apache / maven-install-plugin

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

Each point covers 8 days.

Full resolved dependency set from the GitHub dependency graph: 2 direct and 26 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

Installing maven:org.apache.maven.plugins:maven-install-plugin@4.0.0-beta-2 pulls in 8 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.

No known advisories affect the assessed dependencies.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [
        "java",
        "build-management",
        "maven",
        "maven-plugins",
        "maven-install-plugin"
      ],
      "is_fork": false,
      "size_kb": 728,
      "has_wiki": false,
      "homepage": "https://maven.apache.org/plugins/maven-install-plugin/",
      "languages": {
        "Java": 55870,
        "Shell": 948,
        "Groovy": 12910
      },
      "pushed_at": "2026-07-27T00:22:19Z",
      "created_at": "2017-12-09T15:08:41Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T09:19:13Z",
      "description": "Apache Maven Install Plugin",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "master",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Java",
      "significant_languages": [
        "Java",
        "Groovy"
      ]
    },
    "owner": {
      "blog": "https://www.apache.org/",
      "name": "The Apache Software Foundation",
      "type": "Organization",
      "login": "apache",
      "company": null,
      "location": null,
      "followers": 23594,
      "avatar_url": "https://avatars.githubusercontent.com/u/47359?v=4",
      "created_at": "2009-01-17T20:14:40Z",
      "is_verified": null,
      "public_repos": 3148,
      "account_age_days": 6400
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "maven-install-plugin-3.1.4",
          "kind": "other",
          "published_at": "2025-02-27T21:32:02Z"
        },
        {
          "tag": "maven-install-plugin-4.0.0-beta-2",
          "kind": "other",
          "published_at": "2025-02-28T07:31:14Z"
        },
        {
          "tag": "maven-install-plugin-3.1.3",
          "kind": "other",
          "published_at": "2024-08-20T08:10:54Z"
        },
        {
          "tag": "maven-install-plugin-4.0.0-beta-1",
          "kind": "other",
          "published_at": "2024-07-01T16:10:46Z"
        },
        {
          "tag": "maven-install-plugin-3.1.2",
          "kind": "other",
          "published_at": "2024-04-29T07:51:23Z"
        },
        {
          "tag": "maven-install-plugin-3.1.1",
          "kind": "other",
          "published_at": "2023-03-26T05:29:16Z"
        },
        {
          "tag": "maven-install-plugin-3.1.0",
          "kind": "other",
          "published_at": "2022-11-17T22:30:49Z"
        },
        {
          "tag": "maven-install-plugin-3.0.1",
          "kind": "other",
          "published_at": "2022-10-28T06:01:52Z"
        },
        {
          "tag": "maven-install-plugin-3.0.0",
          "kind": "other",
          "published_at": "2022-10-28T03:36:32Z"
        },
        {
          "tag": "maven-install-plugin-3.0.0-M1",
          "kind": "other",
          "published_at": "2022-10-28T03:36:34Z"
        },
        {
          "tag": "maven-install-plugin-2.5.2",
          "kind": "other",
          "published_at": "2022-10-28T03:36:31Z"
        },
        {
          "tag": "maven-install-plugin-2.5.1",
          "kind": "other",
          "published_at": "2022-10-28T03:36:29Z"
        },
        {
          "tag": "maven-install-plugin-2.5",
          "kind": "other",
          "published_at": "2022-10-28T03:36:27Z"
        },
        {
          "tag": "maven-install-plugin-2.4",
          "kind": "other",
          "published_at": "2022-10-28T03:36:25Z"
        },
        {
          "tag": "maven-install-plugin-2.3.1",
          "kind": "other",
          "published_at": "2022-10-28T03:36:24Z"
        },
        {
          "tag": "maven-install-plugin-2.3",
          "kind": "other",
          "published_at": "2022-10-28T03:36:22Z"
        },
        {
          "tag": "maven-install-plugin-2.2",
          "kind": "other",
          "published_at": "2022-10-28T03:36:21Z"
        },
        {
          "tag": "maven-install-plugin-2.1",
          "kind": "other",
          "published_at": "2022-10-28T03:36:19Z"
        },
        {
          "tag": "maven-install-plugin-2.0",
          "kind": "other",
          "published_at": "2022-10-28T03:36:17Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "a64c4401373ee8d2d7d6a318ba5f6f5173ae41cb",
          "body": "….yml\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-sha\n[…]\n.github/workflows/release-drafter.yml\n  dependency-version: '5'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T05:49:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "afbad35a9f7c6864466d94f6edbc6503fc69a08a",
          "body": "Bumps [apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml\n  dependency-version: '5'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T05:11:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5723e54a412460c8051c00e6d3f01592ed8c5e90",
          "body": "…ml (#420)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.y…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-14T18:49:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1b650a10dfde62a7865c2bd81188c6046126727f",
          "body": "Bumps [apache/maven-gh-actions-shared/.github/workflows/stale.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workf\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml (#422)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-14T18:49:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "71144156d1470c09a1eb4f558ac0348f5571ae65",
          "body": "Bump mavenVersion from 4.0.0-rc-3 to 4.0.0-rc-5 so the plugin builds\nand tests against the current Maven 4 release.\n\nrc-5 introduced the org.apache.maven.api.xml.XmlService SPI, loaded via\nServiceLoader. The unit-test harness (MojoExtension) parses test POMs\nthrough MavenStaxReader, which now requir\n[…]\nrkflow so it follows the\nshared workflow default (currently 4.0.0-rc-5) instead of pinning a\nstale RC.\n\nVerified with `mvn -P run-its clean verify` on 4.0.0-rc-5: unit tests\n14/14 and ITs 33/33 green.",
          "is_bot": false,
          "headline": "Build against Maven 4.0.0-rc-5",
          "author_name": "Gerd Aschemann",
          "author_login": "ascheman",
          "committed_at": "2026-07-12T20:30:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "24bbd3c60f2daa20f12efb7b0c0901602e1b4bf1",
          "body": "Bumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.18 to 2.0.20.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.18...maven-resolver-2.0.20)\n\n---\n\n[…]\nmaven.resolver:maven-resolver-api\n  dependency-version: 2.0.20\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.18 to 2.0.20",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-08T22:34:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6943f1bebdf2f28e2bc5d24f6d2f7125c9d50dc1",
          "body": "…erability\n\nGenerated-by: Claude Code",
          "is_bot": false,
          "headline": "Add AGENTS.md + SECURITY.md security-model pointer for scanner discov…",
          "author_name": "Jarek Potiuk",
          "author_login": "potiuk",
          "committed_at": "2026-07-08T12:56:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4246259c103cfc4baade7fe674534885ea09e4b5",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 48 to 49.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#412)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T15:13:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "50ed51e44c6f6877c03b0aa164f42e604c2306ba",
          "body": "…18 (#408)\n\nBumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.17 to 2.0.18.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.17...maven-resolver-2\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.17 to 2.0.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-28T19:18:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a2163e7105dbc56f86e6b083f3507df7d932a730",
          "body": "Bumps org.slf4j:slf4j-simple from 2.0.17 to 2.0.18.\n\n---\nupdated-dependencies:\n- dependency-name: org.slf4j:slf4j-simple\n  dependency-version: 2.0.18\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.slf4j:slf4j-simple from 2.0.17 to 2.0.18 (#406)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-17T10:31:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2a68b440a026ae1d2c9bb0ada690828ab993d25",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 47 to 48.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#404)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-17T10:31:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a594410754b8a10bd0eb3ac9348dc4d1a1b5297",
          "body": "Bumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.16 to 2.0.17.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.16...maven-resolver-2.0.17)\n\n---\n\n[…]\nmaven.resolver:maven-resolver-api\n  dependency-version: 2.0.17\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.16 to 2.0.17",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T19:33:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c2f2afbda184e78e5360cd7a303a62267a3c018e",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.14.3 to 5.14.4.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.14.3...r5.14.4)\n\n---\nupdated-dependencies:\n- dependency-nam\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.14.3 to 5.14.4 (#402)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-28T08:01:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b6ca79f7ec5f2d4058ee2de58221a6e53ed0c1a4",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.5.0-jre to 33.6.0-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-version: 3\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre (#400)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-18T10:50:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d470cd77ce54f25e2ad17f1539d395f305ca771e",
          "body": "Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.22.0 to 5.23.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.22.0...v5.23.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n  dependency-version: 5.23.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-core from 5.22.0 to 5.23.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-16T18:12:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "373428cf9f49b95fa4c8c8779028ee2697fbc231",
          "body": "Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.21.0 to 5.22.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.21.0...v5.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-core from 5.21.0 to 5.22.0 (#395)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-06T16:15:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b0f97a548aebdb971e9cd0929bbc58957bd85287",
          "body": "…16 (#393)\n\nBumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.15 to 2.0.16.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.15...maven-resolver-2\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.15 to 2.0.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-24T07:15:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c88a4ee57f1f58f6a880c7e3c6d48611b414a5c",
          "body": "…15 (#391)\n\nBumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.14 to 2.0.15.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.14...maven-resolver-2\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.14 to 2.0.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-17T17:54:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "75b5a367bbee29830c38895b8b09dcae26640cc0",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.14.2 to 5.14.3.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.14.2...r5.14.3)\n\n---\nupdated-dependencies:\n- dependency-nam\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.14.2 to 5.14.3 (#390)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-16T08:56:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "10df87b6525bc0dfa36638603922b0a6e0aa91ec",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 46 to 47.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 46 to 47 (#387)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-14T04:45:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45b03b56d2ce26ed8cfede5909cc3776a3020ecd",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 45 to 46.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 45 to 46 (#383)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-07T05:37:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "10847bc5a7d02bbaee570fee800522cfa0a550f2",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.14.1 to 5.14.2.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.14.1...r5.14.2)\n\n---\nupdated-dependencies:\n- dependency-nam\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.14.1 to 5.14.2 (#384)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-07T05:37:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f409e16365d20b86a80e1010a2926554d7bb1d6e",
          "body": "…14 (#381)\n\nBumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.13 to 2.0.14.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.13...maven-resolver-2\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.13 to 2.0.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-16T06:10:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3789cec03dcfaae7238e27094e337894b164287e",
          "body": "Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.20.0 to 5.21.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.20.0...v5.21.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-core from 5.20.0 to 5.21.0 (#379)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-10T06:12:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "84dbf76093826d4ff922d9d6112fbf604d7d7df1",
          "body": null,
          "is_bot": false,
          "headline": "Bump m-invoker-p to 3.9.1 / downgrade Guice to 5.1.0 (#375)",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-11-11T08:47:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01807375d0843f925977833d16866c46eb7d2535",
          "body": "Bumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.9 to 2.0.13.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.9...maven-resolver-2.0.13)\n\n---\nup\n[…]\nmaven.resolver:maven-resolver-api\n  dependency-version: 2.0.13\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.9 to 2.0.13",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-10T00:38:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fae8150837a7d443c6c9a9cc7f33c926422c5dce",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.13.4 to 5.14.1.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.13.4...r5.14.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  dependency-version: 5.14.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.13.4 to 5.14.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-10T00:37:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b752ac6a0428e780d5c9fcccd117f6a77945025e",
          "body": "Co-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "JUnit Jupiter best practices (#370)",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-11-09T14:35:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cf2f78919129a8f121a07ede06fe83289db151c",
          "body": null,
          "is_bot": false,
          "headline": "Update Invoker plugin to 3.9.1 to support Java 25 (#369)",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2025-10-21T18:02:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e6db6f054a8f6b4b82149a42815d060506e0529",
          "body": "Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.19.0 to 5.20.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.19.0...v5.20.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-core from 5.19.0 to 5.20.0 (#365)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-22T04:48:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bc59d657568ee4d4dc594615db09cbba32c1cc0f",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.8-jre to 33.5.0-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-version: 3\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre (#364)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-18T15:30:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "149fadcdbd7cd4cacda98e5d8a069a77e52de4a8",
          "body": "Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.18.0 to 5.19.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.18.0...v5.19.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-core from 5.18.0 to 5.19.0 (#362)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-08-18T04:42:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "083ef67b42bf92506076556c10e82ea7349b87df",
          "body": "also:\n- refactor deprecated config",
          "is_bot": false,
          "headline": "feat: enable prevent branch protection rules (#361)",
          "author_name": "Sandra Parsick",
          "author_login": "sparsick",
          "committed_at": "2025-08-14T05:38:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1ac8906e6e6b38519c357bd541119c40e210f23",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.13.3 to 5.13.4.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.13.3...r5.13.4)\n\n---\nupdated-dependencies:\n- dependency-nam\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.13.3 to 5.13.4 (#360)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-22T04:53:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f174fe586ce17990a1d7064f2687895538c0469f",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 44 to 45.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-version: '45'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 44 to 45",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-16T19:00:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21a13c7d19f59a198dde1a02d2e7d0684ba39297",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.13.1 to 5.13.3.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.13.1...r5.13.3)\n\n---\nupdated-dependencies:\n- dependency-nam\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.13.1 to 5.13.3 (#358)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-07T03:56:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "40ce05e14b965d2e344e225c21a428a3f9b112c5",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.13.0 to 5.13.1.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.13.0...r5.13.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  de\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.13.0 to 5.13.1 (#351)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-09T05:30:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b2e4f6692ab8e7e7eda770edb431f6edab54081",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.12.2 to 5.13.0.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.12.2...r5.13.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  de\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.12.2 to 5.13.0 (#349)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-02T04:39:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97e691f9f4098533f6b661f749c37a501a3c181a",
          "body": "Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.17.0 to 5.18.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.17.0...v5.18.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-core from 5.17.0 to 5.18.0 (#348)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-21T04:04:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b780fe6ecc71b5b62468f7ae5cbb7d7d5b737722",
          "body": "… (#347)\n\nBumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.8 to 2.0.9.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.8...maven-resolver-2.0.9)\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.8 to 2.0.9…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-19T15:12:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "190fca06ac4c319daedd98bb18c68f284bf4981a",
          "body": "… (#343)\n\nBumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.7 to 2.0.8.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.7...maven-resolver-2.0.8)\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.7 to 2.0.8…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T08:13:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e3f275319d5a78f05566872e0f3d0b0a95307afe",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.7-jre to 33.4.8-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-version: 3\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.4.7-jre to 33.4.8-jre (#345)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T08:12:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a938fdcb0b8478e937c608af19701b90c0d49ced",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.12.1 to 5.12.2.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.12.1...r5.12.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  de\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.12.1 to 5.12.2 (#344)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-14T15:11:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ac644ebf60b4f2eb3b65d402fee8b68f9778d0cb",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.6-jre to 33.4.7-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-version: 3\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.4.6-jre to 33.4.7-jre",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-09T03:24:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "002fe0b6286da5a830ecc6f9e36eadbd5a4e51c9",
          "body": "Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.16.1 to 5.17.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.16.1...v5.17.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-core from 5.16.1 to 5.17.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-07T03:51:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76c7702c33a0207e084de35930433b5db5ad3c61",
          "body": "…ut errors (#340, closes #317)",
          "is_bot": false,
          "headline": "[MINSTALL-206] Add IT to verify that phase=none skips execution witho…",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2025-04-03T16:35:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22442e52874cd962ad542ec5c93e08b9810c80ba",
          "body": "* Bump mavenVersion from 4.0.0-rc-2 to 4.0.0-rc-3\n\nBumps `mavenVersion` from 4.0.0-rc-2 to 4.0.0-rc-3.\n\nUpdates `org.apache.maven:maven-api-core` from 4.0.0-rc-2 to 4.0.0-rc-3\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-4.0.0-\n[…]\ns\n\n---------\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Guillaume Nodet <gnodet@gmail.com>",
          "is_bot": true,
          "headline": "Bump mavenVersion from 4.0.0-rc-2 to 4.0.0-rc-3 (#128)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-02T15:57:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0a00055807e814faa01e750bfb11a280c1cb9b1c",
          "body": "* Bump org.apache.maven.plugins:maven-plugins from 43 to 44\n\nBumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 43 to 44.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits/v44)\n\n---\nu\n[…]\ne\n\n---------\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Guillaume Nodet <gnodet@gmail.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#132)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-02T15:56:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8b9cafb2632864528a42475774b4ee78b3dd5be0",
          "body": "… (#126)\n\nBumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.6 to 2.0.7.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.6...maven-resolver-2.0.7)\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.6 to 2.0.7…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-02T15:46:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3d3491b36d47c5c0a6bb9f6d2ad68754676b627",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.0-jre to 33.4.6-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.4.0-jre to 33.4.6-jre (#134)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-02T15:25:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00b7c16c9380780f56bfae31cf36f9805b94ab10",
          "body": "Bumps org.slf4j:slf4j-simple from 2.0.16 to 2.0.17.\n\n---\nupdated-dependencies:\n- dependency-name: org.slf4j:slf4j-simple\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.slf4j:slf4j-simple from 2.0.16 to 2.0.17 (#124)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-02T15:24:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6cb0d3c9230749240ce96713b58494e1037f0d3d",
          "body": null,
          "is_bot": false,
          "headline": "Re-enable Issue Notifs (#339)",
          "author_name": "Benjamin Marwell",
          "author_login": "bmarwell",
          "committed_at": "2025-04-02T09:07:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "544c2b39599377a79b7701e09ae8325868d2216c",
          "body": null,
          "is_bot": false,
          "headline": "Disable notifications for jira migration (#135)",
          "author_name": "Benjamin Marwell",
          "author_login": "bmarwell",
          "committed_at": "2025-04-02T08:40:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f801a908dafbb86d78fed88259063cc0d12f276",
          "body": "Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.16.0 to 5.16.1.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.16.0...v5.16.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-core from 5.16.0 to 5.16.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-03-17T16:42:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "46c6fdd419bc221cf7967e10253185647cd745cd",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.12.0 to 5.12.1.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.12.0...r5.12.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  de\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.12.0 to 5.12.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-03-17T16:42:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4de1035ac84821ed17229b26b863a8456c2a8d7f",
          "body": "Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.15.2 to 5.16.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.15.2...v5.16.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-core from 5.15.2 to 5.16.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-03-04T18:43:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3aac856a4cd8e5bb6522395f0267dfd28371e2a4",
          "body": null,
          "is_bot": false,
          "headline": "Remove unused branch and argument (#125)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-02-26T13:55:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5121c2ed0d4728e6cdec52e59b866c5a6d88393d",
          "body": null,
          "is_bot": false,
          "headline": "Fix JIRA link (#123)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-02-24T16:56:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f98a877b3f6f80f220544654ced5c82719cf745",
          "body": null,
          "is_bot": false,
          "headline": "Delete commented code (#121)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-02-24T14:33:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f408f645353df0cb5fafbb74046b95fbc2e7ec67",
          "body": null,
          "is_bot": false,
          "headline": "Remove pointless cast (#122)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-02-24T14:32:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad7bedcc32088dd5e7cf3ace27970c920337f366",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-24T06:30:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a5b36d9e66183e95d8cad16f3ff7d973238ec90d",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release maven-install-plugin-4.0.0-beta-2",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-24T06:30:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77044d00f5a3c838feb5e66fec32632160e758de",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.11.4 to 5.12.0.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.11.4...r5.12.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.11.4 to 5.12.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-02-24T06:13:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9a2d28ae31dbd55041275c040c60941913fd357",
          "body": null,
          "is_bot": false,
          "headline": "Enable GitHub Issues",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-23T15:53:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de33669220727deb2a7c975650fae79356c1e44e",
          "body": null,
          "is_bot": false,
          "headline": "Publish documentation to LATEST-4.x",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-22T18:07:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b431b472ec7bd9f658cb2d50a91f66028323d64",
          "body": null,
          "is_bot": false,
          "headline": "Change installAtEnd default value",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2025-02-22T16:47:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d373a825f55e3a722416f6d56a25656ff6ffb7cb",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 32.0.1-jre to 33.4.0-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 32.0.1-jre to 33.4.0-jre",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-02-22T16:38:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a6e7c11974e6674a50b8816ad943dd55d5e9ee7",
          "body": "Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.12.0 to 5.15.2.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.12.0...v5.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-core\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-core from 5.12.0 to 5.15.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-02-22T16:32:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99d85f69c0e0ed5b05cec4c80b679798c6d04cf1",
          "body": "Bumps org.slf4j:slf4j-simple from 2.0.13 to 2.0.16.\n\n---\nupdated-dependencies:\n- dependency-name: org.slf4j:slf4j-simple\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.slf4j:slf4j-simple from 2.0.13 to 2.0.16",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-02-22T12:41:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba6323725a9fd35a058ec3a75e9dc9840fc52ff7",
          "body": null,
          "is_bot": false,
          "headline": "Add Stale action",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-18T20:23:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d9b44428485b8fdbc6d385b240e73289ee560c8",
          "body": "Bumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 2.0.0 to 2.0.6.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.0...maven-resolver-2.0.6)\n\n---\nupda\n[…]\n dependency-name: org.apache.maven.resolver:maven-resolver-api\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 2.0.0 to 2.0.6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-02-18T18:35:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fa540420f7318dd414ce1ed58742ba11bd1e405c",
          "body": null,
          "is_bot": false,
          "headline": "[MNGSITE-529] Rename \"Goals\" to \"Plugin Documentation\"",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2025-02-12T16:52:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a5ab86e1d32b48b011e5c6ea620a4a26359fc37",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade to Maven 4.0.0-rc-2",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-12T07:27:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e83d539acd2b5c245d9396861d612ecf13c1e5c",
          "body": null,
          "is_bot": false,
          "headline": "PR Automation only on close event",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-11T20:35:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d132c6afb5a0148472a6d3a1633de61a243060b",
          "body": null,
          "is_bot": false,
          "headline": "Add badge for 3.x version",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-09T10:38:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06c3f147a3e999e80feb9508a860906f0b6ce1ae",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 42 to 43.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 42 to 43",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-02-09T09:28:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0711e298b0aad64d3242157b5edcac20111f6a6e",
          "body": null,
          "is_bot": false,
          "headline": "Add dependabot for 3.x branch",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-04T21:41:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a441e21ef1a4f47ef6a15389e2b4aa490e67dc6f",
          "body": null,
          "is_bot": false,
          "headline": "Add release-drafter, PR automation",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-04T21:03:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9951e16d0cf65c362047d014c449c5597fe786c",
          "body": null,
          "is_bot": false,
          "headline": "Disable Jenkins build",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-02-04T19:08:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8eaff801c2abaa224830a1d2c17c8bd481e793c6",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.11.0 to 5.11.4.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.11.0...r5.11.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.11.0 to 5.11.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-01-15T21:37:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab855939f658b7f2db365acd4e7e7c54e14a379d",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade to beta-5 (#89)",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-11-14T07:49:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "818f880cb1ade876f92291bb744001c9a0f522e5",
          "body": null,
          "is_bot": false,
          "headline": "Fix dependency",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2024-10-11T20:43:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6cfb49d8c0940f1097e96b097baa0964b451c75c",
          "body": "Bumps [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit5) from 5.10.2 to 5.11.0.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.10.2...r5.11.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit.jupiter:junit-jupiter-api\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.junit.jupiter:junit-jupiter-api from 5.10.2 to 5.11.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-10-11T20:43:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10677d81a6d14ab2bda8385c903d6e2d11551364",
          "body": null,
          "is_bot": false,
          "headline": "use new Reproducible Central badge endpoint",
          "author_name": "Hervé Boutemy",
          "author_login": "hboutemy",
          "committed_at": "2024-08-19T00:03:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f6b274381461dfa00f231addba5984210f23136f",
          "body": "and typo fixes",
          "is_bot": false,
          "headline": "Minor copy edits (#76)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2024-07-22T15:16:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2eb5fe37725efcde2ea0018e577b9ad3bf6d1eec",
          "body": "- [Release notes](https://github.com/apache/maven-resolver/releases)\r\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-2.0.0-alpha-11...maven-resolver-2.0.0)\r\n\r\n---\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[MINSTALL-187] Bump org.apache.maven.resolver:maven-resolver-api (#74)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-08T19:56:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d13f96249ada9264afc4663912f0f6bd0cb5a667",
          "body": null,
          "is_bot": false,
          "headline": "Build with Maven 4",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-07-02T06:09:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8e1a3c602f8f35b40fcf94afc561fcb9d3854ee",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T08:35:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e750bd9188e77095a0ffb04991377132f003cc8",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release maven-install-plugin-4.0.0-beta-1",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T08:35:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c48e8502f9ce040c11d246756904eff4acd83f1e",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade m-p-testing and m-p-tools to beta-1",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T08:34:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ee0b1acb2679226e81a41de44a79cf2a8034697",
          "body": null,
          "is_bot": false,
          "headline": "Build with JDK 17 and 21 in Jenkins",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T06:23:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25a0b4cee29d9b3e49470d26dd9a811c11fd14b1",
          "body": null,
          "is_bot": false,
          "headline": "Fix license/notice",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T05:58:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39372e1dd8f00b6e3f56705c5cd52f4ee646609e",
          "body": null,
          "is_bot": false,
          "headline": "Use pluginManagement section, remove unknown scope usage",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T05:50:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c827c0a9857d41053b64be8ddbd52b5bbb3bc112",
          "body": null,
          "is_bot": false,
          "headline": "[MINSTALL-187] Switch to the new maven 4 api",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-24T21:02:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b604eaaaaddb73a2b0337038a6113627245a127a",
          "body": null,
          "is_bot": false,
          "headline": "Code format on ITs",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-24T21:02:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75955fbc4629909be07d947eba6f0fabbb8eef8f",
          "body": null,
          "is_bot": false,
          "headline": "Build with Maven 4",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-06-11T14:24:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fe1f05f40e42b7545b261907ad082e186fd2d4d",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Tamas Cservenak",
          "author_login": "cstamas",
          "committed_at": "2024-04-26T10:23:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e1494c1296b022b72b19f2a3a1a1cf702495253f",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release maven-install-plugin-3.1.2",
          "author_name": "Tamas Cservenak",
          "author_login": "cstamas",
          "committed_at": "2024-04-26T10:22:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6712ae82ed5943218fc63dd08f2ec5583532c5b7",
          "body": null,
          "is_bot": false,
          "headline": "Remove workaround, handle it centrally",
          "author_name": "Tamas Cservenak",
          "author_login": "cstamas",
          "committed_at": "2024-04-25T17:18:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fa847f674199397696ddb61661ddbc70a6875e5",
          "body": null,
          "is_bot": false,
          "headline": "Bump workflow",
          "author_name": "Tamas Cservenak",
          "author_login": "cstamas",
          "committed_at": "2024-04-25T17:13:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 19,
      "commits_last_year": 33,
      "latest_release_at": "2025-02-27T21:32:02Z",
      "latest_release_tag": "maven-install-plugin-3.1.4",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 24,
      "days_since_latest_release": 515,
      "mean_days_between_releases": 94.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "org.apache.maven.plugins:maven-install-plugin",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": true,
          "registry_url": "https://central.sonatype.com/artifact/org.apache.maven.plugins/maven-install-plugin",
          "is_deprecated": false,
          "latest_version": "4.0.0-beta-2",
          "repository_url": "https://github.com/apache/maven-install-plugin/tree/${project.scm.tag}",
          "versions_count": 20,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2025-10-31T15:18:21Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 269
        }
      ]
    },
    "popularity": {
      "forks": 44,
      "stars": 41,
      "watchers": 23,
      "fork_history": {
        "days": [
          {
            "date": "2018-02-25",
            "count": 1
          },
          {
            "date": "2018-04-09",
            "count": 1
          },
          {
            "date": "2018-08-08",
            "count": 1
          },
          {
            "date": "2018-10-09",
            "count": 1
          },
          {
            "date": "2019-03-10",
            "count": 1
          },
          {
            "date": "2019-06-07",
            "count": 1
          },
          {
            "date": "2019-07-01",
            "count": 1
          },
          {
            "date": "2019-10-08",
            "count": 1
          },
          {
            "date": "2019-10-19",
            "count": 1
          },
          {
            "date": "2019-11-19",
            "count": 1
          },
          {
            "date": "2020-05-04",
            "count": 1
          },
          {
            "date": "2020-06-08",
            "count": 1
          },
          {
            "date": "2020-07-09",
            "count": 1
          },
          {
            "date": "2020-09-24",
            "count": 1
          },
          {
            "date": "2021-04-07",
            "count": 1
          },
          {
            "date": "2021-06-14",
            "count": 2
          },
          {
            "date": "2021-10-14",
            "count": 1
          },
          {
            "date": "2022-01-05",
            "count": 1
          },
          {
            "date": "2022-04-26",
            "count": 1
          },
          {
            "date": "2022-05-14",
            "count": 1
          },
          {
            "date": "2022-07-18",
            "count": 1
          },
          {
            "date": "2022-08-07",
            "count": 1
          },
          {
            "date": "2022-10-28",
            "count": 1
          },
          {
            "date": "2022-11-10",
            "count": 1
          },
          {
            "date": "2022-11-18",
            "count": 1
          },
          {
            "date": "2022-11-23",
            "count": 1
          },
          {
            "date": "2022-11-24",
            "count": 1
          },
          {
            "date": "2023-01-30",
            "count": 1
          },
          {
            "date": "2023-05-05",
            "count": 1
          },
          {
            "date": "2023-05-20",
            "count": 1
          },
          {
            "date": "2023-05-22",
            "count": 1
          },
          {
            "date": "2023-07-10",
            "count": 1
          },
          {
            "date": "2023-11-12",
            "count": 1
          },
          {
            "date": "2024-06-24",
            "count": 1
          },
          {
            "date": "2024-06-27",
            "count": 1
          },
          {
            "date": "2025-02-04",
            "count": 1
          },
          {
            "date": "2025-02-11",
            "count": 1
          },
          {
            "date": "2025-07-09",
            "count": 1
          },
          {
            "date": "2025-08-13",
            "count": 1
          },
          {
            "date": "2025-11-02",
            "count": 1
          },
          {
            "date": "2026-05-14",
            "count": 1
          },
          {
            "date": "2026-06-17",
            "count": 1
          },
          {
            "date": "2026-07-08",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 44,
        "total_forks": 44
      },
      "star_history": null,
      "open_issues_and_prs": 12
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "pom.xml",
        "src/it/MINSTALL-108/module1/pom.xml",
        "src/it/MINSTALL-108/pom.xml",
        "src/it/MINSTALL-206/module-phase-none/pom.xml",
        "src/it/MINSTALL-206/module-skip-true/pom.xml",
        "src/it/MINSTALL-206/pom.xml",
        "src/it/MINSTALL-52/pom.xml",
        "src/it/MINSTALL-98/module1/pom.xml",
        "src/it/MINSTALL-98/module2/pom.xml",
        "src/it/MINSTALL-98/pom.xml",
        "src/it/MINSTALL-99/module1/pom.xml",
        "src/it/MINSTALL-99/module2/pom.xml",
        "src/it/MINSTALL-99/pom.xml",
        "src/it/attach-jar-checksum/pom.xml",
        "src/it/attach-release-jar/pom.xml",
        "src/it/gav-validation/pom.xml",
        "src/it/generate-pom-auto-1/pom.xml",
        "src/it/generate-pom-auto-2/pom.xml",
        "src/it/install-at-end-fail/module1/pom.xml",
        "src/it/install-at-end-fail/pom.xml",
        "src/it/install-at-end-pass/module1/pom.xml",
        "src/it/install-at-end-pass/module2/pom.xml",
        "src/it/install-at-end-pass/module3/pom.xml",
        "src/it/install-at-end-pass/module4/pom.xml",
        "src/it/install-at-end-pass/pom.xml",
        "src/it/install-file-minstall-121-bundle/pom.xml",
        "src/it/install-file-minstall-121-java-source/pom.xml",
        "src/it/install-file-minstall-121-maven-archetype/pom.xml",
        "src/it/install-file-minstall-121-targz/pom.xml",
        "src/it/install-file-minstall-121-war/pom.xml",
        "src/it/install-file-minstall-121/pom.xml",
        "src/it/jar-sources-javadoc/pom.xml",
        "src/it/local-repo-override-with-checksum-generatePom/pom.xml",
        "src/it/local-repo-override-with-checksum/pom.xml",
        "src/it/local-repo-override/pom.xml",
        "src/it/minstall-55/pom.xml",
        "src/it/no-main-artifact-1/pom.xml",
        "src/it/no-main-artifact-2/pom.xml",
        "src/it/pom-checksum/pom.xml",
        "src/it/release-jar/pom.xml",
        "src/it/release-pom/pom.xml",
        "src/it/setup-mock-phase-maven-plugin/pom.xml",
        "src/it/skip-install/pom.xml",
        "src/it/snapshot-jar/pom.xml",
        "src/it/snapshot-pom/pom.xml",
        "src/test/resources/unit/pom.xml"
      ],
      "largest_source_bytes": 15953,
      "source_files_sampled": 5,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 1161
    },
    "dependencies": {
      "manifests": [
        "pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 8,
        "malicious_count": 0,
        "assessed_package": "maven:org.apache.maven.plugins:maven-install-plugin@4.0.0-beta-2",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "com.google.guava:guava",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "33.6.0-jre"
        },
        {
          "name": "org.junit:junit-bom",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${junitVersion}"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "com.google.guava:guava",
            "direct": true,
            "version": "33.6.0-jre",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit:junit-bom",
            "direct": true,
            "version": "5.14.4",
            "ecosystem": "maven"
          },
          {
            "name": "com.diffplug.spotless:spotless-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.google.inject:guice",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.its.install.mock:mock-phase-maven-plugin",
            "direct": false,
            "version": "1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugin-testing:maven-plugin-testing-harness",
            "direct": false,
            "version": "4.0.0-beta-4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-antrun-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-install-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-invoker-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-plugin-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-resources-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.resolver:maven-resolver-api",
            "direct": false,
            "version": "2.0.20",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-api-annotations",
            "direct": false,
            "version": "4.0.0-rc-5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-api-core",
            "direct": false,
            "version": "4.0.0-rc-5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-api-di",
            "direct": false,
            "version": "4.0.0-rc-5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-api-model",
            "direct": false,
            "version": "4.0.0-rc-5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-core",
            "direct": false,
            "version": "4.0.0-rc-5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-impl",
            "direct": false,
            "version": "4.0.0-rc-5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-xml",
            "direct": false,
            "version": "4.0.0-rc-5",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-utils",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-api",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-core",
            "direct": false,
            "version": "5.23.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-simple",
            "direct": false,
            "version": "2.0.18",
            "ecosystem": "maven"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 28,
        "direct_count": 2,
        "indirect_count": 26
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 148,
        "open_issues": 11,
        "closed_ratio": 0.946,
        "closed_issues": 193,
        "closed_unmerged_prs": 71
      },
      "bus_factor": 5,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "brettporter",
          "commits": 62,
          "avatar_url": "https://avatars.githubusercontent.com/u/49108?v=4"
        },
        {
          "type": "User",
          "login": "khmarbaise",
          "commits": 58,
          "avatar_url": "https://avatars.githubusercontent.com/u/42484?v=4"
        },
        {
          "type": "User",
          "login": "bentmann",
          "commits": 45,
          "avatar_url": "https://avatars.githubusercontent.com/u/138698?v=4"
        },
        {
          "type": "User",
          "login": "rfscholte",
          "commits": 37,
          "avatar_url": "https://avatars.githubusercontent.com/u/150992?v=4"
        },
        {
          "type": "User",
          "login": "hboutemy",
          "commits": 30,
          "avatar_url": "https://avatars.githubusercontent.com/u/237462?v=4"
        },
        {
          "type": "User",
          "login": "slawekjaranowski",
          "commits": 29,
          "avatar_url": "https://avatars.githubusercontent.com/u/3578921?v=4"
        },
        {
          "type": "User",
          "login": "olamy",
          "commits": 24,
          "avatar_url": "https://avatars.githubusercontent.com/u/19728?v=4"
        },
        {
          "type": "User",
          "login": "cstamas",
          "commits": 22,
          "avatar_url": "https://avatars.githubusercontent.com/u/45165?v=4"
        },
        {
          "type": "User",
          "login": "dennisl",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/541536?v=4"
        },
        {
          "type": "User",
          "login": "gnodet",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/84022?v=4"
        }
      ],
      "contributors_sampled": 33,
      "top_contributor_share": 0.15
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "maven-verify.yml",
        "pr-automation.yml",
        "release-drafter.yml",
        "stale.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 0,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 6,
            "reason": "Found 3/5 approved changesets -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 46 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "a64c4401373ee8d2d7d6a318ba5f6f5173ae41cb",
        "ran_at": "2026-07-28T14:24:38Z",
        "aggregate_score": 5.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T04:29:54Z",
      "oldest_open_prs": [
        {
          "number": 424,
          "created_at": "2026-07-27T00:22:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-24T05:49:11Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 149,
          "created_at": "2008-11-13T09:57:07Z",
          "last_comment_at": "2022-08-25T19:17:27Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 226,
          "created_at": "2016-06-19T12:38:16Z",
          "last_comment_at": "2022-07-11T12:48:29Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 169,
          "created_at": "2021-02-16T17:43:47Z",
          "last_comment_at": "2022-11-05T10:05:17Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 305,
          "created_at": "2022-10-19T12:24:52Z",
          "last_comment_at": "2023-04-22T10:49:37Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 311,
          "created_at": "2023-10-25T13:01:27Z",
          "last_comment_at": "2023-11-17T12:23:26Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 320,
          "created_at": "2024-04-15T06:17:46Z",
          "last_comment_at": "2024-08-19T08:39:05Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 310,
          "created_at": "2024-06-04T16:27:41Z",
          "last_comment_at": "2024-06-27T19:16:33Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 315,
          "created_at": "2024-06-27T19:02:01Z",
          "last_comment_at": "2025-07-04T12:23:55Z",
          "last_comment_author": "kohlschuetter"
        },
        {
          "number": 323,
          "created_at": "2024-07-30T11:55:49Z",
          "last_comment_at": "2024-08-22T15:04:10Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 251,
          "created_at": "2024-11-11T14:36:29Z",
          "last_comment_at": "2024-11-12T16:49:01Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 367,
          "created_at": "2025-10-10T12:57:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/apache/maven-install-plugin",
    "host": "github.com",
    "name": "maven-install-plugin",
    "owner": "apache"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 70,
      "inputs": {
        "security": 66,
        "vitality": 70,
        "community": 59,
        "governance": 84,
        "engineering": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 70,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "commits_last_year": 33,
              "human_commit_share": 0.44,
              "days_since_last_push": 1,
              "active_weeks_last_year": 24
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "24/52 weeks with commits",
                "points": 16.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 24
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "33 commits in the last year",
                "points": 13.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 33
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "moderate",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "releases_count": 19,
              "latest_release_tag": "maven-install-plugin-3.1.4",
              "releases_from_tags": false,
              "days_since_latest_release": 515,
              "mean_days_between_releases": 94.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "19 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 19
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 515 days ago",
                "points": 7.2,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 515
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~94.9 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 94.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 15,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 15 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 15
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 59,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 47,
            "inputs": {
              "forks": 44,
              "stars": 41,
              "watchers": 23,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "41 stars",
                "points": 26,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 41
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "44 forks",
                "points": 13.6,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 44
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "23 watchers",
                "points": 7.5,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 23
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 84,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 88,
            "inputs": {
              "bus_factor": 5,
              "contributors_sampled": 33,
              "top_contributor_share": 0.15
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "5 contributor(s) cover half of all commits",
                "points": 45.9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 15% of commits",
                "points": 19.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 15
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "33 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 33
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 46 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "merged_prs": 148,
              "open_issues": 11,
              "closed_issues": 193,
              "issue_closed_ratio": 0.946,
              "closed_unmerged_prs": 71
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "95% of issues closed",
                "points": 44.2,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 95
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "148/219 decided PRs merged",
                "points": 25.8,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 148,
                      "decided": 219
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 3/5 approved changesets -- score normalized to 6",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "followers": 23594,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "apache",
              "public_repos": 3148,
              "account_age_days": 6400
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "23,594 followers of apache",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 23594,
                      "login": "apache"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "3148 public repos, account ~17 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 3148
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 17
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 91,
            "inputs": {
              "packages": [
                "org.apache.maven.plugins:maven-install-plugin"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 269
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 269 days ago",
                "points": 26,
                "status": "partial",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 269
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "20 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 67,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "java",
                "build-management",
                "maven",
                "maven-plugins",
                "maven-install-plugin"
              ],
              "has_wiki": false,
              "homepage": "https://maven.apache.org/plugins/maven-install-plugin/",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://maven.apache.org/plugins/maven-install-plugin/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 5.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 3/5 approved changesets -- score normalized to 6",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 46 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:org.apache.maven.plugins:maven-install-plugin@4.0.0-beta-2 runtime dependency closure — what installing the published package pulls in — 8 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:org.apache.maven.plugins:maven-install-plugin@4.0.0-beta-2",
                  "assessed": 8
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 8,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 8,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 20
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 61,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "moderate",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.295,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 1161
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "13 of 44 human commits state their intent (structured subject or explanatory body)",
                "points": 15.8,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 13,
                      "sampled": 44
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "pom.xml",
                "src/it/MINSTALL-108/module1/pom.xml",
                "src/it/MINSTALL-108/pom.xml",
                "src/it/MINSTALL-206/module-phase-none/pom.xml",
                "src/it/MINSTALL-206/module-skip-true/pom.xml",
                "src/it/MINSTALL-206/pom.xml",
                "src/it/MINSTALL-52/pom.xml",
                "src/it/MINSTALL-98/module1/pom.xml",
                "src/it/MINSTALL-98/module2/pom.xml",
                "src/it/MINSTALL-98/pom.xml",
                "src/it/MINSTALL-99/module1/pom.xml",
                "src/it/MINSTALL-99/module2/pom.xml",
                "src/it/MINSTALL-99/pom.xml",
                "src/it/attach-jar-checksum/pom.xml",
                "src/it/attach-release-jar/pom.xml",
                "src/it/gav-validation/pom.xml",
                "src/it/generate-pom-auto-1/pom.xml",
                "src/it/generate-pom-auto-2/pom.xml",
                "src/it/install-at-end-fail/module1/pom.xml",
                "src/it/install-at-end-fail/pom.xml",
                "src/it/install-at-end-pass/module1/pom.xml",
                "src/it/install-at-end-pass/module2/pom.xml",
                "src/it/install-at-end-pass/module3/pom.xml",
                "src/it/install-at-end-pass/module4/pom.xml",
                "src/it/install-at-end-pass/pom.xml",
                "src/it/install-file-minstall-121-bundle/pom.xml",
                "src/it/install-file-minstall-121-java-source/pom.xml",
                "src/it/install-file-minstall-121-maven-archetype/pom.xml",
                "src/it/install-file-minstall-121-targz/pom.xml",
                "src/it/install-file-minstall-121-war/pom.xml",
                "src/it/install-file-minstall-121/pom.xml",
                "src/it/jar-sources-javadoc/pom.xml",
                "src/it/local-repo-override-with-checksum-generatePom/pom.xml",
                "src/it/local-repo-override-with-checksum/pom.xml",
                "src/it/local-repo-override/pom.xml",
                "src/it/minstall-55/pom.xml",
                "src/it/no-main-artifact-1/pom.xml",
                "src/it/no-main-artifact-2/pom.xml",
                "src/it/pom-checksum/pom.xml",
                "src/it/release-jar/pom.xml",
                "src/it/release-pom/pom.xml",
                "src/it/setup-mock-phase-maven-plugin/pom.xml",
                "src/it/skip-install/pom.xml",
                "src/it/snapshot-jar/pom.xml",
                "src/it/snapshot-pom/pom.xml",
                "src/test/resources/unit/pom.xml"
              ],
              "dependency_bot_commit_share": 0.56
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "pom.xml, src/it/MINSTALL-108/module1/pom.xml, src/it/MINSTALL-108/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "pom.xml, src/it/MINSTALL-108/module1/pom.xml, src/it/MINSTALL-108/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "56 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 56,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 15953,
              "source_files_sampled": 5,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/5 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 5,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T14:25:09.430657Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/apache/maven-install-plugin.svg",
  "full_name": "apache/maven-install-plugin",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}