Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-25 09:59 UTC
bcgit / bc-java
Bouncy Castle Java Distribution (Mirror)
bcgit/bc-java holds a health index of 66 out of 100, placing it in the Moderate band. It scores highest on Community & Adoption (82/100) and lowest on Sustainability & Governance (52/100). It was last updated today. A single contributor accounts for most of its recent work.
66
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
66
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Legion of the Bouncy Castle IncOrganization
296 followers9 public repossince May 2013
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
60
Development activity
100Excellent
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 36/36 | Commit cadence — 52/52 weeks with commits |
| 18/18 | Commit volume — 1,693 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 1,693 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 52 |
Release discipline
1Critical
How it's scored
| 0/27 | Ships releases — no releases published |
| 0/36 | Release recency — no releases |
| 0/27 | Release cadence — no releases |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
82
Popularity & adoption
92Excellent
How it's scored
| 55.6/60 | Stars — 2,670 stars |
| 25/25 | Forks — 1,264 forks |
| 11.8/15 | Watchers — 135 watchers |
Inputs used
| forks | 1,264 |
| stars | 2,670 |
| watchers | 135 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
70Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
52
Maintainer resilience (bus factor)
42At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 9.7/22.5 | Commit distribution — top contributor authored 57% of commits |
| 13.5/13.5 | Contributor breadth — 100 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 34 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 100 |
| top_contributor_share | 0.568 |
Issue & PR responsiveness
48At risk
How it's scored
| 44.9/46.8 | Issue resolution — 96% of issues closed |
| 2.9/38.3 | PR acceptance — 43/561 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 43 |
| open_issues | 64 |
| closed_issues | 1,548 |
| issue_closed_ratio | 0.96 |
| closed_unmerged_prs | 518 |
Ownership & stewardship
67Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 17.8/25 | Owner reach — 296 followers of bcgit |
| 19.3/25 | Track record — 9 public repos, account ~13 yr old |
Inputs used
| followers | 296 |
| owner_type | Organization |
| is_verified | — |
| owner_login | bcgit |
| public_repos | 9 |
| account_age_days | 4,804 |
Engineering Quality
Are baseline engineering and documentation practices in place?
76
Engineering practices
60Moderate
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
100Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://www.bouncycastle.org/download/bouncy-castle-java/ |
| 10/10 | Repository description |
| 10/10 | Topics — 6 topics |
| 10/10 | Wiki |
Inputs used
| topics | crypto, java, openpgp, dtls, post-quantum-cryptography, tls |
| has_wiki | yes |
| homepage | https://www.bouncycastle.org/download/bouncy-castle-java/ |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
63
Security posture
63Moderate
How it's scored
| 0/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — no data |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 34 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool detected: CodeQL |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 14 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 4 |
| scorecard_aggregate | 6.3 |
Excluded from scoring (no data or not applicable): branch_protection, ci_tests, packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
70
Agent context & guidance
70Good
How it's scored
| 45/45 | Agent instructions — CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 25.1/40 | Legible commit history — 47 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.47 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 1,407 |
Verify loop (build / test / typecheck)
56Moderate
How it's scored
| 12.6/18 | One-command bootstrap — bom/build.gradle, build.gradle, core/build.gradle (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Java (statically typed) |
| 10/10 | Reproducible environment — Dockerfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | bom/build.gradle, build.gradle, core/build.gradle, jmail/build.gradle, mail/build.gradle, misc/build.gradle, mls/build.gradle, pg/build.gradle, pkix/build.gradle, prov/build.gradle, test/build.gradle, tls/build.gradle, util/build.gradle |
| dependency_bot_commit_share | 0 |
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — Java (statically typed) |
| 54.3/55 | Manageable file sizes — 101/7,893 source files over 60KB |
Inputs used
| primary_language | Java |
| largest_source_bytes | 1,866,290 |
| source_files_sampled | 7,893 |
| oversized_source_files | 101 |
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — mls/src/main/proto/mls_client.proto |
| 0/20 | MCP server |
| 40/40 | Runnable examples — example, examples |
Inputs used
| example_dirs | example, examples |
| has_mcp_signal | no |
| api_schema_files | mls/src/main/proto/mls_client.proto |
Key facts
2,670GitHub stars
100contributors
1,693commits, last 12 months
0days since last push
0releases
1bus factor
64open issues
Mavenpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 1,264 ⇿
0Stars
1,264Forks
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Only the most recent history is shown — this repository exceeds the collection window, so the earliest history is not captured.
Each point covers 11 days.
OpenSSF Scorecard 6.3 / 10
6.3aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 0 | Binary-Artifacts | binaries present in source code |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 34 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool detected: CodeQL |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
All dependencies 0
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"crypto",
"java",
"openpgp",
"dtls",
"post-quantum-cryptography",
"tls"
],
"is_fork": false,
"size_kb": 662118,
"has_wiki": true,
"homepage": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"languages": {
"HTML": 88615,
"Java": 58921612,
"Shell": 161034,
"Batchfile": 12956,
"Dockerfile": 1544
},
"pushed_at": "2026-07-25T01:10:51Z",
"created_at": "2013-06-01T02:38:42Z",
"owner_type": "Organization",
"updated_at": "2026-07-25T01:11:02Z",
"description": "Bouncy Castle Java Distribution (Mirror)",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Java",
"significant_languages": [
"Java"
]
},
"owner": {
"blog": "https://www.bouncycastle.org",
"name": "Legion of the Bouncy Castle Inc",
"type": "Organization",
"login": "bcgit",
"company": null,
"location": "Melbourne, Australia",
"followers": 296,
"avatar_url": "https://avatars.githubusercontent.com/u/4566970?v=4",
"created_at": "2013-05-30T05:06:58Z",
"is_verified": null,
"public_repos": 9,
"account_age_days": 4804
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "fdc5011e1d54cb5f9687ceda5dbeefea13528bdb",
"body": "SM9: reject non-positive key lengths in SM9KEMGenerator / SM9KEMExtractor -...\n\nSee merge request root/bc-java!281",
"is_bot": false,
"headline": "Merge branch 'sm9-kem-keylen' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T11:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d40a00b3effd9a7483f6242d4ee7c2b2e10f6fc2",
"body": "…ctor -...",
"is_bot": false,
"headline": "SM9: reject non-positive key lengths in SM9KEMGenerator / SM9KEMExtra…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T11:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe1167ff2e82e5661df20d3c8447955c048921cc",
"body": "SM9: add the identity-based digital signature algorithm (Signature.SM3withSM9, GM/T 0044.2)\n\nSee merge request root/bc-java!280",
"is_bot": false,
"headline": "Merge branch 'sm9-sign' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T10:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "014486a5428ef1e80958da5f4260a9b0167a91b9",
"body": "…3withSM9, GM/T 0044.2)",
"is_bot": false,
"headline": "SM9: add the identity-based digital signature algorithm (Signature.SM…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-24T10:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6d7ec272b6bca4a13fc5026cc7e93f1ed3b68e8",
"body": "…SSParameterSpec) when an alternate provider such as SunMSCAPI registers no digest-specific PSS algorithm, fixing RSA-PSS CertificateVerify with Windows smart-card (Windows-MY/CPrivateKey) client keys under TLS 1.2 and 1.3",
"is_bot": false,
"headline": "TLS: fall back to the generic RSASSA-PSS signature name (digest via P…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-24T03:42:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d10b2f6ae9817f4ddcc392a5240da59a76b2142c",
"body": "…it/processBlock, ParametersWithRandom), fixed the non-terminating retry loop when stream-mode encrypting an empty message, and classified Cipher.SM9 as pke in generateCbom.",
"is_bot": false,
"headline": "Reshaped SM9Engine to the SM2Engine API pattern (Mode constructor, in…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-24T02:49:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba1943558d6322e8d25e873b333c4eae6b725507",
"body": "…key + SM9ParameterSpec - Cipher.SM9 in ENCRYPT_MODE now takes the key from SM9EncMasterPublicKey.getUserPublicKey(id), the same recipient key the SM9-KEM encapsulates to, and SM9ParameterSpec is removed; an AlgorithmParameterSpec or a master public key at encrypt init is rejected with a pointer to getUserPublicKey",
"is_bot": false,
"headline": "SM9: encrypt to the recipient's public key rather than master public …",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T01:38:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eeb3c6c66136201c61aaf733f6cf3ca7a0c8b440",
"body": "Adds the SM9 public-key encryption algorithm on top of the merged KEM, reusing its\nencryption master/user key infrastructure: SM9Engine (org.bouncycastle.crypto.engines)\nand the GM/T 0080-2020 SM9Cipher ASN.1 structure, exposed as Cipher.SM9 through the\nprovider. A sender encrypts to a recipient's i\n[…]\nm cipher; the ciphertext is\nself-describing, so one Cipher.SM9 decrypts either mode. Verified against the official\nGM/T 0044.5-2016 Annex D worked example. Includes SM9CipherExample and SM9CipherTest.",
"is_bot": false,
"headline": "SM9: add identity-based public-key encryption (Cipher.SM9, GM/T 0044.4)",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T01:02:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c40059a6a23e97c728c01867816a2a6fe6b1505",
"body": "…9-KEM, following the ML-KEM KEMSpi pattern (jdk17 overlay, SpiUtil.hasKEM() gated). By default (null spec or withNoKdf) the shared secret is the mechanism's own GM/T 0044.4 KDF output at the requested size - the interoperable form; a KTSParameterSpec KDF can optionally be layered on top for generic use, taking a 256-bit GM/T 0044.4 shared secret as input",
"is_bot": false,
"headline": "SM9: expose the KEM through the JDK 21 javax.crypto.KEM API as KEM.SM…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T00:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee551da960bb6d097184276b2bba154ba8278b7e",
"body": "…roy() drops the master secret ke / the user key point de and zeroizes the carried identity, isDestroyed() reflects the state, and the secret-bearing operations (getEncoded, generateUserKeyPair, decapsulation) throw IllegalStateException afterwards; a destroyed master key no longer serializes, and the published master public key is unaffected",
"is_bot": false,
"headline": "SM9: implement the Destroyable pattern on the SM9 private keys - dest…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-24T00:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "080adad68e424561a5cc435cecbb9d3c8b3a297f",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:59:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5b049888e9f06862fdd9bc2f4f0a49dac4b64f4",
"body": "…inventory.",
"is_bot": false,
"headline": "Classify the SM9-ENC master keypair asset as kem in the generateCbom …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:59:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cd9a3e93d4274b246d10b93656ba8469e098e3d",
"body": "… SM9 user key derivation, replacing the SM9UserKeyParameterSpec KeyPairGenerator path, and minimised visibility in the sm9 provider package.",
"is_bot": false,
"headline": "Added SM9EncMasterPrivateKey and SM9EncMasterPublicKey interfaces for…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:59:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71b8e3657adce9828102d33772f290bfc60a1004",
"body": "…L<<(chunkSize+6) buffer: chunkSize 24 → 1 GiB alloc (memory-DoS), 25 → NegativeArraySizeException. Concrete sibling asymmetry: v5 AEADEncDataPacket:51 has if (chunkSize > 16) throw (CVE-2026-3505) but v6 SymmetricEncIntegrityPacket:54 reads chunkSize=in.read() with no bound — the missed sibling. Attacker needs only the recipient's public key.\"\n\nThis reverts commit 1299519c70c21b4b56296762295528124f5825a7.",
"is_bot": false,
"headline": "Revert \"OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T23:51:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1299519c70c21b4b56296762295528124f5825a7",
"body": "…kSize+6) buffer: chunkSize 24 → 1 GiB alloc (memory-DoS), 25 → NegativeArraySizeException. Concrete sibling asymmetry: v5 AEADEncDataPacket:51 has if (chunkSize > 16) throw (CVE-2026-3505) but v6 SymmetricEncIntegrityPacket:54 reads chunkSize=in.read() with no bound — the missed sibling. Attacker needs only the recipient's public key.",
"is_bot": false,
"headline": "OpenPGP v6 SEIPDv2 AEAD chunkSize is unbounded on decrypt → 1L<<(chun…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T23:38:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c36de642b1d88011d540ac4567bf2723f5d0cea",
"body": "# Conflicts:\n#\tdocs/releasenotes.html",
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:05:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2969846ae7241c5402ba1ce4fe5eeca67ac4202",
"body": null,
"is_bot": false,
"headline": "Merge branch 'cbom-lightweight-api'",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T23:01:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9c0d2929a6c58ec9f080609670eb6e6da25701a",
"body": "…ed algorithms (Elephant, ISAP, Photon-Beetle, Romulus, Schwaemm, cSHAKE, SHA-512/t - one asset per named variant), distinguishing generic constructions by primitive-taking constructors instead of missing no-arg constructors, and moved the lightweight-sweep release note from the shipped 1.85 block to 1.86.",
"is_bot": false,
"headline": "Extended the generateCbom lightweight sweep to standalone parameteris…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T22:58:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "999c4e7bca7b7b3b25b7a6e6fc9bb9d897b3b1f0",
"body": "SM9-KEM: add the SM9 identity-based key encapsulation mechanism (GM/T 0044.4)\n\nSee merge request root/bc-java!273",
"is_bot": false,
"headline": "Merge branch 'sm9-kem' into 'main'",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-23T22:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f42c92c61c588ef15378f2c4c32fbf6ce53333a",
"body": "… 0044.4)",
"is_bot": false,
"headline": "SM9-KEM: add the SM9 identity-based key encapsulation mechanism (GM/T…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T22:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf32e2f1143ab7b5d70358d92ccc9078ee67c23e",
"body": "…ates to github #2372",
"is_bot": false,
"headline": "Fall back to CRL checking when the OCSP responder is unreachable, rel…",
"author_name": "royb",
"author_login": null,
"committed_at": "2026-07-23T17:59:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f34c210b7669dc815a56240851bdc856eb15e4d",
"body": "…castle.crypto.*) for algorithms with no JCA registration, tagging every CBOM asset with a bc:api property and lightweight assets with their defining classes.",
"is_bot": false,
"headline": "Extended generateCbom to sweep the public lightweight API (org.bouncy…",
"author_name": "mwcw",
"author_login": "mwcw",
"committed_at": "2026-07-23T10:52:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e5c0c5f21c789ed7659a11a1ec20a0fd5d31114",
"body": "… increments that carry across 0xFF IV bytes, and skip() for backward moves smaller than the current intra-block offset.",
"is_bot": false,
"headline": "Corrected SICBlockCipher.getPosition() borrow propagation for counter…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T10:25:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91a78e831dd0960fd59991e8d6d00148a0f6c0eb",
"body": "Cap the PBMAC1 PBKDF2 iteration count in JcePBMac1CalculatorBuilder (pre-auth CPU DoS)\n\nSee merge request root/bc-java!268",
"is_bot": false,
"headline": "Merge branch 'pkcs-pbmac1-iteration-cap' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T10:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ab15c2b41fdb46cfd085eae400cc3ffbb915aad",
"body": "…pre-auth CPU DoS)",
"is_bot": false,
"headline": "Cap the PBMAC1 PBKDF2 iteration count in JcePBMac1CalculatorBuilder (…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T10:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c3972f46d4e712e62ab1af9084807e9a297be7f",
"body": "…onstants instead of ML-DSA's",
"is_bot": false,
"headline": "Corrected BCMLKEMPrivateKey to use MLKEMPrivateKeyParameters format c…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-23T03:49:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b743b8955a694425a0a2b457c8a40f78049d7c9",
"body": "Corrected an always-false OID comparison so JceKeyTransRecipient key-size...\n\nSee merge request root/bc-java!275",
"is_bot": false,
"headline": "Merge branch 'cms-cek-hkdf-keysize-validation' into 'main'",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T02:57:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44bfa07302475214db483f0a7dcf148e78cd69f7",
"body": "…size...",
"is_bot": false,
"headline": "Corrected an always-false OID comparison so JceKeyTransRecipient key-…",
"author_name": "Gefei Li",
"author_login": "ligefeiBouncycastle",
"committed_at": "2026-07-23T02:57:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfd38945748b716c734a3da1d2c6fc804e8361d3",
"body": null,
"is_bot": false,
"headline": "Refactoring in bcpg",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T07:00:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72789cd894f8b2b0f1e71036c2c15d0140138971",
"body": null,
"is_bot": false,
"headline": "Explicit string conversion instead of MemoryStream.toString",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:58:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0732e80416e6a8bc613fe567916facc01851954d",
"body": null,
"is_bot": false,
"headline": "Delete unused method",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:56:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20ea13123f169ccc4732726921a2859393e15ef5",
"body": null,
"is_bot": false,
"headline": "Reference property name constant",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:55:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2121327d66720560bdf8dcbdf39e603cfa1c98f2",
"body": null,
"is_bot": false,
"headline": "Rewrite SignatureCheck parsing constructor",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:52:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c20b0cc53f37c19466e3d36caf1e99fa388c4559",
"body": null,
"is_bot": false,
"headline": "Fix hasRevocation for enc alg primary",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T06:38:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2bfbf733e1c3bda33b06d9cdcc9da45774b8955",
"body": null,
"is_bot": false,
"headline": "pg: javadoc fixes and test cleanup",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T05:05:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "119b1b36e924c0c29d4c3e7fd173b9619dd9b4c3",
"body": null,
"is_bot": false,
"headline": "Give BlockPool imlpementations access to Block.clear()",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-22T04:29:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d471c20c2059c6199fb2373c6704ff3ce87836a",
"body": "…alueExact is missing on Android below API 33, relates to github #2369.",
"is_bot": false,
"headline": "Open-code BigIntegers value-exact range checks again, BigInteger.intV…",
"author_name": "royb",
"author_login": null,
"committed_at": "2026-07-21T19:02:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5123fbbe8fe30cffe4d27afa0d34dc5d285d3e89",
"body": "…module",
"is_bot": false,
"headline": "updated the javadoc for the mozilla and tsp packages within the pkix …",
"author_name": "oreste",
"author_login": null,
"committed_at": "2026-07-21T11:08:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bac2ac4df7f2d7562e6c38164b84feb121583818",
"body": null,
"is_bot": false,
"headline": "Javadoc",
"author_name": "Peter Dettman",
"author_login": "peterdettman",
"committed_at": "2026-07-21T10:42:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bd6a1d9d5a7b1581241ed7ea7cf438dd04547d0",
"body": "…ys so destroy() zeroizes key material, relates to github #2366.",
"is_bot": false,
"headline": "Support Destroyable on ML-DSA/ML-KEM/SLH-DSA/FrodoKEM/CMCE private ke…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-21T09:59:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c47e8a83a74cfd42014499e8f9f3c590ec3ac3e7",
"body": "…n v3/checkout v4, use build-mode none (Gradle needs JDK 25 so autobuild cannot compile)",
"is_bot": false,
"headline": "Fix CodeQL workflow: trigger on main not master, bump to codeql-actio…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T09:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "575a62316ca237201a6d134b0f72421c0d6b13cc",
"body": null,
"is_bot": false,
"headline": "added doc on 1.85.1",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T07:40:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52407d891f3dce8c4d8d8999bfb355973cae54ae",
"body": "…complete encoding and nothing extra; add byte[]/InputStream constructors to CMSEncryptedData",
"is_bot": false,
"headline": "Document CMS container constructors, noting byte[] input must be the …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T07:37:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b424634d27905ada44b859acae8a96dc7d6fca8",
"body": null,
"is_bot": false,
"headline": "fixed JavaDoc",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T07:30:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d4fe40ac77b297db7f4cc59f84604aacb1fd2de",
"body": "…ing the full draft-ietf-lamps-cms-composite-kem wrap/KDF/KEM mapping",
"is_bot": false,
"headline": "Assert the AES-256-KW wrap OID in the Composite ML-KEM CMS test, pinn…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T06:20:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dd651e37af09f33862d5c5bbc37640a99425d9f",
"body": "…th CMS AuthEnvelopedData AEAD content, with ML-KEM/FrodoKEM/Composite round-trip tests",
"is_bot": false,
"headline": "Add JceKEMAuthEnvelopedRecipient so KEM (RFC 9629) recipients work wi…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T06:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8831e2b1e98fc38d750bba6d2268af04130a7d0c",
"body": "…ng NoSuchAlgorithmException throws through it so the cause is chained (and stays Java 4 safe), across the KEM CipherSpis, X509CRL/Certificate, BCFKS and JcaPKCS10CertificationRequest",
"is_bot": false,
"headline": "Add SecurityExceptions.noSuchAlgorithmException and route cause-foldi…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:47:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b0e00d4ab23e7082b6226c1bff569bb79c2872f",
"body": "…rough SecurityExceptions.illegalBlockSizeException so the cause is chained, matching the sibling KEM CipherSpis",
"is_bot": false,
"headline": "Route the RSA-KEM CipherSpi wrap-failure IllegalBlockSizeException th…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:37:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "657daa1ad47780f5fe8200d3ed8c65f6f029cc69",
"body": "…ssage through SecurityExceptions.invalidKeyException so the cause is chained (and stays Java 4 safe), across the KEM CipherSpis and the RSA/ElGamal/Falcon/Dilithium/composite paths",
"is_bot": false,
"headline": "Route InvalidKeyException throws that fold in a caught exception's me…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:36:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eac0b55fdb3673adace418013cdfd34547c89bf2",
"body": "…n CMS EnvelopedData, add the twelve composite encapsulation lengths, with a round-trip test over all parameter sets",
"is_bot": false,
"headline": "Register a Composite ML-KEM KEM Cipher so composite recipients work i…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-19T04:36:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dfefa653f349a60d4b93c1970e83987d0df0216",
"body": "…ntInfo generate side, binding the ukm field into the KDF otherInfo, with round-trip and tamper tests",
"is_bot": false,
"headline": "Add user keying material (UKM) support to the CMS RFC 9629 KEMRecipie…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-18T11:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b2a164e6dfe6cb49e87c981d17c7baf8ba3f681",
"body": "…tering its encapsulation lengths, with a round-trip test covering the AES-Wrap-192/256 mappings from draft-chen-lamps-cms-frodokem",
"is_bot": false,
"headline": "Enable FrodoKEM as a CMS RFC 9629 KEMRecipientInfo recipient by regis…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-18T10:34:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "606a9590f269b70b544de7a1f182610cc1cf5066",
"body": "… and register it in the cert test AllTests suite",
"is_bot": false,
"headline": "Add PQCCertTest exercising ML-KEM and FrodoKEM certificate generation…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-18T10:20:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfbf497c0b3c9d3b6a6104ce01b3d843e6471ce3",
"body": null,
"is_bot": false,
"headline": "minor cleanup.",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T03:52:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaeab5dda3bd0e1c8d421e67c1a6c09640416898",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T03:39:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3001351723cddb06c5dc429f8efc06f42c24090a",
"body": null,
"is_bot": false,
"headline": "fixed typo in CVE number",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T03:39:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9762d373b800d3a5a7cc15f1c1284d22c973651",
"body": "…ith destroy() throws DestroyFailedException resolved via the jce/src backport on the build-lw classpath, plus jdk14-parity cades excludes and jce/lcrypto test-contamination excludes",
"is_bot": false,
"headline": "Advance the jdk1.3 full build: re-introduce SecretWithEncapsulation w…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-17T02:23:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff7b7610a748b4bffc078c58e859626829921f9a",
"body": "…ed NPE/AIOOBE\n\nConsolidates the empty/missing-content parser-robustness fixes into one review unit.\nEach entry point converts an unchecked runtime exception (NullPointerException,\nArrayIndexOutOfBoundsException, IllegalStateException or ArithmeticException) that\nescaped on empty / content-less / tr\n[…]\nwith no nonce extension)\n\nAudit findings F16, F23, F24, F26, F28, F29, F30, F32, F52 plus the\nparse-empty-input-null-guards, tsp-empty-stream-parse-guard and\ncrl-reasoncode-crlreasons-aioobe branches.",
"is_bot": false,
"headline": "Guard empty/missing-content and out-of-range parse paths against leak…",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-17T02:12:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "924fd937df02bc0ceb79ff97de7f6efff364f3b0",
"body": null,
"is_bot": false,
"headline": "added back PQC list",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T13:16:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e57eda2c40095ac19ee0ed3bab8fe9fa54c620e0",
"body": "…09CRLEntryObject/RFC3280/X509CertificateObject/BaseBlockCipher, new PQC KeyPairGeneratorSpi overlays with NoSuchProviderException catch, SM2Signer/Utils), the Falcon FPREngine JLS2 forward-reference fix, and drop the KEM cipher families so bcprov-jdk13 compiles clean",
"is_bot": false,
"headline": "Revive the jdk1.3 (build1-3) provider build: sync rotted overlays (X5…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T13:15:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38f563abe459bb7c46f72370552fc3767f7bd3bb",
"body": "…aging to avoid the OwlUtilTest bcprov signer-info clash, matching the lms/mayo/est/keybox pattern",
"is_bot": false,
"headline": "Drop crypto.agreement.owl.AllTests from the signed legacy Ant test st…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T09:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1271da1eeba1fa7a185380979eed644fe45e265",
"body": "…jar junit test-sweeping OSGi gotcha in docs/claude/build-jdk14.md",
"is_bot": false,
"headline": "Document the jdk1.3->jdk1.4 overlay layering and the legacy provider-…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T08:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3406b620442b345ed2a5ea81a19ab96312756c91",
"body": "…e *Test classes from the bcprov copy, and relocate OwlUtilTest to its own AllTests so it builds under bctest",
"is_bot": false,
"headline": "Keep junit out of the legacy provider jars by excluding main-namespac…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T08:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23b67126abaf8d26043585f442a574417fc5f8c5",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T04:45:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4df1c5fc437899b1f42208b031ae25f25acd159",
"body": "… configurable node limit (org.bouncycastle.x509.max_cert_path_build_nodes)",
"is_bot": false,
"headline": "Bound the PKIX certification-path builder's depth-first search with a…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-16T04:44:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "272fb32d4f66e7aafb1d60c408c1722a17da6869",
"body": null,
"is_bot": false,
"headline": "Add ML-KEM and X-Wing KEM support to HPKE, relates to github #2351",
"author_name": "royb",
"author_login": null,
"committed_at": "2026-07-15T22:06:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09cb1ed32ee5f22d1e288688c706bb930619b4ae",
"body": "…dule so examples compile and smoke-test under CI without shipping in the bc jars",
"is_bot": false,
"headline": "Add the misc examples tree to the Gradle build as a non-publishing mo…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T21:47:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6ae24643e7ba7cfdf9267656ce83bb656ab9777",
"body": "…e with a commonName longer than the RFC 5280 64-character bound",
"is_bot": false,
"headline": "Add an X500NameStyle example showing how to parse a Distinguished Nam…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T21:26:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ca5bc0b66200a2f8c13f508bf74d58e09b7bff7",
"body": "# Conflicts:\n#\tdocs/releasenotes.html",
"is_bot": false,
"headline": "Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T02:13:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81ca96812a79b5c61d7638a808096c5ff23b543d",
"body": "…ULT_VERSION stamp) in docs/claude/conventions.md",
"is_bot": false,
"headline": "Document the full version-bump file set (incl. the OpenPGP armor DEFA…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T02:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f492e5ad6eb983dc5328dc0fbb858854e604b72",
"body": "…on via update() does not throw ShortBufferException, relates to github #2354.",
"is_bot": false,
"headline": "Return 0 from KCCMBlockCipher.getUpdateOutputSize so JCA CCM decrypti…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T02:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b19c2729262db6f81ebb1e27432704eb67a8491a",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:54:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ad436664aefe970dc5e5e54d641669e0bbd8b3f",
"body": "… recipient ids",
"is_bot": false,
"headline": "Add a strict equals() to KEMRecipientId for parity with the other CMS…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6b8f75c71e339777e352c7f05b2f7fb75f1ec2a",
"body": null,
"is_bot": false,
"headline": "Use ASN1BitString.getBytes() for composite signature components",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ba0153799f2749519d046cdca197ee50dda0094",
"body": "…on the module path",
"is_bot": false,
"headline": "Fall back to a module-safe ResourceBundle lookup in LocalizedMessage …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d0ad7cddd081f6470106e9cf2ad75b440db9660",
"body": "…t guards",
"is_bot": false,
"headline": "Reject a negative PBKDF2 iteration count in the CMS password-recipien…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6a05505d7a1ce47d526e827c3f34ac606c08247",
"body": "…not block forever",
"is_bot": false,
"headline": "Bound the 204/404 body drain in ESTService.getCSRAttributes so it can…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a3d831ce949d125b94d659d2288edbc62486ce1",
"body": "… guards",
"is_bot": false,
"headline": "Bound the scrypt parallelization parameter p in the PKCS8/PKCS12 cost…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2b3a3994bd1e03071f37e1067c3f25688f60c34",
"body": null,
"is_bot": false,
"headline": "Guard CMSUtils.getAEADMacLength against malformed AEAD parameters",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bad0fa997af23389a76d88f4175877c34a6632e6",
"body": null,
"is_bot": false,
"headline": "Validate untrusted RSASSA-PSS parameters in BcRsaPssUtil.createSigner",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0802cf1a3f9fbbb3bf2e568a307d29cac2ef3db1",
"body": null,
"is_bot": false,
"headline": "Accept an empty passphrase on the JCE ARGON2 SecretKeyFactory path",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b9c104c002584d7c6dc3f0936aeac229d5ba4a8",
"body": "…hrase",
"is_bot": false,
"headline": "Reach the Argon2 s2kCalculator null-guard in PGPUtil.makeKeyFromPassP…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3464fe6af9f23c80506fa18ece3955fcb71f4960",
"body": "…ery candidate",
"is_bot": false,
"headline": "Fix KeyIdentifier.matches(List, KeyIdentifier, boolean) to examine ev…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca363deee793c78150f180d6d1828c9d713b91a8",
"body": "…rs, relates to github #2356.",
"is_bot": false,
"headline": "Stop bundling org.bouncycastle.asn1.iana into the Ant-built bcutil ja…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T01:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f09046951f4b5ed90a649785a9cacdadcda95f2d",
"body": "IANAObjectIdentifiers was consolidated to a single home in core (shipped in\nbcprov) in 1.85 (github #2176), but ant/bc+-build.xml's build-util target still\ncopied org/bouncycastle/asn1/iana/** into bcutil, so the Ant distributions\n(bcutil-jdk15to18, bcutil-jdk14) duplicated the class already present\n[…]\nblicly by core, and no\nutil class references it, so dropping the include removes the duplicate while\nleaving the class in bcprov. The Gradle jdk18on jars were already correct.\nRelates to github #2356.",
"is_bot": false,
"headline": "Stop bundling org.bouncycastle.asn1.iana into the Ant-built bcutil jars",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T00:57:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fa70011dbc4ecc4225d9f341579adb99e4aa1ae5",
"body": "…erage for overlaid behaviour, in docs/claude/architecture.md",
"is_bot": false,
"headline": "Document checking for MR overlays and adding JVM-specific (testN) cov…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T00:51:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1f64e77ff6e3f26e9a2c8a527f60079dbb39990",
"body": "…i-release overlays and normalise OpenSSH KeyFactory error handling\n\nThe edec KeyFactorySpi jdk1.11/jdk1.15 overlays had drifted from base on the\nOpenSSH private-key path: they used the no-passphrase parsePrivateKeyBlob\noverload (so passphrase-encrypted openssh-key-v1 Ed25519 keys failed on JDK 11+)\n[…]\ned. Adds OpenSSHKeyFactoryMRTest under src/test/jdk1.11 and jdk1.15\n(wired into AllTests11/AllTests15) so test11/test15 run the OpenSSH key specs\nagainst the multi-release jar and catch overlay drift.",
"is_bot": false,
"headline": "Sync the Ed25519 KeyFactorySpi OpenSSH path across the JDK 11/15 mult…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-15T00:51:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58cc1fdb27902d6bb35b3f4bf218469e68ba6ce8",
"body": null,
"is_bot": false,
"headline": "updated section numbers, added 1.86",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:41:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7572561af457c877992bc484be1e2c9ac518d5fa",
"body": "…-SNAPSHOT (release.suffix/version 1.85.99), and the BC and BCPQC provider info strings to v1.86-SNAPSHOT with provider version 1.8599 across the base, jdk1.1 and jdk1.4 copies",
"is_bot": false,
"headline": "Bump versions for the 1.86 development cycle: gradle/bc-build to 1.86…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:35:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb8cfe7959913ef5b997974f664673ee9ce19ba7",
"body": "…overlay resync (partial: the provider does not yet build clean)\n\nReviving the long-rotted jdk1.3 legacy build. A genuine 32-bit Sun JDK 1.3.1 no\nlonger runs on a modern host, so the build-jdk13-docker skill runs it inside a\ndebian/eol:etch (i386, glibc 2.3.6) container: glibc < 2.4 avoids the PTR_M\n[…]\ntale X509CertificateObject\noverlays for the new hasFriendlyName(); the symmetric AES/Camellia/SEED/Serpent/LEA\nunresolved symbol; and jdk1.4-style overlays (or excludes) for Falcon, SDitH and SQIsign.",
"is_bot": false,
"headline": "Add a Docker-based jdk1.3 (build1-3) build path and begin the jdk1.3 …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:33:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57fbd3c501f7a369f64eda311d6a709fc0bcae84",
"body": null,
"is_bot": false,
"headline": "Set the 1.85 release date to 2026, July 12th in the release notes",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-14T23:13:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecee534efd1d617b1882a6eb9c0b5ae61fefe51e",
"body": "run_mtt.sh extracted the release version with `fgrep version`, an\nunanchored substring match. The debug-build comment added to\ngradle.properties in 10056f56b6 contains \"version\" (in <version>), so\nfgrep matched it too and $version became a two-line string, garbling\nevery -scan jar path and failing the CI module-dependency step with a\nspurious \"File not found: .../bcjmail-jdk18on-1.85\\n# A debug build...\".\nMatch only the line starting with version= instead.",
"is_bot": false,
"headline": "Anchor run_mtt.sh's gradle.properties version parse to the version= line",
"author_name": "gefeili",
"author_login": null,
"committed_at": "2026-07-12T02:10:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f24982e4c606755888d260aa85589b378b2b144",
"body": "…Debug builds subsection under Building explaining that -Prelease.debug=true (or release.debug=true in gradle.properties) labels every module's jars/artifacts <module>-debug-jdk18on-<version> and compiles with debug symbols, with clean build / copyJars examples.",
"is_bot": false,
"headline": "Document the release.debug Gradle build property in README.md: add a …",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T01:41:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d826de9c92a6a9dce78697e4cd5eb2d375d9165",
"body": "…Cipher (DSTU 7624 CCM), incorporating github PR #2350: init zero-extends a short nonce to the block size and processAssociatedText zero-pads a trailing partial AAD block instead of throwing \"padding not supported\". Corrects the PR's AAD MAC loop, whose bound byteIndex < authLen - assocOff double-su\n[…]\nassociated data; the bound is byteIndex < authLen. Adds DSTU7624Test cases locking the multi-block AAD MAC to its pre-PR value and round-tripping partial AAD and short nonces; relates to github #2350.",
"is_bot": false,
"headline": "Support variable-length associated data and short nonces in KCCMBlock…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T00:56:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10056f56b60bbe4fccac22aa8bf5b7a9732005b5",
"body": "… (or -debug-jdk15to18- on a Java <= 8 daemon) and compile with debug symbols when release.debug is true, mirroring the jdk14.xml / jdk15+.xml debug-label change: build.gradle reads release.debug (via -Prelease.debug or gradle.properties, default false) and prefixes the shared vmrange, so every module's jar archiveBaseName/appendix and Maven artifactId pick up the debug label, and options.debug follows the flag; default (release.debug=false) output is unchanged.",
"is_bot": false,
"headline": "Name the Gradle-build jars/artifacts <module>-debug-jdk18on-<version>…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T00:26:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b73cf4da8b85ee4f32aface1ff62ff2af77a0c58",
"body": "… a re-initialised cipher does not carry the previous operation's associated data into the authentication tag, incorporating github PR #2349 (converting its tab indentation to spaces) and adding a DSTU7624Test regression case that a re-init matches a freshly constructed cipher; relates to github #2349.",
"is_bot": false,
"headline": "Reset the KGCM associated-text accumulator in KGCMBlockCipher.init so…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-12T00:26:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b43e928214ac4670b1b2ae8fb8ed0212e0a9568",
"body": "… the public X509Certificate type, not cert.getClass(): the BC cert impl (X509CertificateImpl/X509CertificateObject) is package-private, so a Method obtained from the runtime class failed invoke() with IllegalAccessException and broke cert.test.AllTests testSimpleTests after the jdk15to18 reflective-call change.",
"is_bot": false,
"headline": "Resolve CertTest's reflective verify(PublicKey,Provider) call through…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T21:52:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a7332a93870fc2a65fe092192b35d1957c45502",
"body": "… @Override/@FunctionalInterface source strip that jdk15+.xml lacked (ant/jdk14.xml preprocesses it away), exclude the tests using JDK 7/8-only APIs (PKIXRevocationChecker, Cipher.updateAAD, java.nio.file.Files, JSSE SNI/ExtendedSSLSession, PipedInputStream(,int), cert.plants generics) with matching\n[…]\nAllTests / jce RegressionTest overlays, and route three guarded Java 8 test calls (CertTest verify(pub,Provider), operator GCMParameterSpec, BouncyCastleProviderTest String.join) through 1.5-safe code",
"is_bot": false,
"headline": "Restore the jdk15to18 Ant test build under genuine javac 1.5: add the…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T14:33:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e128162db6ced97073e067f6f80f72d6a5414f9e",
"body": "…t-build step reaches debug jars: the fixed 'bcprov-jdk15to18*.jar' / 'bcprov-ext-jdk15to18*.jar' globs did not match a release.debug build's 'bcprov-debug-jdk15to18-*.jar' names, so debug provider jars shipped without the JCA auto-registration file. Replaced the tar/mv/rm dance with a loop over 'bcprov*jdk15to18*.jar' (matches prov and ext, debug and non-debug) using jar uf -C prov/src/main/resources META-INF.",
"is_bot": false,
"headline": "Fix build1-5to1-8 so the META-INF/services/java.security.Provider pos…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T13:49:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f360f23bfab40c9c237615511aa10a50a256496f",
"body": "…ars left at the top level (e.g. bctest-*.jar) cannot be accidentally staged and committed.",
"is_bot": false,
"headline": "Ignore repository-root *.jar files (/*.jar) so stray build-artifact j…",
"author_name": "David Hook",
"author_login": "dghgit",
"committed_at": "2026-07-11T12:44:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 1693,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 52,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 1264,
"stars": 2670,
"watchers": 135,
"fork_history": {
"days": [
{
"date": "2015-06-02",
"count": 1
},
{
"date": "2015-06-08",
"count": 1
},
{
"date": "2015-06-16",
"count": 1
},
{
"date": "2015-06-23",
"count": 1
},
{
"date": "2015-06-24",
"count": 1
},
{
"date": "2015-07-17",
"count": 1
},
{
"date": "2015-07-20",
"count": 1
},
{
"date": "2015-07-28",
"count": 1
},
{
"date": "2015-08-01",
"count": 1
},
{
"date": "2015-08-10",
"count": 1
},
{
"date": "2015-08-14",
"count": 1
},
{
"date": "2015-08-19",
"count": 1
},
{
"date": "2015-08-27",
"count": 1
},
{
"date": "2015-09-01",
"count": 1
},
{
"date": "2015-09-03",
"count": 1
},
{
"date": "2015-09-17",
"count": 1
},
{
"date": "2015-10-18",
"count": 1
},
{
"date": "2015-10-19",
"count": 1
},
{
"date": "2015-10-20",
"count": 1
},
{
"date": "2015-10-22",
"count": 1
},
{
"date": "2015-11-05",
"count": 2
},
{
"date": "2015-11-20",
"count": 1
},
{
"date": "2015-12-01",
"count": 1
},
{
"date": "2015-12-05",
"count": 1
},
{
"date": "2015-12-14",
"count": 1
},
{
"date": "2015-12-27",
"count": 1
},
{
"date": "2015-12-28",
"count": 1
},
{
"date": "2016-01-04",
"count": 1
},
{
"date": "2016-01-22",
"count": 1
},
{
"date": "2016-02-08",
"count": 1
},
{
"date": "2016-02-10",
"count": 1
},
{
"date": "2016-02-16",
"count": 1
},
{
"date": "2016-02-22",
"count": 1
},
{
"date": "2016-02-26",
"count": 1
},
{
"date": "2016-03-06",
"count": 1
},
{
"date": "2016-03-22",
"count": 2
},
{
"date": "2016-03-23",
"count": 1
},
{
"date": "2016-03-28",
"count": 1
},
{
"date": "2016-03-31",
"count": 1
},
{
"date": "2016-04-11",
"count": 1
},
{
"date": "2016-04-16",
"count": 1
},
{
"date": "2016-04-19",
"count": 1
},
{
"date": "2016-04-22",
"count": 1
},
{
"date": "2016-05-03",
"count": 1
},
{
"date": "2016-05-09",
"count": 1
},
{
"date": "2016-05-10",
"count": 2
},
{
"date": "2016-05-11",
"count": 1
},
{
"date": "2016-05-14",
"count": 1
},
{
"date": "2016-05-20",
"count": 1
},
{
"date": "2016-05-25",
"count": 1
},
{
"date": "2016-06-19",
"count": 1
},
{
"date": "2016-06-20",
"count": 1
},
{
"date": "2016-06-29",
"count": 1
},
{
"date": "2016-07-05",
"count": 1
},
{
"date": "2016-07-08",
"count": 1
},
{
"date": "2016-07-11",
"count": 1
},
{
"date": "2016-07-12",
"count": 1
},
{
"date": "2016-07-21",
"count": 1
},
{
"date": "2016-07-28",
"count": 1
},
{
"date": "2016-07-30",
"count": 1
},
{
"date": "2016-08-09",
"count": 1
},
{
"date": "2016-08-12",
"count": 1
},
{
"date": "2016-08-14",
"count": 1
},
{
"date": "2016-08-21",
"count": 1
},
{
"date": "2016-09-05",
"count": 1
},
{
"date": "2016-09-19",
"count": 1
},
{
"date": "2016-10-03",
"count": 1
},
{
"date": "2016-10-06",
"count": 1
},
{
"date": "2016-10-11",
"count": 1
},
{
"date": "2016-10-14",
"count": 2
},
{
"date": "2016-10-17",
"count": 2
},
{
"date": "2016-11-04",
"count": 1
},
{
"date": "2016-11-09",
"count": 1
},
{
"date": "2016-11-13",
"count": 1
},
{
"date": "2016-11-14",
"count": 2
},
{
"date": "2016-11-15",
"count": 1
},
{
"date": "2016-11-20",
"count": 1
},
{
"date": "2016-12-20",
"count": 1
},
{
"date": "2016-12-29",
"count": 1
},
{
"date": "2017-01-03",
"count": 1
},
{
"date": "2017-01-05",
"count": 1
},
{
"date": "2017-01-17",
"count": 1
},
{
"date": "2017-01-20",
"count": 1
},
{
"date": "2017-01-23",
"count": 1
},
{
"date": "2017-02-02",
"count": 1
},
{
"date": "2017-02-03",
"count": 2
},
{
"date": "2017-02-09",
"count": 1
},
{
"date": "2017-02-15",
"count": 1
},
{
"date": "2017-02-17",
"count": 2
},
{
"date": "2017-03-10",
"count": 1
},
{
"date": "2017-03-13",
"count": 2
},
{
"date": "2017-03-23",
"count": 2
},
{
"date": "2017-03-24",
"count": 1
},
{
"date": "2017-03-26",
"count": 1
},
{
"date": "2017-03-31",
"count": 1
},
{
"date": "2017-04-04",
"count": 1
},
{
"date": "2017-04-06",
"count": 1
},
{
"date": "2017-04-07",
"count": 1
},
{
"date": "2017-04-12",
"count": 1
},
{
"date": "2017-04-19",
"count": 1
},
{
"date": "2017-04-24",
"count": 1
},
{
"date": "2017-04-27",
"count": 1
},
{
"date": "2017-05-04",
"count": 1
},
{
"date": "2017-05-19",
"count": 1
},
{
"date": "2017-05-24",
"count": 1
},
{
"date": "2017-06-01",
"count": 1
},
{
"date": "2017-06-02",
"count": 1
},
{
"date": "2017-06-06",
"count": 1
},
{
"date": "2017-06-07",
"count": 2
},
{
"date": "2017-06-10",
"count": 1
},
{
"date": "2017-06-16",
"count": 1
},
{
"date": "2017-06-20",
"count": 2
},
{
"date": "2017-07-03",
"count": 1
},
{
"date": "2017-07-06",
"count": 2
},
{
"date": "2017-07-10",
"count": 1
},
{
"date": "2017-07-13",
"count": 1
},
{
"date": "2017-07-27",
"count": 2
},
{
"date": "2017-08-03",
"count": 1
},
{
"date": "2017-08-07",
"count": 1
},
{
"date": "2017-08-10",
"count": 1
},
{
"date": "2017-08-21",
"count": 1
},
{
"date": "2017-08-25",
"count": 1
},
{
"date": "2017-08-28",
"count": 2
},
{
"date": "2017-09-07",
"count": 1
},
{
"date": "2017-09-17",
"count": 1
},
{
"date": "2017-09-20",
"count": 1
},
{
"date": "2017-09-21",
"count": 1
},
{
"date": "2017-09-27",
"count": 1
},
{
"date": "2017-09-28",
"count": 1
},
{
"date": "2017-09-29",
"count": 1
},
{
"date": "2017-10-10",
"count": 1
},
{
"date": "2017-10-11",
"count": 1
},
{
"date": "2017-10-16",
"count": 2
},
{
"date": "2017-10-18",
"count": 1
},
{
"date": "2017-10-19",
"count": 1
},
{
"date": "2017-10-23",
"count": 2
},
{
"date": "2017-10-27",
"count": 1
},
{
"date": "2017-10-31",
"count": 1
},
{
"date": "2017-11-09",
"count": 1
},
{
"date": "2017-11-10",
"count": 1
},
{
"date": "2017-11-13",
"count": 1
},
{
"date": "2017-11-16",
"count": 1
},
{
"date": "2017-11-21",
"count": 1
},
{
"date": "2017-11-29",
"count": 1
},
{
"date": "2017-11-30",
"count": 2
},
{
"date": "2017-12-02",
"count": 1
},
{
"date": "2017-12-07",
"count": 1
},
{
"date": "2017-12-11",
"count": 1
},
{
"date": "2017-12-12",
"count": 1
},
{
"date": "2017-12-13",
"count": 1
},
{
"date": "2017-12-18",
"count": 1
},
{
"date": "2017-12-20",
"count": 1
},
{
"date": "2017-12-22",
"count": 2
},
{
"date": "2017-12-27",
"count": 3
},
{
"date": "2017-12-28",
"count": 1
},
{
"date": "2018-01-02",
"count": 1
},
{
"date": "2018-01-03",
"count": 3
},
{
"date": "2018-01-07",
"count": 1
},
{
"date": "2018-01-10",
"count": 1
},
{
"date": "2018-01-14",
"count": 1
},
{
"date": "2018-01-17",
"count": 1
},
{
"date": "2018-01-18",
"count": 1
},
{
"date": "2018-01-19",
"count": 1
},
{
"date": "2018-01-26",
"count": 1
},
{
"date": "2018-01-31",
"count": 1
},
{
"date": "2018-02-01",
"count": 1
},
{
"date": "2018-02-05",
"count": 1
},
{
"date": "2018-02-07",
"count": 1
},
{
"date": "2018-02-08",
"count": 1
},
{
"date": "2018-02-13",
"count": 2
},
{
"date": "2018-02-14",
"count": 1
},
{
"date": "2018-02-22",
"count": 1
},
{
"date": "2018-02-24",
"count": 1
},
{
"date": "2018-02-26",
"count": 1
},
{
"date": "2018-03-05",
"count": 1
},
{
"date": "2018-03-07",
"count": 1
},
{
"date": "2018-03-19",
"count": 1
},
{
"date": "2018-03-28",
"count": 1
},
{
"date": "2018-04-05",
"count": 1
},
{
"date": "2018-04-23",
"count": 1
},
{
"date": "2018-04-26",
"count": 1
},
{
"date": "2018-05-01",
"count": 1
},
{
"date": "2018-05-02",
"count": 1
},
{
"date": "2018-05-07",
"count": 2
},
{
"date": "2018-05-12",
"count": 1
},
{
"date": "2018-05-15",
"count": 1
},
{
"date": "2018-05-16",
"count": 1
},
{
"date": "2018-05-18",
"count": 1
},
{
"date": "2018-05-27",
"count": 1
},
{
"date": "2018-05-29",
"count": 1
},
{
"date": "2018-06-05",
"count": 1
},
{
"date": "2018-06-06",
"count": 1
},
{
"date": "2018-06-14",
"count": 1
},
{
"date": "2018-06-15",
"count": 2
},
{
"date": "2018-06-20",
"count": 1
},
{
"date": "2018-06-21",
"count": 1
},
{
"date": "2018-06-26",
"count": 1
},
{
"date": "2018-07-03",
"count": 1
},
{
"date": "2018-07-04",
"count": 1
},
{
"date": "2018-07-06",
"count": 1
},
{
"date": "2018-07-13",
"count": 1
},
{
"date": "2018-07-17",
"count": 1
},
{
"date": "2018-07-24",
"count": 1
},
{
"date": "2018-07-25",
"count": 2
},
{
"date": "2018-08-01",
"count": 1
},
{
"date": "2018-08-02",
"count": 1
},
{
"date": "2018-08-05",
"count": 1
},
{
"date": "2018-08-06",
"count": 1
},
{
"date": "2018-08-07",
"count": 1
},
{
"date": "2018-08-10",
"count": 1
},
{
"date": "2018-08-13",
"count": 2
},
{
"date": "2018-08-17",
"count": 1
},
{
"date": "2018-08-29",
"count": 1
},
{
"date": "2018-08-31",
"count": 2
},
{
"date": "2018-09-05",
"count": 1
},
{
"date": "2018-09-07",
"count": 1
},
{
"date": "2018-09-22",
"count": 1
},
{
"date": "2018-10-02",
"count": 1
},
{
"date": "2018-10-03",
"count": 1
},
{
"date": "2018-10-05",
"count": 1
},
{
"date": "2018-10-08",
"count": 2
},
{
"date": "2018-10-10",
"count": 1
},
{
"date": "2018-10-16",
"count": 1
},
{
"date": "2018-10-17",
"count": 1
},
{
"date": "2018-10-24",
"count": 1
},
{
"date": "2018-10-25",
"count": 1
},
{
"date": "2018-11-01",
"count": 1
},
{
"date": "2018-11-08",
"count": 1
},
{
"date": "2018-11-13",
"count": 1
},
{
"date": "2018-11-17",
"count": 1
},
{
"date": "2018-11-18",
"count": 1
},
{
"date": "2018-11-26",
"count": 1
},
{
"date": "2018-12-03",
"count": 1
},
{
"date": "2018-12-06",
"count": 2
},
{
"date": "2018-12-11",
"count": 1
},
{
"date": "2019-01-03",
"count": 1
},
{
"date": "2019-01-04",
"count": 1
},
{
"date": "2019-01-06",
"count": 1
},
{
"date": "2019-01-18",
"count": 1
},
{
"date": "2019-01-29",
"count": 1
},
{
"date": "2019-01-30",
"count": 2
},
{
"date": "2019-02-06",
"count": 2
},
{
"date": "2019-02-09",
"count": 1
},
{
"date": "2019-02-10",
"count": 1
},
{
"date": "2019-02-11",
"count": 1
},
{
"date": "2019-02-13",
"count": 1
},
{
"date": "2019-02-14",
"count": 1
},
{
"date": "2019-02-21",
"count": 1
},
{
"date": "2019-02-27",
"count": 1
},
{
"date": "2019-03-01",
"count": 1
},
{
"date": "2019-03-05",
"count": 1
},
{
"date": "2019-03-07",
"count": 1
},
{
"date": "2019-03-08",
"count": 1
},
{
"date": "2019-03-11",
"count": 1
},
{
"date": "2019-03-28",
"count": 1
},
{
"date": "2019-04-01",
"count": 1
},
{
"date": "2019-04-03",
"count": 1
},
{
"date": "2019-04-06",
"count": 1
},
{
"date": "2019-04-08",
"count": 2
},
{
"date": "2019-04-11",
"count": 1
},
{
"date": "2019-04-14",
"count": 1
},
{
"date": "2019-04-15",
"count": 1
},
{
"date": "2019-04-17",
"count": 1
},
{
"date": "2019-04-18",
"count": 1
},
{
"date": "2019-04-23",
"count": 2
},
{
"date": "2019-04-25",
"count": 1
},
{
"date": "2019-04-26",
"count": 1
},
{
"date": "2019-04-28",
"count": 1
},
{
"date": "2019-04-29",
"count": 2
},
{
"date": "2019-05-04",
"count": 1
},
{
"date": "2019-05-06",
"count": 1
},
{
"date": "2019-05-09",
"count": 1
},
{
"date": "2019-05-10",
"count": 1
},
{
"date": "2019-05-17",
"count": 2
},
{
"date": "2019-05-20",
"count": 1
},
{
"date": "2019-05-26",
"count": 1
},
{
"date": "2019-05-28",
"count": 3
},
{
"date": "2019-05-29",
"count": 1
},
{
"date": "2019-06-05",
"count": 1
},
{
"date": "2019-06-08",
"count": 1
},
{
"date": "2019-06-11",
"count": 1
},
{
"date": "2019-06-13",
"count": 1
},
{
"date": "2019-06-14",
"count": 1
},
{
"date": "2019-06-18",
"count": 1
},
{
"date": "2019-06-19",
"count": 1
},
{
"date": "2019-06-20",
"count": 1
},
{
"date": "2019-06-21",
"count": 1
},
{
"date": "2019-06-24",
"count": 2
},
{
"date": "2019-06-26",
"count": 1
},
{
"date": "2019-06-28",
"count": 1
},
{
"date": "2019-06-30",
"count": 1
},
{
"date": "2019-07-02",
"count": 1
},
{
"date": "2019-07-03",
"count": 3
},
{
"date": "2019-07-04",
"count": 1
},
{
"date": "2019-07-09",
"count": 1
},
{
"date": "2019-07-10",
"count": 2
},
{
"date": "2019-07-22",
"count": 1
},
{
"date": "2019-07-23",
"count": 1
},
{
"date": "2019-07-26",
"count": 1
},
{
"date": "2019-07-29",
"count": 1
},
{
"date": "2019-08-01",
"count": 1
},
{
"date": "2019-08-02",
"count": 1
},
{
"date": "2019-08-03",
"count": 1
},
{
"date": "2019-08-05",
"count": 1
},
{
"date": "2019-08-11",
"count": 1
},
{
"date": "2019-08-17",
"count": 1
},
{
"date": "2019-08-20",
"count": 1
},
{
"date": "2019-08-22",
"count": 1
},
{
"date": "2019-08-27",
"count": 1
},
{
"date": "2019-08-28",
"count": 1
},
{
"date": "2019-09-11",
"count": 1
},
{
"date": "2019-09-12",
"count": 1
},
{
"date": "2019-09-16",
"count": 1
},
{
"date": "2019-09-19",
"count": 1
},
{
"date": "2019-09-22",
"count": 1
},
{
"date": "2019-09-27",
"count": 1
},
{
"date": "2019-10-03",
"count": 1
},
{
"date": "2019-10-09",
"count": 1
},
{
"date": "2019-10-14",
"count": 1
},
{
"date": "2019-10-17",
"count": 2
},
{
"date": "2019-10-19",
"count": 1
},
{
"date": "2019-10-23",
"count": 1
},
{
"date": "2019-10-28",
"count": 1
},
{
"date": "2019-11-02",
"count": 1
},
{
"date": "2019-11-04",
"count": 1
},
{
"date": "2019-11-05",
"count": 1
},
{
"date": "2019-11-11",
"count": 2
},
{
"date": "2019-11-15",
"count": 1
},
{
"date": "2019-11-20",
"count": 1
},
{
"date": "2019-11-21",
"count": 1
},
{
"date": "2019-11-26",
"count": 1
},
{
"date": "2019-11-28",
"count": 2
},
{
"date": "2019-11-29",
"count": 2
},
{
"date": "2019-12-05",
"count": 2
},
{
"date": "2019-12-10",
"count": 2
},
{
"date": "2019-12-12",
"count": 1
},
{
"date": "2019-12-13",
"count": 1
},
{
"date": "2019-12-17",
"count": 1
},
{
"date": "2019-12-19",
"count": 1
},
{
"date": "2019-12-20",
"count": 1
},
{
"date": "2019-12-24",
"count": 1
},
{
"date": "2019-12-27",
"count": 1
},
{
"date": "2019-12-28",
"count": 1
},
{
"date": "2020-01-06",
"count": 1
},
{
"date": "2020-01-13",
"count": 2
},
{
"date": "2020-01-16",
"count": 2
},
{
"date": "2020-01-17",
"count": 1
},
{
"date": "2020-01-20",
"count": 2
},
{
"date": "2020-01-23",
"count": 1
},
{
"date": "2020-01-24",
"count": 1
},
{
"date": "2020-01-30",
"count": 1
},
{
"date": "2020-02-05",
"count": 1
},
{
"date": "2020-02-08",
"count": 1
},
{
"date": "2020-02-09",
"count": 1
},
{
"date": "2020-02-11",
"count": 1
},
{
"date": "2020-02-12",
"count": 1
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-02-22",
"count": 1
},
{
"date": "2020-02-25",
"count": 1
},
{
"date": "2020-03-04",
"count": 2
},
{
"date": "2020-03-05",
"count": 1
},
{
"date": "2020-03-06",
"count": 1
},
{
"date": "2020-03-16",
"count": 3
},
{
"date": "2020-03-18",
"count": 1
},
{
"date": "2020-03-19",
"count": 2
},
{
"date": "2020-03-26",
"count": 1
},
{
"date": "2020-04-02",
"count": 1
},
{
"date": "2020-04-15",
"count": 1
},
{
"date": "2020-04-20",
"count": 3
},
{
"date": "2020-04-21",
"count": 1
},
{
"date": "2020-04-22",
"count": 1
},
{
"date": "2020-05-06",
"count": 1
},
{
"date": "2020-05-07",
"count": 1
},
{
"date": "2020-05-12",
"count": 1
},
{
"date": "2020-05-14",
"count": 1
},
{
"date": "2020-05-18",
"count": 1
},
{
"date": "2020-05-22",
"count": 1
},
{
"date": "2020-05-26",
"count": 2
},
{
"date": "2020-06-01",
"count": 1
},
{
"date": "2020-06-09",
"count": 1
},
{
"date": "2020-06-15",
"count": 1
},
{
"date": "2020-06-16",
"count": 1
},
{
"date": "2020-06-17",
"count": 1
},
{
"date": "2020-06-22",
"count": 1
},
{
"date": "2020-06-23",
"count": 1
},
{
"date": "2020-06-30",
"count": 2
},
{
"date": "2020-07-08",
"count": 1
},
{
"date": "2020-07-16",
"count": 1
},
{
"date": "2020-07-17",
"count": 1
},
{
"date": "2020-07-18",
"count": 1
},
{
"date": "2020-07-19",
"count": 1
},
{
"date": "2020-07-21",
"count": 1
},
{
"date": "2020-07-23",
"count": 1
},
{
"date": "2020-07-26",
"count": 1
},
{
"date": "2020-07-27",
"count": 1
},
{
"date": "2020-07-29",
"count": 2
},
{
"date": "2020-07-31",
"count": 1
},
{
"date": "2020-08-06",
"count": 1
},
{
"date": "2020-08-12",
"count": 1
},
{
"date": "2020-08-14",
"count": 1
},
{
"date": "2020-08-17",
"count": 1
},
{
"date": "2020-08-21",
"count": 1
},
{
"date": "2020-08-22",
"count": 1
},
{
"date": "2020-08-28",
"count": 2
},
{
"date": "2020-09-01",
"count": 2
},
{
"date": "2020-09-03",
"count": 1
},
{
"date": "2020-09-09",
"count": 1
},
{
"date": "2020-09-10",
"count": 1
},
{
"date": "2020-09-15",
"count": 2
},
{
"date": "2020-09-28",
"count": 1
},
{
"date": "2020-10-02",
"count": 1
},
{
"date": "2020-10-04",
"count": 1
},
{
"date": "2020-10-12",
"count": 1
},
{
"date": "2020-10-13",
"count": 1
},
{
"date": "2020-10-17",
"count": 1
},
{
"date": "2020-10-19",
"count": 1
},
{
"date": "2020-10-20",
"count": 1
},
{
"date": "2020-10-21",
"count": 1
},
{
"date": "2020-10-22",
"count": 2
},
{
"date": "2020-10-23",
"count": 1
},
{
"date": "2020-10-27",
"count": 1
},
{
"date": "2020-10-29",
"count": 1
},
{
"date": "2020-11-10",
"count": 1
},
{
"date": "2020-11-12",
"count": 1
},
{
"date": "2020-11-21",
"count": 1
},
{
"date": "2020-12-03",
"count": 1
},
{
"date": "2020-12-13",
"count": 1
},
{
"date": "2020-12-15",
"count": 2
},
{
"date": "2020-12-17",
"count": 1
},
{
"date": "2021-01-04",
"count": 1
},
{
"date": "2021-01-13",
"count": 1
},
{
"date": "2021-01-18",
"count": 1
},
{
"date": "2021-01-19",
"count": 1
},
{
"date": "2021-01-20",
"count": 1
},
{
"date": "2021-01-25",
"count": 1
},
{
"date": "2021-02-09",
"count": 1
},
{
"date": "2021-02-10",
"count": 1
},
{
"date": "2021-02-12",
"count": 1
},
{
"date": "2021-02-15",
"count": 1
},
{
"date": "2021-02-22",
"count": 1
},
{
"date": "2021-02-25",
"count": 1
},
{
"date": "2021-03-01",
"count": 1
},
{
"date": "2021-03-02",
"count": 1
},
{
"date": "2021-03-04",
"count": 2
},
{
"date": "2021-03-08",
"count": 1
},
{
"date": "2021-03-09",
"count": 2
},
{
"date": "2021-03-10",
"count": 1
},
{
"date": "2021-03-15",
"count": 1
},
{
"date": "2021-03-23",
"count": 4
},
{
"date": "2021-03-31",
"count": 1
},
{
"date": "2021-04-03",
"count": 1
},
{
"date": "2021-04-07",
"count": 1
},
{
"date": "2021-04-08",
"count": 2
},
{
"date": "2021-04-09",
"count": 1
},
{
"date": "2021-04-12",
"count": 1
},
{
"date": "2021-04-15",
"count": 1
},
{
"date": "2021-04-22",
"count": 1
},
{
"date": "2021-04-23",
"count": 2
},
{
"date": "2021-04-25",
"count": 1
},
{
"date": "2021-05-01",
"count": 1
},
{
"date": "2021-05-02",
"count": 1
},
{
"date": "2021-05-04",
"count": 1
},
{
"date": "2021-05-07",
"count": 1
},
{
"date": "2021-05-14",
"count": 1
},
{
"date": "2021-05-17",
"count": 1
},
{
"date": "2021-05-18",
"count": 1
},
{
"date": "2021-05-20",
"count": 1
},
{
"date": "2021-05-22",
"count": 1
},
{
"date": "2021-05-27",
"count": 1
},
{
"date": "2021-06-03",
"count": 1
},
{
"date": "2021-06-07",
"count": 1
},
{
"date": "2021-06-11",
"count": 1
},
{
"date": "2021-06-14",
"count": 1
},
{
"date": "2021-06-17",
"count": 2
},
{
"date": "2021-07-07",
"count": 1
},
{
"date": "2021-07-08",
"count": 1
},
{
"date": "2021-07-09",
"count": 1
},
{
"date": "2021-07-11",
"count": 1
},
{
"date": "2021-07-13",
"count": 1
},
{
"date": "2021-07-26",
"count": 1
},
{
"date": "2021-07-28",
"count": 1
},
{
"date": "2021-07-29",
"count": 1
},
{
"date": "2021-08-02",
"count": 1
},
{
"date": "2021-08-06",
"count": 1
},
{
"date": "2021-08-10",
"count": 1
},
{
"date": "2021-08-11",
"count": 1
},
{
"date": "2021-08-16",
"count": 1
},
{
"date": "2021-08-19",
"count": 1
},
{
"date": "2021-08-25",
"count": 1
},
{
"date": "2021-08-27",
"count": 1
},
{
"date": "2021-09-02",
"count": 1
},
{
"date": "2021-09-05",
"count": 1
},
{
"date": "2021-09-07",
"count": 2
},
{
"date": "2021-09-23",
"count": 1
},
{
"date": "2021-09-29",
"count": 1
},
{
"date": "2021-10-06",
"count": 2
},
{
"date": "2021-10-08",
"count": 2
},
{
"date": "2021-10-13",
"count": 1
},
{
"date": "2021-10-16",
"count": 1
},
{
"date": "2021-10-20",
"count": 1
},
{
"date": "2021-10-24",
"count": 1
},
{
"date": "2021-10-26",
"count": 1
},
{
"date": "2021-10-27",
"count": 1
},
{
"date": "2021-11-02",
"count": 1
},
{
"date": "2021-11-09",
"count": 1
},
{
"date": "2021-11-10",
"count": 1
},
{
"date": "2021-11-11",
"count": 1
},
{
"date": "2021-11-15",
"count": 1
},
{
"date": "2021-11-25",
"count": 1
},
{
"date": "2021-11-26",
"count": 1
},
{
"date": "2021-12-11",
"count": 1
},
{
"date": "2021-12-19",
"count": 1
},
{
"date": "2021-12-22",
"count": 2
},
{
"date": "2021-12-23",
"count": 1
},
{
"date": "2021-12-28",
"count": 1
},
{
"date": "2022-01-03",
"count": 1
},
{
"date": "2022-01-11",
"count": 1
},
{
"date": "2022-01-12",
"count": 1
},
{
"date": "2022-01-17",
"count": 1
},
{
"date": "2022-01-18",
"count": 2
},
{
"date": "2022-01-20",
"count": 2
},
{
"date": "2022-01-21",
"count": 2
},
{
"date": "2022-01-23",
"count": 1
},
{
"date": "2022-01-24",
"count": 1
},
{
"date": "2022-01-27",
"count": 1
},
{
"date": "2022-02-03",
"count": 2
},
{
"date": "2022-02-08",
"count": 1
},
{
"date": "2022-02-11",
"count": 1
},
{
"date": "2022-02-23",
"count": 2
},
{
"date": "2022-02-24",
"count": 1
},
{
"date": "2022-03-20",
"count": 1
},
{
"date": "2022-03-22",
"count": 1
},
{
"date": "2022-03-23",
"count": 1
},
{
"date": "2022-03-28",
"count": 1
},
{
"date": "2022-03-30",
"count": 1
},
{
"date": "2022-03-31",
"count": 2
},
{
"date": "2022-04-01",
"count": 1
},
{
"date": "2022-04-03",
"count": 1
},
{
"date": "2022-04-06",
"count": 1
},
{
"date": "2022-04-07",
"count": 3
},
{
"date": "2022-04-11",
"count": 1
},
{
"date": "2022-04-13",
"count": 1
},
{
"date": "2022-04-16",
"count": 1
},
{
"date": "2022-04-23",
"count": 1
},
{
"date": "2022-04-24",
"count": 1
},
{
"date": "2022-04-28",
"count": 1
},
{
"date": "2022-05-06",
"count": 1
},
{
"date": "2022-05-09",
"count": 1
},
{
"date": "2022-05-11",
"count": 1
},
{
"date": "2022-05-20",
"count": 1
},
{
"date": "2022-05-22",
"count": 1
},
{
"date": "2022-05-23",
"count": 1
},
{
"date": "2022-05-26",
"count": 1
},
{
"date": "2022-06-01",
"count": 1
},
{
"date": "2022-06-14",
"count": 1
},
{
"date": "2022-06-15",
"count": 1
},
{
"date": "2022-06-16",
"count": 2
},
{
"date": "2022-06-22",
"count": 1
},
{
"date": "2022-06-23",
"count": 2
},
{
"date": "2022-06-25",
"count": 1
},
{
"date": "2022-06-30",
"count": 1
},
{
"date": "2022-07-01",
"count": 1
},
{
"date": "2022-07-07",
"count": 1
},
{
"date": "2022-07-21",
"count": 1
},
{
"date": "2022-07-23",
"count": 1
},
{
"date": "2022-07-26",
"count": 1
},
{
"date": "2022-08-01",
"count": 1
},
{
"date": "2022-08-11",
"count": 1
},
{
"date": "2022-08-16",
"count": 1
},
{
"date": "2022-08-19",
"count": 1
},
{
"date": "2022-08-31",
"count": 2
},
{
"date": "2022-09-01",
"count": 1
},
{
"date": "2022-09-11",
"count": 2
},
{
"date": "2022-09-27",
"count": 1
},
{
"date": "2022-09-30",
"count": 2
},
{
"date": "2022-10-04",
"count": 1
},
{
"date": "2022-10-07",
"count": 1
},
{
"date": "2022-10-10",
"count": 1
},
{
"date": "2022-10-14",
"count": 1
},
{
"date": "2022-10-17",
"count": 1
},
{
"date": "2022-10-18",
"count": 1
},
{
"date": "2022-10-19",
"count": 1
},
{
"date": "2022-10-21",
"count": 1
},
{
"date": "2022-10-22",
"count": 1
},
{
"date": "2022-11-10",
"count": 1
},
{
"date": "2022-11-15",
"count": 2
},
{
"date": "2022-11-20",
"count": 2
},
{
"date": "2022-11-21",
"count": 1
},
{
"date": "2022-11-25",
"count": 1
},
{
"date": "2022-11-30",
"count": 1
},
{
"date": "2022-12-01",
"count": 2
},
{
"date": "2022-12-02",
"count": 1
},
{
"date": "2022-12-06",
"count": 1
},
{
"date": "2022-12-14",
"count": 1
},
{
"date": "2022-12-15",
"count": 1
},
{
"date": "2022-12-16",
"count": 1
},
{
"date": "2022-12-27",
"count": 1
},
{
"date": "2023-01-04",
"count": 1
},
{
"date": "2023-01-18",
"count": 1
},
{
"date": "2023-01-28",
"count": 1
},
{
"date": "2023-01-30",
"count": 1
},
{
"date": "2023-02-01",
"count": 2
},
{
"date": "2023-02-04",
"count": 1
},
{
"date": "2023-02-16",
"count": 1
},
{
"date": "2023-02-20",
"count": 1
},
{
"date": "2023-02-21",
"count": 1
},
{
"date": "2023-03-07",
"count": 1
},
{
"date": "2023-03-08",
"count": 1
},
{
"date": "2023-03-24",
"count": 1
},
{
"date": "2023-03-26",
"count": 2
},
{
"date": "2023-04-04",
"count": 1
},
{
"date": "2023-04-05",
"count": 1
},
{
"date": "2023-04-13",
"count": 1
},
{
"date": "2023-04-14",
"count": 1
},
{
"date": "2023-04-20",
"count": 1
},
{
"date": "2023-04-21",
"count": 3
},
{
"date": "2023-04-26",
"count": 1
},
{
"date": "2023-05-06",
"count": 1
},
{
"date": "2023-05-24",
"count": 1
},
{
"date": "2023-05-26",
"count": 1
},
{
"date": "2023-05-31",
"count": 1
},
{
"date": "2023-06-01",
"count": 1
},
{
"date": "2023-06-04",
"count": 1
},
{
"date": "2023-06-07",
"count": 1
},
{
"date": "2023-06-10",
"count": 1
},
{
"date": "2023-06-20",
"count": 2
},
{
"date": "2023-06-22",
"count": 1
},
{
"date": "2023-06-26",
"count": 2
},
{
"date": "2023-06-29",
"count": 1
},
{
"date": "2023-07-16",
"count": 1
},
{
"date": "2023-07-19",
"count": 1
},
{
"date": "2023-07-20",
"count": 1
},
{
"date": "2023-07-25",
"count": 1
},
{
"date": "2023-07-26",
"count": 2
},
{
"date": "2023-08-01",
"count": 1
},
{
"date": "2023-08-15",
"count": 1
},
{
"date": "2023-08-16",
"count": 1
},
{
"date": "2023-08-24",
"count": 2
},
{
"date": "2023-08-28",
"count": 1
},
{
"date": "2023-09-01",
"count": 1
},
{
"date": "2023-09-17",
"count": 1
},
{
"date": "2023-09-18",
"count": 1
},
{
"date": "2023-09-20",
"count": 1
},
{
"date": "2023-09-27",
"count": 2
},
{
"date": "2023-10-09",
"count": 1
},
{
"date": "2023-10-12",
"count": 1
},
{
"date": "2023-10-19",
"count": 1
},
{
"date": "2023-10-30",
"count": 1
},
{
"date": "2023-10-31",
"count": 1
},
{
"date": "2023-11-02",
"count": 1
},
{
"date": "2023-11-19",
"count": 1
},
{
"date": "2023-11-29",
"count": 1
},
{
"date": "2023-12-01",
"count": 1
},
{
"date": "2023-12-03",
"count": 1
},
{
"date": "2023-12-08",
"count": 1
},
{
"date": "2023-12-09",
"count": 1
},
{
"date": "2023-12-11",
"count": 1
},
{
"date": "2023-12-12",
"count": 1
},
{
"date": "2023-12-19",
"count": 1
},
{
"date": "2024-01-09",
"count": 2
},
{
"date": "2024-01-11",
"count": 1
},
{
"date": "2024-01-20",
"count": 1
},
{
"date": "2024-02-03",
"count": 1
},
{
"date": "2024-02-07",
"count": 1
},
{
"date": "2024-02-08",
"count": 1
},
{
"date": "2024-02-10",
"count": 1
},
{
"date": "2024-02-15",
"count": 1
},
{
"date": "2024-02-24",
"count": 1
},
{
"date": "2024-02-26",
"count": 1
},
{
"date": "2024-02-27",
"count": 1
},
{
"date": "2024-03-01",
"count": 1
},
{
"date": "2024-03-14",
"count": 1
},
{
"date": "2024-03-18",
"count": 1
},
{
"date": "2024-03-20",
"count": 1
},
{
"date": "2024-03-25",
"count": 1
},
{
"date": "2024-03-27",
"count": 2
},
{
"date": "2024-03-28",
"count": 1
},
{
"date": "2024-04-01",
"count": 1
},
{
"date": "2024-04-02",
"count": 1
},
{
"date": "2024-04-05",
"count": 1
},
{
"date": "2024-04-06",
"count": 1
},
{
"date": "2024-04-08",
"count": 1
},
{
"date": "2024-04-09",
"count": 1
},
{
"date": "2024-04-10",
"count": 1
},
{
"date": "2024-04-11",
"count": 1
},
{
"date": "2024-05-02",
"count": 1
},
{
"date": "2024-05-06",
"count": 1
},
{
"date": "2024-05-15",
"count": 1
},
{
"date": "2024-05-20",
"count": 1
},
{
"date": "2024-05-25",
"count": 1
},
{
"date": "2024-06-05",
"count": 1
},
{
"date": "2024-06-07",
"count": 1
},
{
"date": "2024-06-12",
"count": 1
},
{
"date": "2024-06-14",
"count": 1
},
{
"date": "2024-06-15",
"count": 1
},
{
"date": "2024-06-16",
"count": 1
},
{
"date": "2024-06-17",
"count": 2
},
{
"date": "2024-06-21",
"count": 1
},
{
"date": "2024-06-28",
"count": 1
},
{
"date": "2024-06-30",
"count": 1
},
{
"date": "2024-07-11",
"count": 1
},
{
"date": "2024-07-17",
"count": 2
},
{
"date": "2024-07-21",
"count": 1
},
{
"date": "2024-07-26",
"count": 1
},
{
"date": "2024-07-27",
"count": 1
},
{
"date": "2024-07-31",
"count": 2
},
{
"date": "2024-08-01",
"count": 1
},
{
"date": "2024-08-07",
"count": 1
},
{
"date": "2024-08-12",
"count": 2
},
{
"date": "2024-08-14",
"count": 3
},
{
"date": "2024-08-16",
"count": 1
},
{
"date": "2024-08-19",
"count": 1
},
{
"date": "2024-08-26",
"count": 1
},
{
"date": "2024-08-27",
"count": 2
},
{
"date": "2024-09-04",
"count": 1
},
{
"date": "2024-09-09",
"count": 1
},
{
"date": "2024-09-13",
"count": 1
},
{
"date": "2024-09-16",
"count": 1
},
{
"date": "2024-09-17",
"count": 1
},
{
"date": "2024-09-20",
"count": 1
},
{
"date": "2024-09-23",
"count": 1
},
{
"date": "2024-09-26",
"count": 1
},
{
"date": "2024-09-27",
"count": 1
},
{
"date": "2024-10-04",
"count": 1
},
{
"date": "2024-10-09",
"count": 1
},
{
"date": "2024-10-11",
"count": 1
},
{
"date": "2024-10-16",
"count": 1
},
{
"date": "2024-10-19",
"count": 1
},
{
"date": "2024-10-24",
"count": 1
},
{
"date": "2024-10-28",
"count": 1
},
{
"date": "2024-10-30",
"count": 1
},
{
"date": "2024-11-01",
"count": 1
},
{
"date": "2024-11-03",
"count": 1
},
{
"date": "2024-11-04",
"count": 1
},
{
"date": "2024-11-13",
"count": 1
},
{
"date": "2024-11-17",
"count": 1
},
{
"date": "2024-11-20",
"count": 1
},
{
"date": "2024-12-01",
"count": 1
},
{
"date": "2024-12-07",
"count": 1
},
{
"date": "2024-12-09",
"count": 1
},
{
"date": "2024-12-20",
"count": 1
},
{
"date": "2025-01-02",
"count": 1
},
{
"date": "2025-01-03",
"count": 1
},
{
"date": "2025-01-08",
"count": 1
},
{
"date": "2025-01-15",
"count": 1
},
{
"date": "2025-01-30",
"count": 1
},
{
"date": "2025-01-31",
"count": 2
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-15",
"count": 1
},
{
"date": "2025-02-17",
"count": 1
},
{
"date": "2025-03-02",
"count": 1
},
{
"date": "2025-03-04",
"count": 1
},
{
"date": "2025-03-05",
"count": 1
},
{
"date": "2025-03-13",
"count": 2
},
{
"date": "2025-03-16",
"count": 1
},
{
"date": "2025-03-18",
"count": 1
},
{
"date": "2025-03-19",
"count": 1
},
{
"date": "2025-03-26",
"count": 1
},
{
"date": "2025-04-01",
"count": 1
},
{
"date": "2025-04-06",
"count": 2
},
{
"date": "2025-04-08",
"count": 2
},
{
"date": "2025-04-11",
"count": 1
},
{
"date": "2025-04-16",
"count": 1
},
{
"date": "2025-04-21",
"count": 1
},
{
"date": "2025-04-24",
"count": 1
},
{
"date": "2025-04-29",
"count": 1
},
{
"date": "2025-04-30",
"count": 1
},
{
"date": "2025-05-01",
"count": 1
},
{
"date": "2025-05-02",
"count": 1
},
{
"date": "2025-05-10",
"count": 1
},
{
"date": "2025-05-16",
"count": 1
},
{
"date": "2025-05-17",
"count": 1
},
{
"date": "2025-05-21",
"count": 1
},
{
"date": "2025-05-23",
"count": 1
},
{
"date": "2025-06-05",
"count": 1
},
{
"date": "2025-06-13",
"count": 1
},
{
"date": "2025-06-15",
"count": 1
},
{
"date": "2025-06-19",
"count": 1
},
{
"date": "2025-07-02",
"count": 1
},
{
"date": "2025-07-06",
"count": 1
},
{
"date": "2025-07-11",
"count": 1
},
{
"date": "2025-07-23",
"count": 1
},
{
"date": "2025-08-04",
"count": 1
},
{
"date": "2025-08-06",
"count": 2
},
{
"date": "2025-08-14",
"count": 1
},
{
"date": "2025-08-16",
"count": 1
},
{
"date": "2025-08-22",
"count": 2
},
{
"date": "2025-09-03",
"count": 1
},
{
"date": "2025-09-07",
"count": 1
},
{
"date": "2025-09-08",
"count": 1
},
{
"date": "2025-09-09",
"count": 1
},
{
"date": "2025-09-11",
"count": 1
},
{
"date": "2025-09-18",
"count": 1
},
{
"date": "2025-09-29",
"count": 1
},
{
"date": "2025-10-01",
"count": 1
},
{
"date": "2025-10-04",
"count": 1
},
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2025-10-10",
"count": 2
},
{
"date": "2025-10-13",
"count": 1
},
{
"date": "2025-10-14",
"count": 1
},
{
"date": "2025-10-16",
"count": 1
},
{
"date": "2025-10-23",
"count": 1
},
{
"date": "2025-11-12",
"count": 3
},
{
"date": "2025-11-13",
"count": 1
},
{
"date": "2025-11-19",
"count": 3
},
{
"date": "2025-11-25",
"count": 1
},
{
"date": "2025-11-27",
"count": 1
},
{
"date": "2025-11-30",
"count": 1
},
{
"date": "2025-12-03",
"count": 1
},
{
"date": "2025-12-05",
"count": 1
},
{
"date": "2025-12-08",
"count": 1
},
{
"date": "2025-12-09",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2025-12-15",
"count": 1
},
{
"date": "2025-12-22",
"count": 1
},
{
"date": "2025-12-25",
"count": 1
},
{
"date": "2025-12-29",
"count": 1
},
{
"date": "2026-01-02",
"count": 2
},
{
"date": "2026-01-05",
"count": 1
},
{
"date": "2026-01-10",
"count": 1
},
{
"date": "2026-01-16",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-01-23",
"count": 1
},
{
"date": "2026-01-27",
"count": 1
},
{
"date": "2026-01-29",
"count": 1
},
{
"date": "2026-01-30",
"count": 1
},
{
"date": "2026-02-03",
"count": 1
},
{
"date": "2026-02-04",
"count": 1
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-02-12",
"count": 1
},
{
"date": "2026-02-20",
"count": 1
},
{
"date": "2026-03-07",
"count": 1
},
{
"date": "2026-03-09",
"count": 1
},
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-16",
"count": 2
},
{
"date": "2026-03-26",
"count": 2
},
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-04-13",
"count": 2
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-04-29",
"count": 2
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-05-05",
"count": 3
},
{
"date": "2026-05-06",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-05",
"count": 1
},
{
"date": "2026-06-09",
"count": 2
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-17",
"count": 2
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-06-23",
"count": 2
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-06-25",
"count": 2
},
{
"date": "2026-06-28",
"count": 2
},
{
"date": "2026-06-30",
"count": 1
},
{
"date": "2026-07-01",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": false,
"collected": 1000,
"total_forks": 1264
},
"star_history": null,
"open_issues_and_prs": 95
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example",
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"mls/src/main/proto/mls_client.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"bom/build.gradle",
"build.gradle",
"core/build.gradle",
"jmail/build.gradle",
"mail/build.gradle",
"misc/build.gradle",
"mls/build.gradle",
"pg/build.gradle",
"pkix/build.gradle",
"prov/build.gradle",
"test/build.gradle",
"tls/build.gradle",
"util/build.gradle"
],
"largest_source_bytes": 1866290,
"source_files_sampled": 7893,
"oversized_source_files": 101,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1407
},
"dependencies": {
"manifests": [
"bom/build.gradle",
"build.gradle",
"core/build.gradle",
"jmail/build.gradle",
"mail/build.gradle",
"misc/build.gradle",
"mls/build.gradle",
"pg/build.gradle",
"pkix/build.gradle",
"prov/build.gradle",
"test/build.gradle",
"tls/build.gradle",
"util/build.gradle"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 31,
"merged_prs": 43,
"open_issues": 64,
"closed_ratio": 0.96,
"closed_issues": 1548,
"closed_unmerged_prs": 518
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "dghgit",
"commits": 9626,
"avatar_url": "https://avatars.githubusercontent.com/u/10509846?v=4"
},
{
"type": "User",
"login": "peterdettman",
"commits": 5852,
"avatar_url": "https://avatars.githubusercontent.com/u/3423981?v=4"
},
{
"type": "User",
"login": "mwcw",
"commits": 448,
"avatar_url": "https://avatars.githubusercontent.com/u/30947532?v=4"
},
{
"type": "User",
"login": "vanitasvitae",
"commits": 337,
"avatar_url": "https://avatars.githubusercontent.com/u/7854206?v=4"
},
{
"type": "User",
"login": "ligefeiBouncycastle",
"commits": 110,
"avatar_url": "https://avatars.githubusercontent.com/u/143379185?v=4"
},
{
"type": "User",
"login": "meganwoods",
"commits": 76,
"avatar_url": "https://avatars.githubusercontent.com/u/4627862?v=4"
},
{
"type": "User",
"login": "timw",
"commits": 46,
"avatar_url": "https://avatars.githubusercontent.com/u/670828?v=4"
},
{
"type": "User",
"login": "MikeSafonov",
"commits": 42,
"avatar_url": "https://avatars.githubusercontent.com/u/11156850?v=4"
},
{
"type": "User",
"login": "tonywasher",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/35172668?v=4"
},
{
"type": "User",
"login": "brandonweeks",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/15869?v=4"
}
],
"contributors_sampled": 100,
"top_contributor_share": 0.568
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"codeql.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 0,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 34 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected: CodeQL",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "fdc5011e1d54cb5f9687ceda5dbeefea13528bdb",
"ran_at": "2026-07-25T09:59:31Z",
"aggregate_score": 6.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T01:18:16Z",
"oldest_open_prs": [
{
"number": 126,
"created_at": "2015-12-23T20:56:29Z",
"last_comment_at": "2017-11-07T08:58:35Z",
"last_comment_author": "worsaae"
},
{
"number": 141,
"created_at": "2016-04-22T14:37:07Z",
"last_comment_at": "2017-12-22T10:45:12Z",
"last_comment_author": "marvin-enthus"
},
{
"number": 261,
"created_at": "2017-11-28T05:47:41Z",
"last_comment_at": "2017-12-13T05:44:48Z",
"last_comment_author": "inthirakumaaran"
},
{
"number": 336,
"created_at": "2018-05-02T13:34:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 590,
"created_at": "2019-09-12T10:42:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 815,
"created_at": "2020-10-22T13:33:57Z",
"last_comment_at": "2020-10-22T13:34:57Z",
"last_comment_author": "artem-smotrakov"
},
{
"number": 883,
"created_at": "2021-02-15T10:44:25Z",
"last_comment_at": "2023-02-11T14:48:59Z",
"last_comment_author": "hannesa2"
},
{
"number": 885,
"created_at": "2021-02-15T11:18:42Z",
"last_comment_at": "2025-04-12T12:58:45Z",
"last_comment_author": "dghgit"
},
{
"number": 908,
"created_at": "2021-03-16T10:03:04Z",
"last_comment_at": "2023-05-19T03:14:43Z",
"last_comment_author": "jsuper"
},
{
"number": 1517,
"created_at": "2023-10-25T22:10:04Z",
"last_comment_at": "2023-10-27T07:02:36Z",
"last_comment_author": "peterdettman"
},
{
"number": 1710,
"created_at": "2024-06-17T15:17:40Z",
"last_comment_at": "2024-06-19T13:33:10Z",
"last_comment_author": "markus-jung-vivavis"
},
{
"number": 1719,
"created_at": "2024-06-21T12:40:50Z",
"last_comment_at": "2024-06-21T12:41:48Z",
"last_comment_author": "vanitasvitae"
},
{
"number": 1740,
"created_at": "2024-07-15T19:18:40Z",
"last_comment_at": "2024-07-16T09:33:02Z",
"last_comment_author": "vladhuma"
},
{
"number": 1748,
"created_at": "2024-07-18T14:37:29Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1828,
"created_at": "2024-09-06T13:13:29Z",
"last_comment_at": "2024-09-10T14:12:42Z",
"last_comment_author": "vanitasvitae"
},
{
"number": 1996,
"created_at": "2025-02-14T05:37:10Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2026,
"created_at": "2025-03-14T00:01:06Z",
"last_comment_at": "2025-09-14T02:51:21Z",
"last_comment_author": "dghgit"
},
{
"number": 2043,
"created_at": "2025-03-27T20:01:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2107,
"created_at": "2025-06-16T22:12:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2108,
"created_at": "2025-06-16T22:15:24Z",
"last_comment_at": "2025-08-12T13:37:40Z",
"last_comment_author": "winfriedgerlach"
}
],
"last_merged_pr_at": "2025-03-21T04:34:25Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 123,
"created_at": "2015-12-14T08:52:49Z",
"last_comment_at": "2018-02-14T10:01:52Z",
"last_comment_author": "ryhaberecht"
},
{
"number": 250,
"created_at": "2017-11-09T08:14:20Z",
"last_comment_at": "2018-01-10T08:52:40Z",
"last_comment_author": "kasunbg"
},
{
"number": 279,
"created_at": "2018-01-17T16:04:06Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 443,
"created_at": "2018-12-17T11:10:11Z",
"last_comment_at": "2025-08-22T18:33:47Z",
"last_comment_author": "makkarpov"
},
{
"number": 480,
"created_at": "2019-03-15T18:37:42Z",
"last_comment_at": "2019-09-11T07:47:48Z",
"last_comment_author": "lavcraft"
},
{
"number": 596,
"created_at": "2019-09-24T08:46:06Z",
"last_comment_at": "2019-09-30T14:46:58Z",
"last_comment_author": "suraj0208"
},
{
"number": 654,
"created_at": "2020-02-06T22:13:55Z",
"last_comment_at": "2020-04-05T15:47:42Z",
"last_comment_author": "kimmerin"
},
{
"number": 731,
"created_at": "2020-06-18T05:47:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 742,
"created_at": "2020-06-30T08:47:49Z",
"last_comment_at": "2025-07-18T01:36:40Z",
"last_comment_author": "wlsdn93"
},
{
"number": 934,
"created_at": "2021-04-20T05:23:02Z",
"last_comment_at": "2022-05-10T01:06:01Z",
"last_comment_author": "adolfo-trocoli"
},
{
"number": 946,
"created_at": "2021-05-07T11:37:03Z",
"last_comment_at": "2024-11-05T12:57:59Z",
"last_comment_author": "aozmen121"
},
{
"number": 1050,
"created_at": "2021-10-26T09:21:59Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1135,
"created_at": "2022-03-30T13:37:30Z",
"last_comment_at": "2022-06-14T10:28:17Z",
"last_comment_author": "emilmuller"
},
{
"number": 1157,
"created_at": "2022-04-25T08:59:28Z",
"last_comment_at": "2022-04-26T10:29:58Z",
"last_comment_author": "peterdettman"
},
{
"number": 1165,
"created_at": "2022-05-13T08:20:31Z",
"last_comment_at": "2024-12-12T16:15:49Z",
"last_comment_author": "winfriedgerlach"
},
{
"number": 1199,
"created_at": "2022-07-30T06:59:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1289,
"created_at": "2022-11-29T19:56:04Z",
"last_comment_at": "2023-05-20T06:36:19Z",
"last_comment_author": "dghgit"
},
{
"number": 1347,
"created_at": "2023-03-06T15:07:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1440,
"created_at": "2023-06-29T12:55:19Z",
"last_comment_at": "2023-07-03T11:54:27Z",
"last_comment_author": "max-m-s"
},
{
"number": 1468,
"created_at": "2023-08-07T18:22:36Z",
"last_comment_at": "2024-09-18T17:18:02Z",
"last_comment_author": "Horcrux7"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/bcgit/bc-java",
"host": "github.com",
"name": "bc-java",
"owner": "bcgit"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"security": 63,
"vitality": 60,
"community": 82,
"governance": 52,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 60,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"commits_last_year": 1693,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 52
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "52/52 weeks with commits",
"points": 36,
"status": "met",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 52
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1693 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1693
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 82,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "excellent",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"forks": 1264,
"stars": 2670,
"watchers": 135,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2,670 stars",
"points": 55.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 2670
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1,264 forks",
"points": 25,
"status": "met",
"details": [
{
"code": "forks",
"params": {
"count": 1264
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "135 watchers",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 135
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 52,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 100,
"top_contributor_share": 0.568
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 57% of commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 57
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "100 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 100
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 34 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"merged_prs": 43,
"open_issues": 64,
"closed_issues": 1548,
"issue_closed_ratio": 0.96,
"closed_unmerged_prs": 518
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "96% of issues closed",
"points": 44.9,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 96
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "43/561 decided PRs merged",
"points": 2.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 43,
"decided": 561
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"followers": 296,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "bcgit",
"public_repos": 9,
"account_age_days": 4804
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "296 followers of bcgit",
"points": 17.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 296,
"login": "bcgit"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "9 public repos, account ~13 yr old",
"points": 19.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 9
}
},
{
"code": "account_age_years",
"params": {
"years": 13
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"crypto",
"java",
"openpgp",
"dtls",
"post-quantum-cryptography",
"tls"
],
"has_wiki": true,
"homepage": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.bouncycastle.org/download/bouncy-castle-java/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 63,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 6.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 34 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected: CodeQL",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 8
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 70,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.47,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1407
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "47 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 25.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 47,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"bom/build.gradle",
"build.gradle",
"core/build.gradle",
"jmail/build.gradle",
"mail/build.gradle",
"misc/build.gradle",
"mls/build.gradle",
"pg/build.gradle",
"pkix/build.gradle",
"prov/build.gradle",
"test/build.gradle",
"tls/build.gradle",
"util/build.gradle"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "bom/build.gradle, build.gradle, core/build.gradle (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "bom/build.gradle, build.gradle, core/build.gradle"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Java (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 1866290,
"source_files_sampled": 7893,
"oversized_source_files": 101
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "101/7893 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 7893,
"oversized": 101
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"example",
"examples"
],
"has_mcp_signal": false,
"api_schema_files": [
"mls/src/main/proto/mls_client.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "mls/src/main/proto/mls_client.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "mls/src/main/proto/mls_client.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example, examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example, examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T09:59:54.085292Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/bcgit/bc-java.svg",
"full_name": "bcgit/bc-java",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.