9492934cce0cd7dbc",
          "body": "* ACS-11627 Migrate alfresco-java-sdk to GHAS\n\n* ACS-11627 updated groups\n\n* ACS-11627 updated ignore list\n\n* ACS-11627 removed docker ecosystem",
          "is_bot": false,
          "headline": "ACS-11627 Migrate alfresco-java-sdk to GHAS (#365)",
          "author_name": "Satyam Sah",
          "author_login": "SatyamSah5",
          "committed_at": "2026-05-13T23:55:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6de41f408b5b23330764ba561b70ecf10ea7d0da",
          "body": "* PRODSEC-11860 - Bump org.bouncycastle:bcprov-jdk18on:jar to 1.84\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472\n[…]\n28472+Copilot@users.noreply.github.com>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: AbhraPoddar <212726023+AbhraPoddar@users.noreply.github.com>",
          "is_bot": false,
          "headline": "PRODSEC-11860 - Bump org.bouncycastle:bcprov-jdk18on:jar to 1.84 (#370)",
          "author_name": "Abhra Poddar",
          "author_login": "AbhraPoddar",
          "committed_at": "2026-05-12T07:16:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "54ccbddad1e97be530d850f2e71a9ebb9e1ee243",
          "body": null,
          "is_bot": false,
          "headline": "Bump activemq-client to 6.2.5 (#360)",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-04-28T12:13:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0e084ab62c844dfff712548e07ae21adc0bf1ad",
          "body": null,
          "is_bot": false,
          "headline": "Bump to Spring Boot 4.0.6 (#359)",
          "author_name": "Shreya Saha",
          "author_login": "shsahahyland",
          "committed_at": "2026-04-24T13:34:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9cd8875d84263211b1c5553153b0aa58c1a5a83",
          "body": null,
          "is_bot": false,
          "headline": "AAE-43233 Upgrade Spring Boot from 4.0.2 to 4.0.5 (#344)",
          "author_name": "Edoardo Patti",
          "author_login": "astrologic7",
          "committed_at": "2026-04-22T14:52:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d97153bac2ba4cfdbe441299a737209473182d5",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-04-22T14:08:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8278d8e7676e7651f9d44035bd4011cec4fdf20d",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.1",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-04-22T14:08:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba6d7120de0df1d7e27150e45ad5e196fb74b3f0",
          "body": "* Release Alfresco OOP SDK 7.3.1\n\n* fix review comments\n\n---------\n\nCo-authored-by: SanjoyHyland2025 <Sanjoy.Das@hyland.com>",
          "is_bot": false,
          "headline": "Please [release] and [publish] OOP SDK 7.3.1",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-04-22T14:01:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2f9d7e8c1cb20928bcac307a129697502bc8eb7",
          "body": "* Draft SDK release",
          "is_bot": false,
          "headline": "SDK draft release (#357)",
          "author_name": "Sanjoy Das",
          "author_login": "SanjoyHyland2025",
          "committed_at": "2026-04-22T08:59:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2eadfdb0f35aed2912b1ef1571322e572ef56716",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-04-10T13:26:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bbae17781f1b9e136bc2a0510709f6b5eb86c60",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.1-A.1",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-04-10T13:26:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f38c4f434a39049789a6bbc9ba1a9e02f39e5d2e",
          "body": "… (#350)",
          "is_bot": false,
          "headline": "[ACS-11528]: 7.3.1-A.1-SNAPSHOT [release] [publish] Alfresco OOP SDK …",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-04-10T13:19:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b6f09dc6af5592a25c8be4375d2e6a215d59dd0",
          "body": "* Bump tomcat-embed-core  PRODSEC-11559\n\n* Bump spring-boot-starter  PRODSEC-11330",
          "is_bot": false,
          "headline": "Bump tomcat-embed-core  PRODSEC-11559 (#349)",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-04-10T11:53:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a71f81431174747a22febd92d9e997902f6b4001",
          "body": "…d PRODSEC-11400 (#348)\n\n* Bump spring-web-mvc and spring-security-web versions PRODSEC-11398 and PRODSEC-11400",
          "is_bot": false,
          "headline": "Bump spring-web-mvc and spring-security-web versions PRODSEC-11398 an…",
          "author_name": "Somnath Deshmukh",
          "author_login": "Somnath-Deshmukh",
          "committed_at": "2026-04-10T04:03:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a42de03171d7927b0e80282d64cff20bd30fc49e",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare for next development iteration",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-03-10T16:03:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e89b79b0db4db3f92bef7eea42dd2af23d1162d8",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin][skip ci] prepare release 7.3.0",
          "author_name": "alfresco-build",
          "author_login": "alfresco-build",
          "committed_at": "2026-03-10T16:03:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4c38a8e99aee9083caa175b7a3b299b07941faa",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-11186] Please [release] and [publish] OOP SDK 7.3.0 (#342)",
          "author_name": "Kacper Magdziarz",
          "author_login": "kmagdziarz",
          "committed_at": "2026-03-10T15:56:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5546eef5d9805623cd5a4fac810902cf382832d",
          "body": "Bumps [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) from 12.4.3 to 15.7.1.\n- [Release notes](https://github.com/alfresco/alfresco-build-tools/releases)\n- [Commits](https://github.com/alfresco/alfresco-build-tools/compare/v12.4.3...v15.7.1)\n\n---\nupdated-dependencie\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump Alfresco/alfresco-build-tools from 12.4.3 to 15.7.1 (#340)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-04T09:28:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3b49c6f0f14dd02e7ee1a27d57162167111fd914",
          "body": null,
          "is_bot": false,
          "headline": "[ACS-11187] Releasing OOP SDK 7.3.0-A.1-SNAPSHOT (#339)",
          "author_name": "Grzegorz Oleksy",
          "author_login": "goleksyalfresco",
          "committed_at": "2026-02-27T13:32:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd8d9af6dc9c9302ad9d4e62212e5c68a501cfd4",
          "body": null,
          "is_bot": false,
          "headline": "ACS-10901 bump ags.version to 26.1.0.58 (#338)",
          "author_name": "Sayan Bhattacharya",
          "author_login": "bsayan2",
          "committed_at": "2026-02-27T12:41:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "424e573e73abc28c93d63fecea7fb5f880b3e01c",
          "body": "* [ACS-11053] Bump Spring Boot to 4\n\n* [ACS-11053] CI Improvements\n\n* [ACS-11053] Remove Password Grant Flow\n\n* [ACS-11053] Update README.md with properties for ActiveMQ\n\n* [ACS-11053] Add OAuth sample\n\n* [ACS-11053] Add basic ACS compose for integration tests",
          "is_bot": false,
          "headline": "[ACS-11053] Bump Spring Boot to 4 (#337)",
          "author_name": "Kacper Magdziarz",
          "author_login": "kmagdziarz",
          "committed_at": "2026-02-16T15:48:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a8f152abb36ba0f74115bf1b5441d28054f314f",
          "body": "…24 (#326)\n\n* [PRODSEC-10611]: bump commons-lang3 to 3.20.0 in parent and in independent sub module\n\n* comment added to explain adding dependency in samples\n\n* Update samples/pom.xml\n\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "[PRODSEC-10611]: Bump commons-lang3 to 3.20.0 to address CVE-2025-489…",
          "author_name": "Vivek Kumar",
          "author_login": "Vivekkr0311",
          "committed_at": "2025-11-21T10:15:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "acbb40a2610365a2f6bab76f67a6da0521672888",
          "body": null,
          "is_bot": false,
          "headline": "AAE-39573 Bump Spring Boot to 3.5.7 (#321)",
          "author_name": "mikolajbrzezinski",
          "author_login": "mikolajbrzezinski",
          "committed_at": "2025-11-05T08:59:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea752b89121b77a9fdf4f9548657371d230993a2",
          "body": null,
          "is_bot": false,
          "headline": "AAE-36465 Bump Spring Boot to 3.5.6 (#319)",
          "author_name": "Aleksandra Onych",
          "author_login": "aonych",
          "committed_at": "2025-10-23T09:51:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67c077ecb41d856f56b1272055a30b3799bc8ce7",
          "body": "…9.37.3.jar in Alfresco Java SDK fix (#314)\n\n* [PRODSEC-10532]: nimbus-jose-jwt explicilty bump to fix vuln",
          "is_bot": false,
          "headline": "[PRODSEC-10532]: CVE Vulnerability CVE-2025-53864 in nimbus-jose-jwt-…",
          "author_name": "Vivek",
          "author_login": "Vivekkr0311",
          "committed_at": "2025-10-22T09:48:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a643ccc3bcf12e9608bd2206dcead7b26227f9f",
          "body": null,
          "is_bot": false,
          "headline": "AAE-37781 Update Spring Boot 3.4.9 (#310)",
          "author_name": "Giovanni Fertuso",
          "author_login": "Giovanni007",
          "committed_at": "2025-09-03T07:42:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 27,
      "commits_last_year": 100,
      "latest_release_at": "2026-06-04T09:23:57Z",
      "latest_release_tag": "7.3.2",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 22,
      "days_since_latest_release": 50,
      "mean_days_between_releases": 95.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "org.alfresco:alfresco-java-rest-api-common",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/org.alfresco/alfresco-java-rest-api-common",
          "is_deprecated": false,
          "latest_version": "7.3.3-A.2",
          "repository_url": null,
          "versions_count": 5,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-21T14:46:02Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 3
        }
      ]
    },
    "popularity": {
      "forks": 9,
      "stars": 22,
      "watchers": 47,
      "fork_history": {
        "days": [
          {
            "date": "2021-03-19",
            "count": 1
          },
          {
            "date": "2021-04-14",
            "count": 1
          },
          {
            "date": "2021-05-25",
            "count": 1
          },
          {
            "date": "2021-06-04",
            "count": 1
          },
          {
            "date": "2022-01-31",
            "count": 1
          },
          {
            "date": "2022-02-19",
            "count": 1
          },
          {
            "date": "2025-05-16",
            "count": 1
          },
          {
            "date": "2025-07-10",
            "count": 1
          },
          {
            "date": "2025-10-11",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 9,
        "total_forks": 9
      },
      "star_history": null,
      "open_issues_and_prs": 30
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "sample",
        "samples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/alfresco-event-gateway-api-client/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-auth-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-core-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-discovery-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-governance-classification-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-governance-core-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-model-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-search-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-search-sql-rest-api/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-spring-boot-starter/pom.xml",
        "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-spring-boot/pom.xml",
        "alfresco-acs-java-rest-api/pom.xml",
        "alfresco-java-event-api/alfresco-java-event-api-handling/pom.xml",
        "alfresco-java-event-api/alfresco-java-event-api-integration/pom.xml",
        "alfresco-java-event-api/alfresco-java-event-api-spring-boot-starter/pom.xml",
        "alfresco-java-event-api/alfresco-java-event-api-spring-boot/pom.xml",
        "alfresco-java-event-api/pom.xml",
        "alfresco-java-rest-api-common/pom.xml",
        "integration-tests/pom.xml",
        "pom.xml",
        "samples/event-api-handlers/pom.xml",
        "samples/event-api-spring-integration/pom.xml",
        "samples/extension-template/pom.xml",
        "samples/oauth2-feign-sample/pom.xml",
        "samples/pom.xml"
      ],
      "largest_source_bytes": 9528,
      "source_files_sampled": 121,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "alfresco-acs-java-rest-api/pom.xml",
        "alfresco-java-event-api/pom.xml",
        "alfresco-java-rest-api-common/pom.xml",
        "integration-tests/pom.xml",
        "pom.xml",
        "samples/pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 58,
        "malicious_count": 0,
        "assessed_package": "maven:org.alfresco:alfresco-java-rest-api-common@7.3.3-A.2",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "org.alfresco:alfresco-java-event-api-handling",
          "manifest": "alfresco-java-event-api/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.alfresco:alfresco-java-event-api-integration",
          "manifest": "alfresco-java-event-api/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.alfresco:alfresco-java-event-api-spring-boot",
          "manifest": "alfresco-java-event-api/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.springframework.cloud:spring-cloud-starter-openfeign",
          "manifest": "alfresco-java-rest-api-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.springframework.boot:spring-boot-starter-security-oauth2-client",
          "manifest": "alfresco-java-rest-api-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.springframework.security:spring-security-web",
          "manifest": "alfresco-java-rest-api-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.spring-security-web.version}"
        },
        {
          "name": "org.springframework.security:spring-security-config",
          "manifest": "alfresco-java-rest-api-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.nimbusds:nimbus-jose-jwt",
          "manifest": "alfresco-java-rest-api-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.alfresco:alfresco-acs-java-rest-api-spring-boot-starter",
          "manifest": "integration-tests/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.awaitility:awaitility",
          "manifest": "integration-tests/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.springframework.cloud:spring-cloud-dependencies",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${spring-cloud.version}"
        },
        {
          "name": "io.swagger:swagger-annotations",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${swagger-core.version}"
        },
        {
          "name": "org.springframework.cloud:spring-cloud-openfeign-dependencies",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${spring-cloud.version}"
        },
        {
          "name": "org.alfresco:alfresco-java-rest-api-common",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.alfresco:acs-event-model",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${acs-event-model.version}"
        },
        {
          "name": "commons-fileupload:commons-fileupload",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${common-fileupload.version}"
        },
        {
          "name": "org.springframework.security:spring-security-web",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.spring-security-web.version}"
        },
        {
          "name": "com.nimbusds:nimbus-jose-jwt",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${com.nimbusds.outh2.sdk.version}"
        },
        {
          "name": "org.apache.commons:commons-lang3",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${org.apache.common-lang-3.version}"
        },
        {
          "name": "org.apache.activemq:activemq-client",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${activemq-client.version}"
        },
        {
          "name": "org.bouncycastle:bcprov-jdk18on",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.bouncycastle.version}"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-databind",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.jackson-databind.version}"
        },
        {
          "name": "tools.jackson.core:jackson-databind",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.tools-jackson-databind.version}"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-annotations",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.jackson-annotations.version}"
        },
        {
          "name": "ch.qos.logback:logback-classic",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.logback-classic.version}"
        },
        {
          "name": "ch.qos.logback:logback-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${dependency.logback-core.version}"
        },
        {
          "name": "commons-fileupload:commons-fileupload",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "ch.qos.logback:logback-classic",
            "direct": true,
            "version": "1.5.37",
            "ecosystem": "maven"
          },
          {
            "name": "ch.qos.logback:logback-core",
            "direct": true,
            "version": "1.5.37",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-annotations",
            "direct": true,
            "version": "2.22",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": true,
            "version": "2.22.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.nimbusds:nimbus-jose-jwt",
            "direct": true,
            "version": "10.5",
            "ecosystem": "maven"
          },
          {
            "name": "commons-fileupload:commons-fileupload",
            "direct": true,
            "version": "1.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.swagger:swagger-annotations",
            "direct": true,
            "version": "1.5.20",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:acs-event-model",
            "direct": true,
            "version": "1.1.0-A.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-acs-java-rest-api-spring-boot-starter",
            "direct": true,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-java-event-api-handling",
            "direct": true,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-java-event-api-integration",
            "direct": true,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-java-event-api-spring-boot",
            "direct": true,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-java-rest-api-common",
            "direct": true,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.activemq:activemq-client",
            "direct": true,
            "version": "6.2.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": true,
            "version": "3.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.awaitility:awaitility",
            "direct": true,
            "version": "4.3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.bouncycastle:bcprov-jdk18on",
            "direct": true,
            "version": "1.84",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-security-oauth2-client",
            "direct": true,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.cloud:spring-cloud-starter-openfeign",
            "direct": true,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-config",
            "direct": true,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-web",
            "direct": true,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "tools.jackson.core:jackson-databind",
            "direct": true,
            "version": "3.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-core",
            "direct": false,
            "version": "2.21.2",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.datatype:jackson-datatype-jsr310",
            "direct": false,
            "version": "2.21.2",
            "ecosystem": "maven"
          },
          {
            "name": "com.github.stephenc.jcip:jcip-annotations",
            "direct": false,
            "version": "1.0-1",
            "ecosystem": "maven"
          },
          {
            "name": "com.nimbusds:content-type",
            "direct": false,
            "version": "2.3",
            "ecosystem": "maven"
          },
          {
            "name": "com.nimbusds:lang-tag",
            "direct": false,
            "version": "1.7",
            "ecosystem": "maven"
          },
          {
            "name": "com.nimbusds:oauth2-oidc-sdk",
            "direct": false,
            "version": "11.26.1",
            "ecosystem": "maven"
          },
          {
            "name": "commons-codec:commons-codec",
            "direct": false,
            "version": "1.19.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": false,
            "version": "2.19.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-logging:commons-logging",
            "direct": false,
            "version": "1.3.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.openfeign:feign-core",
            "direct": false,
            "version": "13.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.openfeign:feign-form",
            "direct": false,
            "version": "13.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.openfeign:feign-form-spring",
            "direct": false,
            "version": "13.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.openfeign:feign-httpclient",
            "direct": false,
            "version": "13.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.openfeign:feign-slf4j",
            "direct": false,
            "version": "13.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.micrometer:micrometer-commons",
            "direct": false,
            "version": "1.16.5",
            "ecosystem": "maven"
          },
          {
            "name": "io.micrometer:micrometer-observation",
            "direct": false,
            "version": "1.16.5",
            "ecosystem": "maven"
          },
          {
            "name": "io.projectreactor:reactor-core",
            "direct": false,
            "version": "3.8.5",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.annotation:jakarta.annotation-api",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.jms:jakarta.jms-api",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "net.minidev:accessors-smart",
            "direct": false,
            "version": "2.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "net.minidev:json-smart",
            "direct": false,
            "version": "2.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-acs-java-rest-api-spring-boot",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-auth-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-core-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-discovery-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-event-gateway-api-client",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-governance-classification-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-governance-core-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-java-event-api-spring-boot-starter",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-model-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-search-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.alfresco:alfresco-search-sql-rest-api",
            "direct": false,
            "version": "7.3.4-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-text",
            "direct": false,
            "version": "1.13.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpclient",
            "direct": false,
            "version": "4.5.14",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpcore",
            "direct": false,
            "version": "4.4.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-api",
            "direct": false,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-to-slf4j",
            "direct": false,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.tomcat.embed:tomcat-embed-core",
            "direct": false,
            "version": "11.0.22",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.tomcat.embed:tomcat-embed-el",
            "direct": false,
            "version": "11.0.22",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.tomcat.embed:tomcat-embed-websocket",
            "direct": false,
            "version": "11.0.22",
            "ecosystem": "maven"
          },
          {
            "name": "org.fusesource.hawtbuf:hawtbuf",
            "direct": false,
            "version": "1.11",
            "ecosystem": "maven"
          },
          {
            "name": "org.hamcrest:hamcrest",
            "direct": false,
            "version": "3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.jspecify:jspecify",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.ow2.asm:asm",
            "direct": false,
            "version": "9.7.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.reactivestreams:reactive-streams",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:jul-to-slf4j",
            "direct": false,
            "version": "2.0.17",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": false,
            "version": "2.0.17",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-activemq",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-autoconfigure",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-configuration-processor",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-http-client",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-http-converter",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-integration",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-jackson",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-jms",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-persistence",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-restclient",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-security",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-security-oauth2-client",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-servlet",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-activemq",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-integration",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-jackson",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-logging",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-security",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-tomcat",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-tomcat-runtime",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-starter-webmvc",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-tomcat",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-transaction",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-web-server",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.boot:spring-boot-webmvc",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.cloud:spring-cloud-commons",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.cloud:spring-cloud-context",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.cloud:spring-cloud-openfeign-core",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.cloud:spring-cloud-starter",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.integration:spring-integration-core",
            "direct": false,
            "version": "7.0.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.integration:spring-integration-jms",
            "direct": false,
            "version": "7.0.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-core",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-crypto",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-oauth2-client",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-oauth2-core",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework.security:spring-security-oauth2-jose",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-aop",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-beans",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-context",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-core",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-expression",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-jms",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-messaging",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-tx",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-web",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-webmvc",
            "direct": false,
            "version": "7.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.yaml:snakeyaml",
            "direct": false,
            "version": "2.5",
            "ecosystem": "maven"
          },
          {
            "name": "tools.jackson.core:jackson-core",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "maven"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 119,
        "direct_count": 22,
        "indirect_count": 97
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 18,
        "merged_prs": 269,
        "open_issues": 12,
        "closed_ratio": 0.429,
        "closed_issues": 9,
        "closed_unmerged_prs": 124
      },
      "bus_factor": 5,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "alfresco-build",
          "commits": 42,
          "avatar_url": "https://avatars.githubusercontent.com/u/8039454?v=4"
        },
        {
          "type": "User",
          "login": "zoltanpalfi",
          "commits": 40,
          "avatar_url": "https://avatars.githubusercontent.com/u/32622330?v=4"
        },
        {
          "type": "User",
          "login": "miguelruizdev",
          "commits": 38,
          "avatar_url": "https://avatars.githubusercontent.com/u/32025234?v=4"
        },
        {
          "type": "User",
          "login": "adecatur72",
          "commits": 23,
          "avatar_url": "https://avatars.githubusercontent.com/u/82901628?v=4"
        },
        {
          "type": "User",
          "login": "josorno-ccc",
          "commits": 18,
          "avatar_url": "https://avatars.githubusercontent.com/u/269237685?v=4"
        },
        {
          "type": "User",
          "login": "igdianov",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/20428629?v=4"
        },
        {
          "type": "User",
          "login": "code4uuuu",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/110275771?v=4"
        },
        {
          "type": "User",
          "login": "SathishK-T",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/166369440?v=4"
        },
        {
          "type": "User",
          "login": "Somnath-Deshmukh",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/224557454?v=4"
        },
        {
          "type": "User",
          "login": "purusothaman-mm",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/164840115?v=4"
        }
      ],
      "contributors_sampled": 46,
      "top_contributor_share": 0.144
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "dependency-graph.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 4,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "16 out of 16 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 5,
            "reason": "Found 14/28 approved changesets -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 6 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "42094adc9742f203a3bc34da3135dc9f5bce66f2",
        "ran_at": "2026-07-25T06:01:11Z",
        "aggregate_score": 6.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T21:03:24Z",
      "oldest_open_prs": [
        {
          "number": 353,
          "created_at": "2026-04-16T09:56:07Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 362,
          "created_at": "2026-04-29T20:45:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 363,
          "created_at": "2026-04-29T20:45:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 368,
          "created_at": "2026-05-07T10:55:48Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 372,
          "created_at": "2026-05-13T23:56:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 374,
          "created_at": "2026-05-13T23:57:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 375,
          "created_at": "2026-05-13T23:57:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 377,
          "created_at": "2026-05-14T02:24:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 379,
          "created_at": "2026-05-14T04:55:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 402,
          "created_at": "2026-06-03T08:24:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 413,
          "created_at": "2026-06-10T21:03:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 415,
          "created_at": "2026-06-16T21:03:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 418,
          "created_at": "2026-06-29T21:02:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 422,
          "created_at": "2026-07-09T21:02:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 423,
          "created_at": "2026-07-09T21:03:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 424,
          "created_at": "2026-07-10T21:02:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 427,
          "created_at": "2026-07-21T09:09:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 433,
          "created_at": "2026-07-22T07:04:34Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-23T07:45:24Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 58,
          "created_at": "2021-05-13T19:13:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 96,
          "created_at": "2021-10-29T04:06:30Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 97,
          "created_at": "2021-10-29T08:31:56Z",
          "last_comment_at": "2022-04-27T08:49:43Z",
          "last_comment_author": "jlosornogil"
        },
        {
          "number": 127,
          "created_at": "2022-01-11T07:31:48Z",
          "last_comment_at": "2022-05-12T07:43:44Z",
          "last_comment_author": "XPOHUK"
        },
        {
          "number": 128,
          "created_at": "2022-01-11T07:36:35Z",
          "last_comment_at": "2022-05-05T13:07:08Z",
          "last_comment_author": "jlosornogil"
        },
        {
          "number": 130,
          "created_at": "2022-01-14T14:55:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 137,
          "created_at": "2022-02-08T01:33:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 171,
          "created_at": "2022-12-23T20:05:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 191,
          "created_at": "2023-03-22T12:11:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 220,
          "created_at": "2024-01-02T10:39:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 223,
          "created_at": "2024-02-26T13:36:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 236,
          "created_at": "2024-05-17T10:19:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/Alfresco/alfresco-java-sdk",
    "host": "github.com",
    "name": "alfresco-java-sdk",
    "owner": "Alfresco"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 75,
      "inputs": {
        "security": 72,
        "vitality": 84,
        "community": 44,
        "governance": 79,
        "engineering": 90
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 84,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "commits_last_year": 100,
              "human_commit_share": 0.97,
              "days_since_last_push": 1,
              "active_weeks_last_year": 22
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "22/52 weeks with commits",
                "points": 15.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 22
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "100 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "releases_count": 27,
              "latest_release_tag": "7.3.2",
              "releases_from_tags": false,
              "days_since_latest_release": 50,
              "mean_days_between_releases": 95.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "27 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 27
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 50 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 50
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~95.7 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 95.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 1 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 44,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 38,
            "inputs": {
              "forks": 9,
              "stars": 22,
              "watchers": 47,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "22 stars",
                "points": 21.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 22
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "9 forks",
                "points": 7.5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "47 watchers",
                "points": 9.2,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 47
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 79,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "bus_factor": 5,
              "contributors_sampled": 46,
              "top_contributor_share": 0.144
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "5 contributor(s) cover half of all commits",
                "points": 45.9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 14% of commits",
                "points": 19.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 14
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "46 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 46
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "merged_prs": 269,
              "open_issues": 12,
              "closed_issues": 9,
              "issue_closed_ratio": 0.429,
              "closed_unmerged_prs": 124
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "43% of issues closed",
                "points": 20.1,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 43
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "269/393 decided PRs merged",
                "points": 26.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 269,
                      "decided": 393
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 14/28 approved changesets -- score normalized to 5",
                "points": 7.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "followers": 435,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "Alfresco",
              "public_repos": 137,
              "account_age_days": 5799
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "435 followers of Alfresco",
                "points": 19,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 435,
                      "login": "Alfresco"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "137 public repos, account ~15 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 137
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "org.alfresco:alfresco-java-rest-api-common"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 3
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 3 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "5 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 90,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 16,
                "status": "met",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "16 out of 16 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "alfresco",
                "java",
                "sdk",
                "events",
                "rest-client",
                "out-of-process"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "6 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 72,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 65,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 6.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "16 out of 16 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 14/28 approved changesets -- score normalized to 5",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:org.alfresco:alfresco-java-rest-api-common@7.3.3-A.2 runtime dependency closure — what installing the published package pulls in — 58 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:org.alfresco:alfresco-java-rest-api-common@7.3.3-A.2",
                  "assessed": 58
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 58,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 58,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 62,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.381,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "37 of 97 human commits state their intent (structured subject or explanatory body)",
                "points": 20.3,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 37,
                      "sampled": 97
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 88,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.05,
              "toolchain_manifests": [
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/alfresco-event-gateway-api-client/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-auth-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-core-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-discovery-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-governance-classification-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-governance-core-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-model-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-search-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-search-sql-rest-api/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-spring-boot-starter/pom.xml",
                "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-spring-boot/pom.xml",
                "alfresco-acs-java-rest-api/pom.xml",
                "alfresco-java-event-api/alfresco-java-event-api-handling/pom.xml",
                "alfresco-java-event-api/alfresco-java-event-api-integration/pom.xml",
                "alfresco-java-event-api/alfresco-java-event-api-spring-boot-starter/pom.xml",
                "alfresco-java-event-api/alfresco-java-event-api-spring-boot/pom.xml",
                "alfresco-java-event-api/pom.xml",
                "alfresco-java-rest-api-common/pom.xml",
                "integration-tests/pom.xml",
                "pom.xml",
                "samples/event-api-handlers/pom.xml",
                "samples/event-api-spring-integration/pom.xml",
                "samples/extension-template/pom.xml",
                "samples/oauth2-feign-sample/pom.xml",
                "samples/pom.xml"
              ],
              "dependency_bot_commit_share": 0.03
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/alfresco-event-gateway-api-client/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-auth-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-core-rest-api/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/alfresco-event-gateway-api-client/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-auth-rest-api/pom.xml, alfresco-acs-java-rest-api/alfresco-acs-java-rest-api-lib/generated/alfresco-core-rest-api/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 11,
                "status": "met",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "5 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 5,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "3 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 3,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 9528,
              "source_files_sampled": 121,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/121 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 121,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "sample",
                "samples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "sample, samples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "sample, samples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch maven package 'org.alfresco:integration-tests' from its registry"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T06:01:52.227377Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/Alfresco/alfresco-java-sdk.svg",
  "full_name": "Alfresco/alfresco-java-sdk",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}