Public recordWeak
Software health reportschema 0.30.0 · metrics 2.5.0 · 2026-08-04 16:29 UTC
api-platform / metadata
[READ ONLY] API Resource-oriented metadata attributes and factories
api-platform/metadata holds a health index of 44 out of 100, placing it in the Weak band. It scores highest on Sustainability & Governance (57/100) and lowest on Engineering Quality (32/100). It was last updated 23 days ago. 2 contributors account for most of its recent work.
44
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
44
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 46 is calibrated to 44 on the published index scale (record calibration 2026-08-02).
Ownership
API PlatformOrganization
407 followers49 public repossince Jul 2015
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| Packagist | api-platform/metadata | v5.0.0-alpha.2 | 515,814 | 193 | 23 days ago | restapijson-ldhalswaggerhydraopenapijsonapigraphql |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
53
Development activity
29At Risk
How it's scored
| 28.8/36 | Push recency — last push 23 days ago |
| 0/36 | Commit cadence — 0/52 weeks with commits |
| 0/18 | Commit volume — 0 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 0 |
| human_commit_share | 1 |
| days_since_last_push | 23 |
| active_weeks_last_year | 0 |
Release discipline
88Excellent
How it's scored
| 16.2/27 | Ships releases — 100 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 23 days ago |
| 27/27 | Release cadence — a release every ~3.2 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 100 |
| latest_release_tag | v5.0.0-alpha.2 |
| releases_from_tags | yes |
| days_since_latest_release | 23 |
| mean_days_between_releases | 3.2 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
48
Popularity & adoption
24At Risk
How it's scored
| 23.5/60 | Stars — 29 stars |
| 0/25 | Forks — 1 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 1 |
| stars | 29 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
47Weak
How it's scored
| 0/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | no |
| has_license | yes |
| readme_badges | — |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | yes |
| readme_badge_services | — |
| has_pull_request_template | yes |
Ecosystem adoption (downloads)
88Excellent
How it's scored
| 76.2/80 | Monthly downloads — 515,814 downloads/month across packagist |
| 11.7/20 | Registry dependents — 56 packages depend on it |
Inputs used
| packages | api-platform/metadata |
| dependents | 56 |
| ecosystems | packagist |
| total_downloads | 5,594,304 |
| monthly_downloads | 515,814 |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
57
Maintainer resilience (bus factor)
63Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 14.2/22.5 | Commit distribution — top contributor authored 37% of commits |
| 13.5/13.5 | Contributor breadth — 55 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 13 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 55 |
| top_contributor_share | 0.371 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/42 | Issue resolution — no issues or no data |
| 0/30 | PR acceptance — no decided pull requests or no data |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| prs_merged_7d | 0 |
| prs_decided_7d | 0 |
| prs_merged_30d | 0 |
| prs_decided_30d | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
| first_time_authors_30d | 0 |
| first_time_prs_merged_30d | 0 |
| first_time_prs_decided_30d | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance, newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
73Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 18.8/25 | Owner reach — 407 followers of api-platform |
| 24.4/25 | Track record — 49 public repos, account ~11 yr old |
Inputs used
| followers | 407 |
| owner_type | Organization |
| is_verified | — |
| owner_login | api-platform |
| public_repos | 49 |
| account_age_days | 4,033 |
Package maintenance
100Exceptional
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on packagist |
| 35/35 | Publish recency — latest publish 23 days ago |
| 20/20 | Version history — 193 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | api-platform/metadata |
| ecosystems | packagist |
| any_deprecated | no |
| min_days_since_publish | 23 |
Engineering Quality
Are baseline engineering and documentation practices in place?
32
Engineering practices
30At Risk
How it's scored
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
35Weak
How it's scored
| 0/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://api-platform.com/docs/core/ |
| 10/10 | Repository description |
| 10/10 | Topics — 6 topics |
| 0/10 | Wiki |
Inputs used
| topics | api, api-platform, graphql, metadata, php, rest |
| has_wiki | no |
| homepage | https://api-platform.com/docs/core/ |
| has_readme | no |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
36
Security posture
36Weak
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 13 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — no data |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — no SAST tool detected |
| 4.5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 3.6 |
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
36
Agent context & guidance
40Weak
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 85 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.85 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 0/11 | Static type checking |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
Code legibility for models
55Moderate
How it's scored
| 0/45 | Type-checkable code — PHP without a type-check config |
| 55/55 | Manageable file sizes — 0/156 source files over 60KB |
Inputs used
| primary_language | PHP |
| largest_source_bytes | 57,521 |
| source_files_sampled | 156 |
| oversized_source_files | 0 |
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — Tests/Extractor/yaml/openapi.yaml |
| 0/20 | MCP server |
| 0/40 | Runnable examples |
Inputs used
| example_dirs | — |
| has_mcp_signal | no |
| api_schema_files | Tests/Extractor/yaml/openapi.yaml |
Key facts
29GitHub stars
55contributors
0commits, last 12 months
23days since last push
100releases
2bus factor
0open issues
Packagistpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
More detail
OpenSSF Scorecard 3.6 / 10
3.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 13 contributing companies or organizations |
| n/a | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | no SAST tool detected |
| 9 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 4
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Packagist | doctrine/inflector | ^2.0 | composer.json |
| Packagist | psr/cache | ^3.0 | composer.json |
| Packagist | psr/log | ^1.0 || ^2.0 || ^3.0 | composer.json |
| Packagist | symfony/property-info | ^6.1 | composer.json |
All dependencies 15
Full resolved dependency set from the GitHub dependency graph: 4 direct and 11 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Packagist | doctrine/inflector | — | direct |
| Packagist | psr/cache | — | direct |
| Packagist | psr/log | — | direct |
| Packagist | symfony/property-info | — | direct |
| Packagist | api-platform/json-schema | — | indirect |
| Packagist | api-platform/openapi | — | indirect |
| Packagist | api-platform/state | — | indirect |
| Packagist | php | — | indirect |
| Packagist | phpspec/prophecy-phpunit | — | indirect |
| Packagist | phpstan/phpdoc-parser | — | indirect |
| Packagist | sebastian/comparator | — | indirect |
| Packagist | symfony/config | — | indirect |
| Packagist | symfony/phpunit-bridge | — | indirect |
| Packagist | symfony/routing | — | indirect |
| Packagist | symfony/yaml | — | indirect |
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"api",
"api-platform",
"graphql",
"metadata",
"php",
"rest"
],
"is_fork": false,
"size_kb": 1707,
"has_wiki": false,
"homepage": "https://api-platform.com/docs/core/",
"languages": {
"PHP": 678133
},
"pushed_at": "2026-07-12T13:21:02Z",
"created_at": "2023-03-20T15:57:05Z",
"owner_type": "Organization",
"updated_at": "2026-07-15T08:39:53Z",
"description": "[READ ONLY] API Resource-oriented metadata attributes and factories",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "3.1",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "https://api-platform.com",
"name": "API Platform",
"type": "Organization",
"login": "api-platform",
"company": null,
"location": "The World Wide Web",
"followers": 407,
"avatar_url": "https://avatars.githubusercontent.com/u/13420081?v=4",
"created_at": "2015-07-20T15:18:22Z",
"is_verified": null,
"public_repos": 49,
"account_age_days": 4033
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v5.0.0-alpha.2",
"kind": "prerelease",
"published_at": "2026-07-12T08:10:11Z"
},
{
"tag": "v5.0.0-alpha.1",
"kind": "prerelease",
"published_at": "2026-06-29T11:22:12Z"
},
{
"tag": "v4.4.0-alpha.3",
"kind": "prerelease",
"published_at": "2026-07-12T07:36:01Z"
},
{
"tag": "v4.4.0-alpha.2",
"kind": "prerelease",
"published_at": "2026-06-25T16:22:16Z"
},
{
"tag": "v4.4.0-alpha.1",
"kind": "prerelease",
"published_at": "2026-06-25T13:58:22Z"
},
{
"tag": "v4.3.17",
"kind": "patch",
"published_at": "2026-07-03T06:30:28Z"
},
{
"tag": "v4.3.16",
"kind": "patch",
"published_at": "2026-07-03T06:30:28Z"
},
{
"tag": "v4.3.15",
"kind": "patch",
"published_at": "2026-06-13T05:03:21Z"
},
{
"tag": "v4.3.14",
"kind": "patch",
"published_at": "2026-06-13T05:03:21Z"
},
{
"tag": "v4.3.13",
"kind": "patch",
"published_at": "2026-06-13T05:03:21Z"
},
{
"tag": "v4.3.12",
"kind": "patch",
"published_at": "2026-06-10T15:36:18Z"
},
{
"tag": "v4.3.11",
"kind": "patch",
"published_at": "2026-06-10T15:36:18Z"
},
{
"tag": "v4.3.10",
"kind": "patch",
"published_at": "2026-06-05T09:05:29Z"
},
{
"tag": "v4.3.9",
"kind": "patch",
"published_at": "2026-06-03T14:26:20Z"
},
{
"tag": "v4.3.8",
"kind": "patch",
"published_at": "2026-06-03T14:26:20Z"
},
{
"tag": "v4.3.7",
"kind": "patch",
"published_at": "2026-05-28T13:34:59Z"
},
{
"tag": "v4.3.6",
"kind": "patch",
"published_at": "2026-05-22T12:00:17Z"
},
{
"tag": "v4.3.5",
"kind": "patch",
"published_at": "2026-05-06T12:07:59Z"
},
{
"tag": "v4.3.4",
"kind": "patch",
"published_at": "2026-04-30T12:21:24Z"
},
{
"tag": "v4.3.3",
"kind": "patch",
"published_at": "2026-03-27T06:51:10Z"
},
{
"tag": "v4.3.2",
"kind": "patch",
"published_at": "2026-03-27T06:51:10Z"
},
{
"tag": "v4.3.1",
"kind": "patch",
"published_at": "2026-03-13T14:49:56Z"
},
{
"tag": "v4.3.0",
"kind": "minor",
"published_at": "2026-03-13T14:49:56Z"
},
{
"tag": "v4.3.0-beta.2",
"kind": "prerelease",
"published_at": "2026-03-06T09:30:10Z"
},
{
"tag": "v4.3.0-beta.1",
"kind": "prerelease",
"published_at": "2026-03-02T16:06:37Z"
},
{
"tag": "4.3.0-alpha.2",
"kind": "prerelease",
"published_at": "2026-02-16T13:16:47Z"
},
{
"tag": "v4.3.0-alpha.2",
"kind": "prerelease",
"published_at": "2026-02-16T13:16:47Z"
},
{
"tag": "4.3.0-alpha.1",
"kind": "prerelease",
"published_at": "2026-02-13T17:43:34Z"
},
{
"tag": "v4.3.0-alpha.1",
"kind": "prerelease",
"published_at": "2026-02-13T17:43:34Z"
},
{
"tag": "v4.2.26",
"kind": "patch",
"published_at": "2026-03-24T09:44:21Z"
},
{
"tag": "v4.2.25",
"kind": "patch",
"published_at": "2026-03-24T09:44:21Z"
},
{
"tag": "v4.2.24",
"kind": "patch",
"published_at": "2026-03-24T09:44:21Z"
},
{
"tag": "v4.2.23",
"kind": "patch",
"published_at": "2026-03-24T09:44:21Z"
},
{
"tag": "v4.2.22",
"kind": "patch",
"published_at": "2026-03-13T10:17:49Z"
},
{
"tag": "v4.2.21",
"kind": "patch",
"published_at": "2026-03-13T10:17:49Z"
},
{
"tag": "v4.2.20",
"kind": "patch",
"published_at": "2026-02-25T15:52:40Z"
},
{
"tag": "v4.2.19",
"kind": "patch",
"published_at": "2026-02-25T15:52:40Z"
},
{
"tag": "v4.2.18",
"kind": "patch",
"published_at": "2026-02-25T15:52:40Z"
},
{
"tag": "v4.2.17",
"kind": "patch",
"published_at": "2026-02-13T15:07:33Z"
},
{
"tag": "v4.2.16",
"kind": "patch",
"published_at": "2026-02-13T15:07:33Z"
},
{
"tag": "v4.2.15",
"kind": "patch",
"published_at": "2026-01-27T07:12:16Z"
},
{
"tag": "v4.2.14",
"kind": "patch",
"published_at": "2026-01-12T13:36:15Z"
},
{
"tag": "v4.2.13",
"kind": "patch",
"published_at": "2026-01-12T13:36:15Z"
},
{
"tag": "v4.2.12",
"kind": "patch",
"published_at": "2025-12-27T22:15:57Z"
},
{
"tag": "v4.2.11",
"kind": "patch",
"published_at": "2025-12-18T14:34:13Z"
},
{
"tag": "v4.2.10",
"kind": "patch",
"published_at": "2025-12-11T16:36:37Z"
},
{
"tag": "v4.2.9",
"kind": "patch",
"published_at": "2025-12-04T14:20:26Z"
},
{
"tag": "v4.2.8",
"kind": "patch",
"published_at": "2025-11-30T13:04:03Z"
},
{
"tag": "v4.2.7",
"kind": "patch",
"published_at": "2025-11-30T13:04:03Z"
},
{
"tag": "v4.2.6",
"kind": "patch",
"published_at": "2025-11-17T17:31:39Z"
},
{
"tag": "v4.2.5",
"kind": "patch",
"published_at": "2025-11-13T15:51:59Z"
},
{
"tag": "v4.2.4",
"kind": "patch",
"published_at": "2025-11-13T15:51:59Z"
},
{
"tag": "v4.2.3",
"kind": "patch",
"published_at": "2025-10-31T08:55:46Z"
},
{
"tag": "v4.2.2",
"kind": "patch",
"published_at": "2025-10-08T08:36:37Z"
},
{
"tag": "v4.2.1",
"kind": "patch",
"published_at": "2025-09-15T12:27:38Z"
},
{
"tag": "v4.2.0",
"kind": "minor",
"published_at": "2025-09-15T12:27:38Z"
},
{
"tag": "4.2.0-beta.1",
"kind": "prerelease",
"published_at": "2025-09-15T12:27:38Z"
},
{
"tag": "v4.2.0-beta.1",
"kind": "prerelease",
"published_at": "2025-09-15T12:27:38Z"
},
{
"tag": "v4.2.0-alpha.3",
"kind": "prerelease",
"published_at": "2025-08-29T15:16:08Z"
},
{
"tag": "v4.2.0-alpha.2",
"kind": "prerelease",
"published_at": "2025-08-25T11:54:40Z"
},
{
"tag": "v4.2.0-alpha.1",
"kind": "prerelease",
"published_at": "2025-07-03T13:55:21Z"
},
{
"tag": "v4.1.30",
"kind": "patch",
"published_at": "2025-11-08T08:09:42Z"
},
{
"tag": "v4.1.29",
"kind": "patch",
"published_at": "2025-11-08T08:09:42Z"
},
{
"tag": "v4.1.28",
"kind": "patch",
"published_at": "2025-11-08T08:09:42Z"
},
{
"tag": "v4.1.27",
"kind": "patch",
"published_at": "2025-11-08T08:09:42Z"
},
{
"tag": "v4.1.26",
"kind": "patch",
"published_at": "2025-09-15T09:57:10Z"
},
{
"tag": "v4.1.25",
"kind": "patch",
"published_at": "2025-09-15T09:57:10Z"
},
{
"tag": "v4.1.24",
"kind": "patch",
"published_at": "2025-09-15T09:57:10Z"
},
{
"tag": "v4.1.23",
"kind": "patch",
"published_at": "2025-09-05T09:06:52Z"
},
{
"tag": "v4.1.22",
"kind": "patch",
"published_at": "2025-08-29T15:13:26Z"
},
{
"tag": "v4.1.21",
"kind": "patch",
"published_at": "2025-07-29T08:54:26Z"
},
{
"tag": "v4.1.20",
"kind": "patch",
"published_at": "2025-07-15T07:33:57Z"
},
{
"tag": "v4.1.19",
"kind": "patch",
"published_at": "2025-07-15T07:33:57Z"
},
{
"tag": "v4.1.18",
"kind": "patch",
"published_at": "2025-07-03T13:06:55Z"
},
{
"tag": "v4.1.17",
"kind": "patch",
"published_at": "2025-06-19T08:33:15Z"
},
{
"tag": "v4.1.16",
"kind": "patch",
"published_at": "2025-06-13T12:04:07Z"
},
{
"tag": "v4.1.15",
"kind": "patch",
"published_at": "2025-06-06T14:56:47Z"
},
{
"tag": "v4.1.14",
"kind": "patch",
"published_at": "2025-06-06T14:02:15Z"
},
{
"tag": "v4.1.13",
"kind": "patch",
"published_at": "2025-06-04T10:13:07Z"
},
{
"tag": "v4.1.12",
"kind": "patch",
"published_at": "2025-05-21T12:14:44Z"
},
{
"tag": "v4.1.11",
"kind": "patch",
"published_at": "2025-05-21T12:14:44Z"
},
{
"tag": "v4.1.10",
"kind": "patch",
"published_at": "2025-05-21T12:14:44Z"
},
{
"tag": "v4.1.9",
"kind": "patch",
"published_at": "2025-05-16T07:56:36Z"
},
{
"tag": "v4.1.8",
"kind": "patch",
"published_at": "2025-05-09T05:54:53Z"
},
{
"tag": "v4.1.7",
"kind": "patch",
"published_at": "2025-04-11T09:32:56Z"
},
{
"tag": "v4.1.6",
"kind": "patch",
"published_at": "2025-04-03T17:59:19Z"
},
{
"tag": "v4.1.5",
"kind": "patch",
"published_at": "2025-04-03T17:59:19Z"
},
{
"tag": "v4.1.4",
"kind": "patch",
"published_at": "2025-03-21T19:15:45Z"
},
{
"tag": "v4.1.3",
"kind": "patch",
"published_at": "2025-03-21T19:15:45Z"
},
{
"tag": "v4.1.2",
"kind": "patch",
"published_at": "2025-03-21T19:15:45Z"
},
{
"tag": "v4.1.1",
"kind": "patch",
"published_at": "2025-03-14T15:03:57Z"
},
{
"tag": "v4.1.0",
"kind": "minor",
"published_at": "2025-02-28T10:08:08Z"
},
{
"tag": "v4.1.0-beta.2",
"kind": "prerelease",
"published_at": "2025-02-07T15:49:03Z"
},
{
"tag": "v4.0.22",
"kind": "patch",
"published_at": "2025-04-03T15:02:50Z"
},
{
"tag": "v4.0.21",
"kind": "patch",
"published_at": "2025-03-21T15:46:01Z"
},
{
"tag": "v4.0.20",
"kind": "patch",
"published_at": "2025-03-12T15:11:13Z"
},
{
"tag": "v4.0.19",
"kind": "patch",
"published_at": "2025-02-28T10:39:00Z"
},
{
"tag": "v4.0.18",
"kind": "patch",
"published_at": "2025-02-07T15:44:47Z"
},
{
"tag": "v4.0.17",
"kind": "patch",
"published_at": "2025-02-07T15:44:47Z"
},
{
"tag": "v3.4.17",
"kind": "patch",
"published_at": "2025-04-07T08:17:29Z"
}
],
"recent_commits": [
{
"oid": "2f1d42df27f97a5ab8297f88d0a7cbd827b6e0e8",
"body": null,
"is_bot": false,
"headline": "style: phpstan fixes",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2024-04-12T22:00:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48ee4d8aab67916a8a87d90489ccbc15022e73ed",
"body": null,
"is_bot": false,
"headline": "style: cs fixes",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2024-04-12T22:00:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec0693b88a4fa197bfeab691c981318243f5a6e2",
"body": null,
"is_bot": false,
"headline": "fix(elasticsearch): wrong namespace for stateOptions",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2024-03-29T11:03:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "394e1be444eb1701dafb399e98c28c3b58f7901c",
"body": "fixes #6252",
"is_bot": false,
"headline": "fix(elasticsearch): wrong namespace for stateOptions (#6259)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2024-03-29T10:52:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d4b117313258dc76da7bd6dfb270b83689a47fa",
"body": null,
"is_bot": false,
"headline": "style: various cs fixes",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2024-03-05T10:46:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ced37d8a6e43970b31f810f9ccad2d38156266da",
"body": null,
"is_bot": false,
"headline": "style: latest cs-fixer",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-12-29T16:24:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d09ab880e132db7b0c361c99a193411cd1059be",
"body": null,
"is_bot": false,
"headline": "ci: use sebastian/comparator<5.0 (#6044)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-12-14T07:21:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76ccd7018d3f2af916a38d9b61bd65c48c28ff0b",
"body": "* chore: symfony 7\r\n\r\n* Add `$buildDir` to `CachePoolClearerCacheWarmer::warmUp()`\r\n\r\nSymfony 7 adds a new parameter `$buildDir` to\r\n`WarmableInterface::warmUp()`, so that the method signature of\r\n`CachePoolClearerCacheWarmer::warmUp()` needs to be updated.\r\n\r\n* more\r\n\r\n---------\r\n\r\nCo-authored-by: Tac Tacelosky <tacman@gmail.com>\r\nCo-authored-by: Yannick Ihmels <yannick@ihmels.org>",
"is_bot": false,
"headline": "chore: support symfony 7 (#6009)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-11-30T10:01:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4da1824a2eaa9ae4f658fe663825821635017523",
"body": null,
"is_bot": false,
"headline": "chore: phpstan fixes",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-11-27T11:10:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf81a9b95d49d21c915c2fb15b6cf5b527cd759e",
"body": null,
"is_bot": false,
"headline": "docs: html code selector",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-11-06T16:13:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88cb742e230a75694ef930dc5ab1b2509595a4b9",
"body": null,
"is_bot": false,
"headline": "docs: html code selector",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-11-06T16:10:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41342fb1b73d2e16e6ef66fd87b1fdb14e0c76f9",
"body": null,
"is_bot": false,
"headline": "fix: add itemUriTemplate to resources.xsd (#5872)",
"author_name": "Karol",
"author_login": "Wojdylak",
"committed_at": "2023-10-09T09:55:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b7f63e7bd609c84ec16d36aa03c88c6828201c3",
"body": null,
"is_bot": false,
"headline": "chore: update php-cs-fixer",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-09-01T21:58:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b26a13c4b13f74e79441ec0b3044af6dac88b02",
"body": "* fix(metadata): notexposed no urivariables inheritance\r\n\r\n* use named arguments\r\n\r\nCo-authored-by: Vincent <407859+vincentchalamon@users.noreply.github.com>\r\n\r\n* fix tests\r\n\r\n---------\r\n\r\nCo-authored-by: Vincent <407859+vincentchalamon@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(metadata): notexposed no urivariables inheritance (#5765)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-08-22T08:06:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6de065655a46fe679e430d49b069d00778b7f1b",
"body": null,
"is_bot": false,
"headline": "cs: php-cs-fixer mixed param phpdoc",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-08-14T19:50:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "007f9aa6a0154d44238ec0a02aab2415a3200416",
"body": null,
"is_bot": false,
"headline": "fix(doctrine): use stateOptions only within doctrine context (#5726)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-08-08T09:44:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe7ae1ed03ab9c5b146e3cc3509c8840d2fc3605",
"body": "… options (#5722)",
"is_bot": false,
"headline": "fix(metadata): generated NotExposed operation should inherit resource…",
"author_name": "Vincent",
"author_login": "vincentchalamon",
"committed_at": "2023-08-04T20:41:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2005ca4d4d3b276a774103aaf63ebda3caa6a0b7",
"body": null,
"is_bot": false,
"headline": "fix(metadata): operation NotExposed status to 404 (#5717)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-08-04T11:23:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "452935aa5654a59ccc85dbe176aefcffae662d19",
"body": null,
"is_bot": false,
"headline": "docs: executable guides (#5712)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-08-03T12:14:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6917d86a736bdc74c922217fee0565d0b5dcc179",
"body": "* test: compatibility with PHPUnit 10\r\n\r\n* fix\r\n\r\n* another fix\r\n\r\n* one more fix\r\n\r\n* fix\r\n\r\n* try again\r\n\r\n* again\r\n\r\n* fixed locally\r\n\r\n* clean composer.json",
"is_bot": false,
"headline": "test: compatibility with PHPUnit 10 (#5701)",
"author_name": "Kévin Dunglas",
"author_login": "dunglas",
"committed_at": "2023-07-26T21:14:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0ec7ab21b86b3f3037f3f627d16f12b906475e6",
"body": null,
"is_bot": false,
"headline": "fix: enable to update all keys in metadata (#5684)",
"author_name": "Takashi Kanemoto",
"author_login": "ttskch",
"committed_at": "2023-07-21T07:35:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f648f7ae1082b1073c3c2272167a07c09ba9fb38",
"body": null,
"is_bot": false,
"headline": "ci: behat context + cs (#5651)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-07-05T23:29:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33c324987c8008db476b8f1c9bbccb9ce5258c47",
"body": null,
"is_bot": false,
"headline": "Add description on an internal class",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-07-01T10:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41406a0a55647ec856b4f32b27f54ba69e768b6c",
"body": "…5619)\n\nCo-authored-by: Manuel Rossard <manuel.rossard@u-bordeaux.fr>",
"is_bot": false,
"headline": "fix: filters don't have to implement the \"legacy\" FilterInterface (#…",
"author_name": "Manuel Rossard",
"author_login": "mrossard",
"committed_at": "2023-06-08T14:51:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dbfefcf0ff287501f02844745b7670cf7c2bc7e",
"body": null,
"is_bot": false,
"headline": "style: symfony rules has use_nullable_type_declaration to false",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-05-23T19:56:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "370cbf58d9c95a04fcffb466846366a73f21d2e9",
"body": null,
"is_bot": false,
"headline": "wrong interfaces",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-04-24T08:50:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad96c37d761cbac32782e3e425735a1502ee74a7",
"body": null,
"is_bot": false,
"headline": "chore: move interfaces without breaking",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-04-24T08:37:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "593f866a9769d15779bbf219544170dc215177a3",
"body": "…building Links (#5550)\n\n* fix: the stateOptions::entityClass should be used when present while building Links\r\nFixes https://github.com/api-platform/core/issues/5510\r\n\r\n* proper fix\r\n\r\n---------\r\n\r\nCo-authored-by: Manuel Rossard <manuel.rossard@u-bordeaux.fr>\r\nCo-authored-by: soyuka <soyuka@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: the stateOptions::entityClass should be used when present while …",
"author_name": "Manuel Rossard",
"author_login": "mrossard",
"committed_at": "2023-04-21T13:55:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa6cbb832816ecbd74621d290b5a7cd0fb175968",
"body": null,
"is_bot": false,
"headline": "chore: cs fixes (#5534)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-04-06T10:39:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9095a22c223bfcdc83c63c62b8db6d95563d1469",
"body": null,
"is_bot": false,
"headline": "chore: correct contributors link (#5524)",
"author_name": "Pierre Rebeilleau",
"author_login": "PierreRebeilleau",
"committed_at": "2023-04-04T20:30:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9509db4f1759ce4283e76fd246d2b3215318143",
"body": null,
"is_bot": false,
"headline": "fix: class already declared with preloading (#5523)",
"author_name": "Thibault Buathier",
"author_login": "Gwemox",
"committed_at": "2023-04-04T12:11:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f5683d8affbf4a1b5b9648cd8507841081061e7",
"body": null,
"is_bot": false,
"headline": "fix(openapi): yaml parameters extractor (#5487)",
"author_name": "Joris Saenger",
"author_login": "jorissae",
"committed_at": "2023-03-28T17:02:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0e1fd374157972cddfb292645456f66392ab62f",
"body": null,
"is_bot": false,
"headline": "chore: split api-platform/openapi (#5434)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-03-21T17:16:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c36a5fbb42d53532aaae3a9fbcd6806bf61a41f5",
"body": "…#5469)",
"is_bot": false,
"headline": "fix(jsonschema): find the related operation instead of assuming one (…",
"author_name": "Kévin Van Der Stracten",
"author_login": "Zowac",
"committed_at": "2023-03-21T09:33:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa074a2e48b0b8402e38c559d8da19177e579c00",
"body": null,
"is_bot": false,
"headline": "fix(metadata): add operations config (#5459)",
"author_name": "GrimpEreau",
"author_login": "GrimpEreau",
"committed_at": "2023-03-17T10:28:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f95761fef70616a0006f1b3c242516872825e51d",
"body": null,
"is_bot": false,
"headline": "fix(metadata): add string[] as allowed param type (#5462)",
"author_name": "Louis-Marie",
"author_login": "louismariegaborit",
"committed_at": "2023-03-17T09:26:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10b10e2432d57a872ae6cd09c52dac39849b73b0",
"body": null,
"is_bot": false,
"headline": "fix(metadata): default graphql operations on ApiResource only",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-03-10T09:13:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03903def4c74956da8ce4fb403c77b7cdd578769",
"body": null,
"is_bot": false,
"headline": "Merge 3.0 into 3.1",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-02-28T10:13:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7730cb5462b3a151747621ea9bcfbcffb08b84dd",
"body": null,
"is_bot": false,
"headline": "Merge 2.7 into 3.0",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-02-28T10:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "618d1a0a0adff2065b527f810355257432fed998",
"body": null,
"is_bot": false,
"headline": "fix(metadata): SimpleXMLElement has string attributes (#5424)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-02-28T09:57:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d133fb63bebfb2cfe8bdfc4ed9d709db4a702861",
"body": "…ent values (#5419)\n\nCo-authored-by: Fabien Raynaud <fabien.raynaud@simpliciti.fr>",
"is_bot": false,
"headline": "fix(metadata): in xml resource extractor > building request body cont…",
"author_name": "fraynaud1330",
"author_login": "fraynaud1330",
"committed_at": "2023-02-28T09:44:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5111dd767950e53e518d269f4baaa151300403ed",
"body": "* ci: fix tests\r\n\r\n* ci: cs fixes\r\n\r\n* ci: fix cs & phpstan",
"is_bot": false,
"headline": "ci: fix tests (#5421)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-02-27T16:08:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67d4aa26d6193c3fbde904aabce9e87c619d456d",
"body": null,
"is_bot": false,
"headline": "fix: map uriVariables to uriTemplate vars (#5410)",
"author_name": "Nicolas PHILIPPE",
"author_login": "nikophil",
"committed_at": "2023-02-18T11:01:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20c905051a3905005561b9e38726142f46aef3ac",
"body": null,
"is_bot": false,
"headline": "fix: missing parent construct calls with named arguments (#5385)",
"author_name": "Alan Poulain",
"author_login": "alanpoulain",
"committed_at": "2023-02-01T11:13:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d29dfbf2c1159389de62c574ab0f66bae2a4933",
"body": "* fix(metadata): defaults extra properties\r\n\r\n* fix tests",
"is_bot": false,
"headline": "fix(metadata): defaults extra properties (#5362)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-01-26T08:03:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b3c1619604684bd5dca3ed35e655e1b522e8fa1",
"body": null,
"is_bot": false,
"headline": "chore: fix bad merge",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-01-18T09:29:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4580b9f7d3a0777d1fa6c8cc1613d2cecbba0120",
"body": null,
"is_bot": false,
"headline": "Merge branch 3.0 into main",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-01-16T16:48:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "107354b3a48c90605645a313a02a5dce87bc1578",
"body": "* chore: homogenize `Operation` constructor\r\n\r\n* chore: homogenize `HttpOperation` constructor\r\n\r\n* chore: homogenize `Get` constructor\r\n\r\n* chore: homogenize `Post` constructor\r\n\r\n* chore: homogenize `Delete` constructor\r\n\r\n* chore: homogenize `GetCollection` constructor\r\n\r\n* chore: homogenize `Pat\n[…]\nginationViaCursor`\r\n\r\n* chore: warn users regarding usage of positional parameters in operations’ constructor\r\n\r\n* chore: name constructors arguments\r\n\r\n* fix: method cannot be null in `HttpOperation`",
"is_bot": false,
"headline": "fix(metadata): homogenize operations constructor (#5344)",
"author_name": "Mathieu",
"author_login": null,
"committed_at": "2023-01-16T16:29:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bccd54a53c64ce6be7af29a98514ee382e7927d5",
"body": "* fix: call getOperationWithDefaults in ExtractorResourceMetadataCollectionFactor\r\n\r\n* fix(graphql): usable YAML/XML configuration",
"is_bot": false,
"headline": "fix(graphql): usable YAML/XML configuration (#5333)",
"author_name": "Alan Poulain",
"author_login": "alanpoulain",
"committed_at": "2023-01-16T13:30:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "203e2c8fc78f4c59439e1017b05f24b3f93cf81f",
"body": null,
"is_bot": false,
"headline": "feat: add context to XML parsing errors (#5335)",
"author_name": "Ivan Yivoff",
"author_login": "yivi",
"committed_at": "2023-01-16T13:04:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "621a8a6d6eff0bddc806750bb17cd091ff76f45a",
"body": "* feat: support collect dernormalization errors\r\n\r\n* feat: complete collectDenormalizationErrors implementation\r\n\r\nCo-authored-by: Alan Poulain <contact@alanpoulain.eu>",
"is_bot": false,
"headline": "feat: support collect denormalization errors (#5170)",
"author_name": "natacha-h",
"author_login": "natacha-h",
"committed_at": "2023-01-13T09:09:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8d241dc07b89e56bacc30b56834b7e12469095b",
"body": null,
"is_bot": false,
"headline": "feat: better separation of entity class and resource (#5275)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-01-12T14:04:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61148214a7bf27ee8d7ef7745e64925dd92ee021",
"body": "\r\nCo-authored-by: soyuka <soyuka@users.noreply.github.com>",
"is_bot": false,
"headline": " feat: spec-compliant PUT method (#4996)",
"author_name": "Kévin Dunglas",
"author_login": "dunglas",
"committed_at": "2023-01-11T17:53:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "743e5d8ed6856c769d1d21645a2da7c0e52bca56",
"body": null,
"is_bot": false,
"headline": "Merge branch 3.0",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-01-11T09:52:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e782180521f9afbdd4dd86c4020c770b0215128a",
"body": null,
"is_bot": false,
"headline": "Merge 2.7 into 3.0",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2023-01-11T09:36:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c4e07ec4b9246c54a8b1500c88b0fdc86c8afc8",
"body": null,
"is_bot": false,
"headline": "fix: attributes parameter order (#5317)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2023-01-11T09:18:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "904d174330f4251c4d1d70b5d2d1419404c07d11",
"body": "… elasticsearch (#5297)\n\nThis commit introduce a new stateOptions property on ApiResource and operations. This perperty will allow to configure elasticsearch, and soon doctrine ORM and ODM.\r\nNow, we can use elasticsearch by providing directly an elasticsearch provider at the operation (Get or GetCollection).\r\nThe old way of using elasticsearch has been deprecated.",
"is_bot": false,
"headline": "refactor(elasticsearch): add stateOptions and change how to configure…",
"author_name": "davy-beauzil",
"author_login": "davy-beauzil",
"committed_at": "2023-01-10T21:04:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b8f6e89de6b808910001394eb278b582d999524",
"body": null,
"is_bot": false,
"headline": "fix: compatibility with PHP 8.2 (#5292)",
"author_name": "Danny v W",
"author_login": "dannyvw",
"committed_at": "2022-12-30T10:16:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b059e945cc6e244a0c7074e997a60bf374e1b981",
"body": null,
"is_bot": false,
"headline": "fix(metadata): fix extra properties method (#5294)",
"author_name": "Danny v W",
"author_login": "dannyvw",
"committed_at": "2022-12-30T10:15:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d215e7aff91f1a4b03478a4afa7e17a3b350c1a9",
"body": "…(#5254)\n\n* feat: add ApiResource::openapi and deprecate openapiContext\r\n\r\n* fix: review\r\n\r\n* fix: deprecations on phpunit tests\r\n\r\n* fix: deprecations\r\n\r\n* chore: revamp OpenApiFactory\r\n\r\n* fix: cs",
"is_bot": false,
"headline": "feat(openapi): add ApiResource::openapi and deprecate openapiContext …",
"author_name": "Vincent",
"author_login": "vincentchalamon",
"committed_at": "2022-12-16T12:36:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "988383eeff40d3da3e006d6e68b126c4ba6cddab",
"body": null,
"is_bot": false,
"headline": "Merge branch 3.0",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-12-16T11:18:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c74d9182a52d378f2787fd504a2a471e940691f8",
"body": "Co-authored-by: Alan Poulain <contact@alanpoulain.eu>",
"is_bot": false,
"headline": "fix(graphql): link relations requires the property (#5169)",
"author_name": "Thomas Helmrich",
"author_login": "develth",
"committed_at": "2022-12-13T15:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32040f6db4eda13a24222c29ecc6794c79205440",
"body": null,
"is_bot": false,
"headline": "fix(graphql): dont add graphql operations when disabled (#5265)",
"author_name": "Danny v W",
"author_login": "dannyvw",
"committed_at": "2022-12-13T06:53:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51cfc499695abf35b3daadb89945c5ed9bc7a684",
"body": "…(#5252)",
"is_bot": false,
"headline": "fix(metadata): include routePrefix in default operation name (#5203) …",
"author_name": "Urban Suppiger",
"author_login": "usu",
"committed_at": "2022-12-07T08:17:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "677c1089e16c61d37770a1ecb421461354bcc562",
"body": null,
"is_bot": false,
"headline": "Merge branch '3.0'",
"author_name": "Alan Poulain",
"author_login": "alanpoulain",
"committed_at": "2022-12-02T14:52:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "901f0087fa8a751cb8eea22e447707d268b05afd",
"body": "…y (#5247)",
"is_bot": false,
"headline": "fix: not initialized params in PhpDocResourceMetadataCollectionFactor…",
"author_name": "Alan Poulain",
"author_login": "alanpoulain",
"committed_at": "2022-12-02T11:00:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d1c3e8962cdb40de3dad826d96a941bb169c0cd",
"body": "* fix(openapi): resource classes are no longer considered as enum\r\n\r\n* feat: make property metadata factories work with enum cases\r\n\r\n* feat: add GraphQL enum support",
"is_bot": false,
"headline": "feat: add GraphQL enum support (#5199)",
"author_name": "Alan Poulain",
"author_login": "alanpoulain",
"committed_at": "2022-11-29T18:00:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2bb0e241c12d07b6d5b57f7bbdbbc540b5049be",
"body": "PHPStan PHPDoc-Parser is used instead of phpDocumentor because the latter\r\nis not actively maintained anymore.",
"is_bot": false,
"headline": "feat: use phpdoc-parser instead of phpdocumentor (#5214)",
"author_name": "Alan Poulain",
"author_login": "alanpoulain",
"committed_at": "2022-11-29T16:17:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2de3719e0fa7eff786658b909d5bdaf9fc37cd1c",
"body": null,
"is_bot": false,
"headline": "fix(metadata): do not override name fixes #5235 (#5237)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-11-28T12:42:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8d0a69fada3788736b24ce162a5e1c7739a9345",
"body": null,
"is_bot": false,
"headline": "Merge branch 2.7 into 3.0",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-11-25T08:11:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50e9c5b3504e42250eb534547e841d27a2e95b8c",
"body": "fixes #5184",
"is_bot": false,
"headline": "fix(metadata): keep configured uri variables (#5217)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-11-24T10:33:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edbb0500c074063c8a6d7f54e1da26a6b1cfc2a1",
"body": "fixes #5204",
"is_bot": false,
"headline": "fix(metadata): getOperation cache matches arguments (#5215)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-11-23T09:30:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd79fc8d0afac085b165290463cce84b52846c29",
"body": null,
"is_bot": false,
"headline": "fix(metadata): route prefix in the operation name (#5208)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-11-23T08:29:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b70feea535d7108e08c3d6c07bd5ba54bcaf8826",
"body": null,
"is_bot": false,
"headline": "chore: merge #5194 trait",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-11-21T11:16:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8088f0c71a420343a723fdbdb4cfce0651eca0b8",
"body": null,
"is_bot": false,
"headline": "chore: wrong merge",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-11-21T10:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ea87d4647667172ecedaf9c77c8d80c1212e9d5",
"body": null,
"is_bot": false,
"headline": "Merge branch 2.7 into 3.0",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-11-21T10:14:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1e943b74475a350059209a3ef080b50fd4d2122",
"body": null,
"is_bot": false,
"headline": "fix(metadata): operations must inherit from resource and defaults",
"author_name": "Vincent Chalamon",
"author_login": "vincentchalamon",
"committed_at": "2022-11-17T08:34:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dd381efbd48f19cca243dff286c2d6ffa9c6312",
"body": null,
"is_bot": false,
"headline": "Merge branch 2.7 into 3.0",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-11-15T14:26:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "396cdcd85b25d32f92316ace10be0ab0e3187f2a",
"body": "* fix(metadata): _format broken bc promise on #5080\r\n\r\n* add deprecation contracts\r\n\r\n* fix phpstan",
"is_bot": false,
"headline": " fix(metadata): _format broken bc promise on #5080 (#5187)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-11-15T14:07:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3657050ed3325d862a94024e464f61c272e46aa",
"body": "* fix(metadata): item uri template with another resource",
"is_bot": false,
"headline": "fix(metadata): item uri template with another resource (#5176)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-11-15T14:04:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6ab427cc8e948c1f7dcab27bdfd3b3a6447266c",
"body": "…yaml config (#5186)\n\nCo-authored-by: Phillip Look <phillip.look@brainbits.net>",
"is_bot": false,
"headline": "fix(metadata): allow input/output configuration values to be bool in …",
"author_name": "Phillip Look",
"author_login": "pl-github",
"committed_at": "2022-11-14T17:23:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e77cfaeb2179b99ed861d794c83d7aed697eee53",
"body": "* fix(serializer): empty object as array with supports cache\r\n\r\nreverts #4999\r\n\r\n* fix issue when empty operation\r\n\r\n* revert 08450c2684f82fa83c3d099de74ff225e82c1d3e\r\n\r\n* review",
"is_bot": false,
"headline": "fix(serializer): empty object as array with supports cache (#5100)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-11-12T08:53:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26599070f5003a390cb3e7ac16545c281375ce6f",
"body": "…5175)\n\nCo-authored-by: Antoine Bluchet <soyuka@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(metadata): use a custom Attribute extends ApiResource (#5076) (#…",
"author_name": "Yoann Brieux",
"author_login": "yobrx",
"committed_at": "2022-11-10T19:11:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3d8e4ff8a16d786c537c52dd5c348f092f703c6",
"body": "Instead of relying on a resource metadata factory to retrieve a \"dynamic\" nested query operation, this PR adds default nested query operations if the resource does not have one.\r\nIt simplifies a lot of things and catching the OperationNotFound exception is not needed anymore.\r\nSince operations are \"nested\", they do not appear as top-level queries.\r\nThis PR also improves the XML/YAML compatibility.",
"is_bot": false,
"headline": "fix(graphql): use default nested query operations (#5174)",
"author_name": "Alan Poulain",
"author_login": "alanpoulain",
"committed_at": "2022-11-10T19:01:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d77dc28f003e154289384dea9babc495bf7f922",
"body": null,
"is_bot": false,
"headline": "Merge branch 2.7 into 3.0",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-11-04T17:47:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71306b759e327f2a9b1f0036d7b6095b84aec2d9",
"body": "* chore: php-cs-fixer update\r\n\r\n* chore: php-cs-fixer update",
"is_bot": false,
"headline": "chore: php-cs-fixer update (#5118)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-11-04T17:31:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2bad2a7da6a410f60525a47c6679de105266865",
"body": null,
"is_bot": false,
"headline": "chore: php-cs-fixer update",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-11-04T17:01:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b59ba40ac2194b7c2863200cdc3bb0f3cba99052",
"body": "* fix(graphql): always allow to query nested resources\r\n\r\n* review\r\n\r\nCo-authored-by: Alan Poulain <contact@alanpoulain.eu>",
"is_bot": false,
"headline": "fix(graphql): always allow to query nested resources (#5112)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-11-04T15:58:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99386fc6d8e698c55492e8d8f597e95360782481",
"body": "This reverts commit 44337ddb3908d7b05ed75b75325b7941581f575b.",
"is_bot": false,
"headline": "Revert \"fix(graphql): use right nested operation (#5102)\" (#5111)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-11-04T07:54:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19b98e1d3d264692566ced499f5e6451fe491e41",
"body": null,
"is_bot": false,
"headline": "fix(graphql): use right nested operation (#5102)",
"author_name": "Alan Poulain",
"author_login": "alanpoulain",
"committed_at": "2022-11-02T09:28:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25dd717a6a2e790ff96606d8ac736224d5fc32bc",
"body": "fixes #5082",
"is_bot": false,
"headline": "fix(metadata): define a name on a single operation (#5090)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-10-25T07:32:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d52d56ae738044d123b27c55eed3732690c966a1",
"body": "See #5084",
"is_bot": false,
"headline": "fix: remove @internal annotation for Operations (#5089)",
"author_name": "Xavier Laviron",
"author_login": "norival",
"committed_at": "2022-10-24T15:39:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea39dd28ae153a9d6c5320ebf194aede9392c778",
"body": null,
"is_bot": false,
"headline": "fix: uri template should respect rfc 6570 (#5080)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-10-24T14:11:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06c6e7efc010f4ae29d9e7690d885ad67fd5f861",
"body": null,
"is_bot": false,
"headline": "chore: remove wrong deprecation phpdoc",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-10-07T11:11:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fb70152bf5f09083ab1c5cb7d031537a32266c0",
"body": "This reverts commit 87eae4829d576569e2c86bfdb5e5de0c4ca8d17c.",
"is_bot": false,
"headline": "fix(metadata): revert #5053",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-10-07T11:10:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2012c1fa02eb14652899c136fee82bd4280a29d3",
"body": null,
"is_bot": false,
"headline": "Merge branch 2.7 into 3.0",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-10-07T09:35:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dee0b318a56506f14c62edfc8b3cf6e8e792c61",
"body": "* fix(metadata): no skolem iri by default\r\n\r\n* temp\r\n\r\n* genid",
"is_bot": false,
"headline": "fix(metadata): no skolem iri by default (#5046)",
"author_name": "Antoine Bluchet",
"author_login": "soyuka",
"committed_at": "2022-10-07T08:55:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09d46994a262a19ffce41880abb81e92af5a3bb6",
"body": "…onFactory (#5053)",
"is_bot": false,
"headline": "fix(metadata): remove deprecated AlternateUriResourceMetadataCollecti…",
"author_name": "Danny v W",
"author_login": "dannyvw",
"committed_at": "2022-10-06T06:38:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bba5f43dc9779c42c9f21f467b9612302529a03",
"body": null,
"is_bot": false,
"headline": "Merge 2.7 into 3.0",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-09-29T14:02:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "972dc32513f207148fa3414de2577c146618c964",
"body": null,
"is_bot": false,
"headline": "chore: changelog & doctrine annotation issue",
"author_name": "soyuka",
"author_login": "soyuka",
"committed_at": "2022-09-29T13:55:21Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 0,
"latest_release_at": "2026-07-12T08:10:11Z",
"latest_release_tag": "v5.0.0-alpha.2",
"releases_from_tags": true,
"days_since_last_push": 23,
"active_weeks_last_year": 0,
"days_since_latest_release": 23,
"mean_days_between_releases": 3.2
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "api-platform/metadata",
"path": "composer.json",
"tokens": [
"composer.type:library"
],
"ecosystem": "packagist"
}
]
},
"community": {
"has_readme": false,
"has_license": true,
"readme_badges": {
"hosts": [],
"total": 0,
"header": 0,
"collected": false,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": false,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "api-platform/metadata",
"exists": true,
"license": "MIT",
"keywords": [
"rest",
"api",
"JSON-LD",
"hal",
"swagger",
"Hydra",
"openapi",
"jsonapi",
"graphql"
],
"ecosystem": "packagist",
"categories": [],
"matches_repo": true,
"registry_url": "https://packagist.org/packages/api-platform/metadata",
"declared_type": "library",
"is_deprecated": false,
"latest_version": "v5.0.0-alpha.2",
"repository_url": "https://github.com/api-platform/metadata",
"versions_count": 193,
"total_downloads": 5594304,
"dependents_count": 56,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 515814,
"first_published_at": null,
"latest_published_at": "2026-07-12T08:10:11Z",
"latest_version_yanked": null,
"days_since_latest_publish": 23
}
]
},
"popularity": {
"forks": 1,
"stars": 29,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-02-19",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"Tests/Extractor/yaml/openapi.yaml"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 57521,
"source_files_sampled": 156,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 15,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "doctrine/inflector",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^2.0"
},
{
"name": "psr/cache",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^3.0"
},
{
"name": "psr/log",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^1.0 || ^2.0 || ^3.0"
},
{
"name": "symfony/property-info",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^6.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "doctrine/inflector",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "psr/cache",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "psr/log",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/property-info",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "api-platform/json-schema",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "api-platform/openapi",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "api-platform/state",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpspec/prophecy-phpunit",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "phpstan/phpdoc-parser",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "sebastian/comparator",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/config",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/phpunit-bridge",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/routing",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "symfony/yaml",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 15,
"direct_count": 4,
"indirect_count": 11
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "soyuka",
"commits": 139,
"avatar_url": "https://avatars.githubusercontent.com/u/1321971?v=4"
},
{
"type": "User",
"login": "dunglas",
"commits": 81,
"avatar_url": "https://avatars.githubusercontent.com/u/57224?v=4"
},
{
"type": "User",
"login": "teohhanhui",
"commits": 27,
"avatar_url": "https://avatars.githubusercontent.com/u/548843?v=4"
},
{
"type": "User",
"login": "vincentchalamon",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/407859?v=4"
},
{
"type": "User",
"login": "alanpoulain",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/10920253?v=4"
},
{
"type": "User",
"login": "meyerbaptiste",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/4034907?v=4"
},
{
"type": "User",
"login": "dannyvw",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/1218389?v=4"
},
{
"type": "User",
"login": "Nightbr",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/4228646?v=4"
},
{
"type": "User",
"login": "antograssiot",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/4977112?v=4"
},
{
"type": "User",
"login": "Nek-",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/972456?v=4"
}
],
"contributors_sampled": 55,
"top_contributor_share": 0.371
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 13 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 9,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "2f1d42df27f97a5ab8297f88d0a7cbd827b6e0e8",
"ran_at": "2026-08-04T16:29:07Z",
"aggregate_score": 3.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 0,
"decided_7d": 0,
"merged_30d": 0,
"authors_30d": 0,
"decided_30d": 0,
"sample_size": 0,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 0,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": null,
"oldest_open_prs": [
{
"number": 1,
"created_at": "2026-02-19T13:56:09Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/api-platform/metadata",
"host": "github.com",
"name": "metadata",
"owner": "api-platform"
},
"metrics": {
"overall": {
"key": "overall",
"band": "weak",
"name": "Overall health",
"note": "The weighted overall 46 is calibrated to 44 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 46,
"calibrated": 44,
"calibration": "2026-08-02"
}
}
],
"value": 44,
"inputs": {
"security": 36,
"vitality": 53,
"community": 48,
"governance": 57,
"calibration": "2026-08-02",
"engineering": 32,
"ai_readiness": 36,
"weighted_overall_raw": 46
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 53,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 1,
"days_since_last_push": 23,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 23 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 23
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v5.0.0-alpha.2",
"releases_from_tags": true,
"days_since_latest_release": 23,
"mean_days_between_releases": 3.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 23 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 23
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "dormant",
"guards": [
"recent_release"
],
"signals": [
"scorecard_unmaintained"
],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 843,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 843 days, with nothing left unanswered; held at dormant by a release within the year",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_quiet",
"params": {
"days": 843
}
},
{
"code": "abandonment_guarded",
"params": {
"guards": "a release within the year"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 48,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"forks": 1,
"stars": 29,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "29 stars",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 29
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "weak",
"name": "Community health",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"has_readme": false,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 88,
"inputs": {
"packages": [
"api-platform/metadata"
],
"dependents": 56,
"ecosystems": "packagist",
"total_downloads": 5594304,
"monthly_downloads": 515814
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "515,814 downloads/month across packagist",
"points": 76.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 515814,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "56 packages depend on it",
"points": 11.7,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 56
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 55,
"top_contributor_share": 0.371
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 37% of commits",
"points": 14.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 37
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "55 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 55
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 13 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance, Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance",
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"prs_merged_7d": 0,
"prs_decided_7d": 0,
"prs_merged_30d": 0,
"prs_decided_30d": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"followers": 407,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "api-platform",
"public_repos": 49,
"account_age_days": 4033
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "407 followers of api-platform",
"points": 18.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 407,
"login": "api-platform"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "49 public repos, account ~11 yr old",
"points": 24.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 49
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"api-platform/metadata"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 23
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 23 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 23
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "193 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 193
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 32,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 30,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "weak",
"name": "Documentation",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"topics": [
"api",
"api-platform",
"graphql",
"metadata",
"php",
"rest"
],
"has_wiki": false,
"homepage": "https://api-platform.com/docs/core/",
"has_readme": false,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://api-platform.com/docs/core/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 36,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 3.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 13 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 23
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 36,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.85,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "85 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 85,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 24,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 57521,
"source_files_sampled": 156,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/156 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 156,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"Tests/Extractor/yaml/openapi.yaml"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "Tests/Extractor/yaml/openapi.yaml",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Tests/Extractor/yaml/openapi.yaml"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 22,
"network-service": 3
},
"primary": "library",
"evidence": [
{
"tier": "declared",
"label": "library",
"source": "composer.type:library",
"weight": 10
},
{
"tier": "distribution",
"label": "library",
"source": "registry:packagist",
"weight": 6
},
{
"tier": "distribution",
"label": "library",
"source": "registry_type:library",
"weight": 6
},
{
"tier": "structure",
"label": "network-service",
"source": "api_schema",
"weight": 3
}
],
"artifacts": [
{
"path": "composer.json",
"labels": [
"library"
],
"ecosystem": "packagist"
}
],
"confidence": "high",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-08-04T16:29:23.837404Z",
"schema_version": "0.30.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/api-platform/metadata.svg",
"full_name": "api-platform/metadata",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.30.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Packagist.