Public recordModerate
Software health reportschema 0.27.0 · metrics 2.5.0 · 2026-07-27 20:14 UTC
cloudfoundry / java-test-applications
Applications used for testing the Java buildpack
cloudfoundry/java-test-applications holds a health index of 59 out of 100, placing it in the Moderate band. It scores highest on Vitality (67/100) and lowest on Community & Adoption (48/100). It was last updated 11 days ago. A single contributor accounts for most of its recent work.
59
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
59
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 56 is calibrated to 59 on the published index scale (record calibration 2026-08-02).
Ownership
Cloud FoundryOrganization
743 followers571 public repossince Feb 2011
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
67
Development activity
51Moderate
How it's scored
| 28.8/36 | Push recency — last push 11 days ago |
| 1.4/36 | Commit cadence — 2/52 weeks with commits |
| 10.8/18 | Commit volume — 15 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 15 |
| human_commit_share | 1 |
| days_since_last_push | 11 |
| active_weeks_last_year | 2 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 2 releases published |
| 36/36 | Release recency — latest release 11 days ago |
| 27/27 | Release cadence — a release every ~0 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 2 |
| latest_release_tag | v1.0.0 |
| releases_from_tags | no |
| days_since_latest_release | 11 |
| mean_days_between_releases | 0 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
48
Popularity & adoption
47Weak
How it's scored
| 24.4/60 | Stars — 33 stars |
| 15.2/25 | Forks — 67 forks |
| 7.1/15 | Watchers — 20 watchers |
Inputs used
| forks | 67 |
| stars | 33 |
| watchers | 20 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| readme_badges | — |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| readme_badge_services | — |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
59
Maintainer resilience (bus factor)
32At Risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 2.2/22.5 | Commit distribution — top contributor authored 90% of commits |
| 10.8/13.5 | Contributor breadth — 8 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 10 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 8 |
| top_contributor_share | 0.902 |
How it's scored
| 42/42 | Issue resolution — 100% of issues closed |
| 20/30 | PR acceptance — 16/24 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 3/15 | OpenSSF Scorecard: Code-Review — Found 3/14 approved changesets -- score normalized to 2 |
Inputs used
| merged_prs | 16 |
| open_issues | 0 |
| closed_issues | 5 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 8 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
76Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 20.6/25 | Owner reach — 743 followers of cloudfoundry |
| 25/25 | Track record — 571 public repos, account ~15 yr old |
Inputs used
| followers | 743 |
| owner_type | Organization |
| is_verified | — |
| owner_login | cloudfoundry |
| public_repos | 571 |
| account_age_days | 5,640 |
Engineering Quality
Are baseline engineering and documentation practices in place?
49
Engineering practices
48Weak
How it's scored
| 24/24 | CI workflows — 2 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 5 merged PRs checked by a CI test -- score normalized to 0 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
53
Security posture
53Moderate
How it's scored
| 6/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — no data |
| 0/2.5 | CI-Tests — 0 out of 5 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 1.5/7.5 | Code-Review — Found 3/14 approved changesets -- score normalized to 2 |
| 2.5/2.5 | Contributors — project has 10 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 5.3 |
Excluded from scoring (no data or not applicable): branch_protection, packaging. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
50
Agent context & guidance
18Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 17.6/40 | Legible commit history — 33 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.33 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
56Moderate
How it's scored
| 12.6/18 | One-command bootstrap — build.gradle, core/build.gradle, dist-zip-application/build.gradle (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Java (statically typed) |
| 10/10 | Reproducible environment — Dockerfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | build.gradle, core/build.gradle, dist-zip-application/build.gradle, ejb-application/build.gradle, groovy-application/build.gradle, java-main-application-boot3/build.gradle, java-main-application/build.gradle, java-task-application/build.gradle, spring-common/build.gradle, web-application/build.gradle |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Exceptional
How it's scored
| 45/45 | Type-checkable code — Java (statically typed) |
| 55/55 | Manageable file sizes — 0/29 source files over 60KB |
Inputs used
| primary_language | Java |
| largest_source_bytes | 5,108 |
| source_files_sampled | 29 |
| oversized_source_files | 0 |
Key facts
33GitHub stars
8contributors
15commits, last 12 months
11days since last push
2releases
1bus factor
0open issues
Mavenpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 67 ⇿
0Stars
67Forks
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Each point covers 12 days.
OpenSSF Scorecard 5.3 / 10
5.3aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 8 | Binary-Artifacts | binaries present in source code |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 0 | CI-Tests | 0 out of 5 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 2 | Code-Review | Found 3/14 approved changesets -- score normalized to 2 |
| 10 | Contributors | project has 10 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
All dependencies 0
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 2783,
"has_wiki": true,
"homepage": null,
"languages": {
"Java": 47542,
"Shell": 505,
"Groovy": 989,
"Dockerfile": 329
},
"pushed_at": "2026-07-16T13:44:33Z",
"created_at": "2013-06-13T08:30:13Z",
"owner_type": "Organization",
"updated_at": "2026-07-16T13:42:20Z",
"description": "Applications used for testing the Java buildpack",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Java",
"significant_languages": [
"Java"
]
},
"owner": {
"blog": "https://www.cloudfoundry.org/",
"name": "Cloud Foundry",
"type": "Organization",
"login": "cloudfoundry",
"company": null,
"location": "Worldwide",
"followers": 743,
"avatar_url": "https://avatars.githubusercontent.com/u/621746?v=4",
"created_at": "2011-02-16T18:31:25Z",
"is_verified": null,
"public_repos": 571,
"account_age_days": 5640
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-07-16T13:44:33Z"
},
{
"tag": "v1.0.0-SNAPSHOT",
"kind": "prerelease",
"published_at": "2026-07-16T13:43:04Z"
}
],
"recent_commits": [
{
"oid": "21dcee6efc143b4d2d03f161239a56663b3c581e",
"body": "test: add Spring Boot context load smoke tests and fix @Autowired wiring",
"is_bot": false,
"headline": "Merge pull request #29 from stokpop/feature/smoke-tests",
"author_name": "Ramon Makkelie",
"author_login": "ramonskie",
"committed_at": "2026-07-16T13:41:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06e53284f4961522030ae8f4dfe88e67d2cbbfce",
"body": "Gradle's built-in 'version' property defaults to 'unspecified', making\nfindProperty('version') unreliable. Use custom 'releaseVersion' property\ninstead: -PreleaseVersion=X.Y.Z overrides the default 1.0.0-SNAPSHOT.\n\nUpdate release workflow, boot3 build.gradle, and RELEASE.md.",
"is_bot": false,
"headline": "fix: use releaseVersion property for version override in builds",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-16T13:21:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "615efbec37fe2c4e221f12fa807a12c234394613",
"body": "- actions/checkout v4 -> v7\n- actions/setup-java v4 -> v5\n- gradle/actions/setup-gradle v4 -> v6\n- softprops/action-gh-release v2 -> v3\n\nFixes Node.js 20 deprecation warnings.",
"is_bot": false,
"headline": "chore: bump GitHub Actions to latest major versions",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-16T13:08:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c2f5ca2d55ac669608f672edaad56cedd5155b3",
"body": "Replace subprocess-based smoke test with @SpringBootTest(webEnvironment=NONE).\nMuch simpler — Spring loads full context in-process, fails on wiring errors.\n\nRemove test.dependsOn(bootJar) and redundant CI smoke-test steps.\nCI workflows now use ./gradlew build (which runs tests) for all modules.",
"is_bot": false,
"headline": "refactor: simplify SmokeTest to @SpringBootTest context load",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-16T12:17:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b82ee5e6efb7955e274f58f6572b07a60e5e45e",
"body": "Add @Autowired on RuntimeUtils constructor — was never committed in\nPR #28, causes BeanCreationException on Spring 7.x with two constructors.\n\nImprove SmokeTest to read output line-by-line looking for 'Started'\nmarker then destroy the process. Handles apps that stay alive after\ncontext load (CI was killing orphan java process).\n\nUse java.home to resolve java binary (matches Gradle toolchain JDK).",
"is_bot": false,
"headline": "fix: add missing @Autowired and improve SmokeTest robustness",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-16T10:45:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41b822d4785d4d1e5e000735258b59c11655399b",
"body": "Add SmokeTest.java to java-main-application, java-task-application and\njava-main-application-boot3. Each test builds the boot jar via\ntest.dependsOn(bootJar), launches it as a subprocess with\n--spring.main.web-application-type=none and asserts exit code 0.\n\nUses java.home to resolve java binary (mat\n[…]\nava versions).\n\nUpdate CI workflows to run ./gradlew test (includes bootJar + smoke\ntest) instead of separate bootJar-only steps.\n\nUpgrade boot3 Gradle wrapper 8.14 to 9.6.1 for Java 25 compatibility.",
"is_bot": false,
"headline": "test: add boot jar smoke tests for all Spring Boot apps",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-16T10:25:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "595fa735f7bb0766ae394513f6c155a85118d768",
"body": "feat: add /active-profiles, /loaded-jars and /spring-env endpoints",
"is_bot": false,
"headline": "Merge pull request #28 from stokpop/feature/active-profiles-loaded-jars",
"author_name": "Ramon Makkelie",
"author_login": "ramonskie",
"committed_at": "2026-07-16T09:45:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4732f689aa88b699dfdc442e597269a59ec5f4c",
"body": "Adds three new endpoints to RuntimeUtils to improve buildpack integration\ntestability (see cloudfoundry/java-test-applications#27).\n\nGET /active-profiles\n Returns active Spring profiles as a JSON array, e.g. [\"cloud\"].\n Enables direct assertion that java-cfenv activated the cloud profile,\n withou\n[…]\nestCompileOnly -> testImplementation for spring-boot-starter-web\n (ResponseEntity required on test runtime classpath)\n- 11 RuntimeUtils tests, all green\n\nCloses cloudfoundry/java-test-applications#27",
"is_bot": false,
"headline": "feat: add /active-profiles, /loaded-jars and /spring-env endpoints",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-16T09:31:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5db00033c5a75831ccf902351a8eaf57121ce4bf",
"body": "chore: modernize project — remove outdated modules, upgrade to Spring Boot 4.1",
"is_bot": false,
"headline": "Merge pull request #26 from stokpop/modernize/spring-boot-upgrade",
"author_name": "Ramon Makkelie",
"author_login": "ramonskie",
"committed_at": "2026-07-15T16:13:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef367736bae0383c137dc979b117762d880967cb",
"body": "- workflow: remove -x test (run tests as quality gate before publishing)\n- README: clarify daemon note applies to root build, not boot3 standalone\n- Application.java: fix cf run-task example (use default start command)\n- AlternateMain.java: fix cf run-task example (use JBP_CONFIG_JAVA_MAIN + default start command)",
"is_bot": false,
"headline": "fix: address second round of PR review comments",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-10T10:42:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73987c81af4f916caffae12d5e4c9091df47a494",
"body": "- gradle.properties: use # comments (// is not valid .properties syntax)\n- README.md: correct Gradle/ASM/Java compatibility note\n (Gradle 9.6.1 ships ASM 9.9, supports Java 21-26; Java 27+ needs newer Gradle)\n- java-task-application/manifest.yml: use buildpack URL consistently\n- snapshot-release.yml: prune all .gradle dirs in find (not just root)\n- snapshot-release.yml: add java-task-application to release body table\n- version: rename 1.0.0.BUILD-SNAPSHOT -> 1.0.0-SNAPSHOT (standard convention)",
"is_bot": false,
"headline": "fix: address PR review comments",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-10T10:33:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "229a45d5673d23ab1cdae775bc6e1eceb748bfa2",
"body": null,
"is_bot": false,
"headline": "docs: add RELEASE.md with snapshot and fixed release instructions",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-10T10:18:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e249cce8969a9524f61534ebac21c853db0d77d0",
"body": "Builds all test applications on push and publishes artifacts\nto a rolling v1.0.0-SNAPSHOT GitHub release.\n\n- Java 21 (Temurin) for main multi-module build\n- Java 17 (Temurin) for java-main-application-boot3 standalone\n- Collects bootJar, bootWar, and dist-zip artifacts\n- Deletes and recreates v1.0.0-SNAPSHOT tag on each push\n- Release marked as pre-release (snapshot semantics)\n\nRelated: cloudfoundry/java-buildpack#1357",
"is_bot": false,
"headline": "ci: add snapshot release workflow",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-10T10:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a71591bc397e817c8936e2b7cfb15f8e46a499c",
"body": "Tests two java-buildpack main class mechanisms in one artifact:\n\n1. Spring Boot Start-Class detection — buildpack reads Start-Class\n from MANIFEST.MF (set by Spring Boot Gradle plugin) and runs\n Application.java via JarLauncher.\n\n2. JBP_CONFIG_JAVA_MAIN override — set:\n JBP_CONFIG_JAVA_MAIN:\n[…]\n plain Java main class (no Spring context).\n\nManifest uses:\n no-route: true\n health-check-type: process\n instances: 0 (push artifact, then cf run-task)\n\nRelated: cloudfoundry/java-buildpack#1357",
"is_bot": false,
"headline": "feat: add java-task-application for CF run-task testing",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-10T10:08:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1400c38ce5b4c2b6139a70acd0b07d3882bdb732",
"body": "… Boot 4.1\n\nRemove outdated modules:\n- ratpack-application (framework seems abandoned, last release 2021)\n- spring-boot-cli-application (spring grab removed in SB 3.x)\n- spring-boot-cli-jar-application (spring jar removed in SB 3.x)\n- web-servlet-2-application (Servlet 2 spec obsolete)\n\nUpgrade infr\n[…]\n Add buildpack reference to java-main-application-boot3\n\nUpdate README with module tables, build instructions, Java prereqs.\n\nUpdate copyright years to 2026.\n\nRelated: cloudfoundry/java-buildpack#1357",
"is_bot": false,
"headline": "chore: modernize project — remove outdated modules, upgrade to Spring…",
"author_name": "Peter Paul Bakker",
"author_login": "stokpop",
"committed_at": "2026-07-10T08:27:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e8e5c43eee655384c68e5a45c74a560bbe4507f",
"body": "Fix groovy to 2.5.x, as Ratpack 1.x won't work with groovy 3+",
"is_bot": false,
"headline": "Merge pull request #24 from cloudfoundry/fix-ratpack",
"author_name": "Daniel Mikusa",
"author_login": null,
"committed_at": "2022-04-29T19:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27056261e04aa1890b2da9b203bf5a4dd74b78da",
"body": "Signed-off-by: Daniel Mikusa <dmikusa@vmware.com>",
"is_bot": false,
"headline": "Fix groovy to 2.5.x, as Ratpack 1.x won't work with groovy 3+",
"author_name": "Daniel Mikusa",
"author_login": null,
"committed_at": "2022-04-29T19:24:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9286cd225264d2f4e495dc8da3881b10b35fc26",
"body": "Update Dependencies",
"is_bot": false,
"headline": "Merge pull request #23 from cloudfoundry/update-deps",
"author_name": "Daniel Mikusa",
"author_login": null,
"committed_at": "2022-04-29T15:57:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd7f7f2ac298867900010057fe75c62d073967b0",
"body": "- Migrates from JUnit4 to JUnit5 in tests\n\nSigned-off-by: Daniel Mikusa <dmikusa@vmware.com>",
"is_bot": false,
"headline": "Upgrade to latest Spring Boot & other deps",
"author_name": "Daniel Mikusa",
"author_login": null,
"committed_at": "2022-04-29T15:56:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d61f15a159dd4220dce964e3951db2fd1f32a74",
"body": "Signed-off-by: Daniel Mikusa <dmikusa@vmware.com>",
"is_bot": false,
"headline": "Remove idea files",
"author_name": "Daniel Mikusa",
"author_login": null,
"committed_at": "2022-04-29T15:51:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5dad53b5a511eb31abce24add94efa7bd72364e",
"body": "Signed-off-by: Daniel Mikusa <dmikusa@vmware.com>",
"is_bot": false,
"headline": "Upgrade gradle wrapper to latest & migrate grade files",
"author_name": "Daniel Mikusa",
"author_login": null,
"committed_at": "2022-04-29T15:46:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "668ea356810dbec30cd8ebdbb07d5871954332e3",
"body": "Signed-off-by: Ben Hale <bhale@vmware.com>",
"is_bot": false,
"headline": "Include Reactive Streams",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2020-11-09T17:44:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e58124efbfc6fed26143ca04ee65ad043c2b759",
"body": "Signed-off-by: Ben Hale <bhale@vmware.com>",
"is_bot": false,
"headline": "Dockerfile Update",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2020-11-09T16:12:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ce4cd899182bcb89fc6741e81141e7239b61544",
"body": "Signed-off-by: Ben Hale <bhale@vmware.com>",
"is_bot": false,
"headline": "Remove Service Tests",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2020-11-06T22:06:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cdfb3b985dd829d6d072727d3f420f19a26c9575",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Dependency Updates",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-12-23T16:37:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6488356563be75247b77672d9f4dc5dc2839ce32",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-07-15T19:11:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fd3312342196be924a60a059e3a4f181032778a",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-05-28T14:40:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acac20e32e5ffbda1aefd435cc25525fb580e235",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "HTTPS Only",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-05-28T14:40:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e39f04472f99314d8997426e4c19c26bcca998db",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-05-09T20:56:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99f50a94a155ed6b34355921e5c7e2a12caef165",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-05-09T20:54:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3bbc9f79678df75fd11475673927c4e966bebdc",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-04-05T23:24:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1490a7ad914c2fd7059a5617ad89108efb202c7d",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-04-05T23:24:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9066c0c275d4f0b188865dcad675b3b5240c09a2",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-04-05T23:21:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4aadafa1166a7459f4710da70c719b427f2b7ea",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-04-05T23:21:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59c92943c037e628fa671a6317776374e765a46b",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-04-05T23:10:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b042410cf637af6e1268cec5283245b5b09e0a1a",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-04-05T23:09:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e9dd33fe8eca685cd775a2cb738d569683431c8",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-04-05T21:33:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3c4e4955d642f83ec04b4f4f0e0744b9ff0e789",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-04-05T21:33:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38def56eb13be31edabc92925f564a6a3a677ede",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Spring Boot 2.1.3.RELEASE",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-03-14T22:19:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce7cf39453f6d72cdcbb5dcdccc789d7dd3de044",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-03-14T19:20:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "771099c32752a58ba9ec3de6899162e0cc4fdc4f",
"body": "Previously, all DataSources exposed by SCC were their native types. With a\nrecent change, an intermediate DataSource type was exposed. The tests were\nnot prepared for this and could not extract URLs from it. This change change\nupdates the test harness to handle this new type.\n\nSigned-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Handle SCC UrlDecodingDataSource",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-03-14T19:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daab078afa390624e75d5410d39bbb4820fe1f65",
"body": "Previously, all DataSources exposed by SCC were their native types. With a\nrecent change, an intermediate DataSource type was exposed. The tests were\nnot prepared for this and could not extract URLs from it. This change change\nupdates the test harness to handle this new type.\n\nSigned-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Handle SCC UrlDecodingDataSource",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-03-14T17:54:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7c55b74cb13eda5f1a1f77ec748ed3072cf2997",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-01-30T18:44:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fa99186338813b4f4603c684593cc73f89aed77",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Dependency Updates",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-01-30T18:38:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "386f600ea6e672c70aa3089ceca454bc7056136a",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Spring Boot 2.1.2",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-01-30T18:09:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4568e00de436069666c1a96092ac4206c9c30e74",
"body": "Signed-off-by: Ben Hale <bhale@pivotal.io>",
"is_bot": false,
"headline": "Copyright Update",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2019-01-08T18:04:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afa6bdd215a70c129922426c4eec845dc24a29dd",
"body": null,
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2018-07-23T22:44:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8898c1c08b9eb5a01b14ca5f3967f43a64b88ce",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2018-05-16T00:10:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "129e233a73416c2ab148e8ed557711c3f231ff9b",
"body": null,
"is_bot": false,
"headline": "Dependency Updates",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2018-05-16T00:03:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "361e2a1181c56d083f8c41b368fe8f6a16632c35",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2018-01-31T19:32:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "307ee733206521fb6f2b71b353ce95db71f1cd20",
"body": null,
"is_bot": false,
"headline": "Dependency Updates",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2018-01-31T19:27:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c587eb36ecea5529b8a044a85555b46a2700abce",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2018-01-17T20:20:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e72b35b5c96b01cbdfee0bc551ca0639752f809d",
"body": null,
"is_bot": false,
"headline": "Copyright Updates",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2018-01-17T20:17:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eee8f3f6c6c57e51fa3a514cc7c263ccbf8f7d18",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-12-11T17:29:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c5f204cbc3c95fa8f15fc3008a866865123959d",
"body": null,
"is_bot": false,
"headline": "Dependency Updates",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-12-11T17:27:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82c21bd1282665994bdbc3cf511124437e898709",
"body": null,
"is_bot": false,
"headline": "Snapshot Updates",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-30T18:25:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e0e19b10cc2a9c7a9548cf167521f74acac3b81",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-30T18:24:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de1ed4dbe429822f7e6214432a1426c5f677e7af",
"body": null,
"is_bot": false,
"headline": "Gradle Upgrade",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-30T18:24:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "195365ec07bf7c3a19e70abd2719f436d7cc20cb",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-29T16:36:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40049fdac0babe7bc6db8985e3d06f7de0de045c",
"body": null,
"is_bot": false,
"headline": "Missing Dependencies",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-29T16:34:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3922a7b93e0abed1d94c088d67c2b15d1333ec59",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-29T00:05:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "559253f60b6c5b0facbbbd57b7d6377a04159ae7",
"body": null,
"is_bot": false,
"headline": "Merge branch 'servlet-api-dependency' into 1.x",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-29T00:03:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35b2b04d9a653fef1c22d1c768661edf7e2a4ac7",
"body": "Previously, the servlet-api was included via a Tomcat dependency. This was\nunnecessary and sloppy. This change updates the dependency to be directly on\nthe servlet-api as needed.",
"is_bot": false,
"headline": "Servlet API Cleanup",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-29T00:03:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be9ee14fee4e20d84c10c95f97eca1d4ef753f57",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-10T17:54:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1ad01bef5b530305400f7efbfe0b84846c8bf27",
"body": null,
"is_bot": false,
"headline": "Remove Hibernate Validator to Placate TomEE",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-10T17:52:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc72478cebbe8fa1fa4300c6a4f91d660d64e34c",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-09T17:38:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3954b91d6c3a1c8e6d5decba013855593ec662f",
"body": null,
"is_bot": false,
"headline": "Exclude Tomcat WebSockets to Placate Wildfly",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-09T17:34:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef9ba7000244acb0b76cc0987c9f8aed66a07e42",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-09T16:50:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c31ee070368539198db3a8455a6b39330e4cd583",
"body": null,
"is_bot": false,
"headline": "Pin Spring Boot Version for CLI Applications",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-09T16:49:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01190066f3620ac7c9a5ec31ba1c7f1901af6284",
"body": null,
"is_bot": false,
"headline": "Merge branch '1.x'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-08T23:34:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ff4f55844a476997cc7671bc74b1867f42c8d7f",
"body": null,
"is_bot": false,
"headline": "Support Boot 1 and Boot 2 CLI Applications",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-08T23:33:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c111adf4014a82846b70cc70e841485ccffd27b1",
"body": "This change updates the dependencies used by the test applications to match\nthe Boot 2.x dependencies.",
"is_bot": false,
"headline": "Update to Boot 2",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-07T22:20:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cd0779b6d32d329dd3a672f8002bfc3c34c5c36",
"body": "This change simplifies the test applications, utilizing the Spring platform\nreleases to ensure that a coherent set of dependencies is always used.",
"is_bot": false,
"headline": "Simplify test applications",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-11-07T22:16:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab690d44ab6ff18c5ab380b6db16273d4cde744e",
"body": null,
"is_bot": false,
"headline": "More prudent when linking caches",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-07-17T15:57:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17b147de3089ce3adb722e23ce82eb97cbf2a027",
"body": null,
"is_bot": false,
"headline": "Simpler Concourse Caching",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-07-04T13:17:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b648010a6584f296d377aa55a4e1873868a4c4e",
"body": "This reverts commit c528827f7ac80e11bda3d3778b047ec3b927f4f2.",
"is_bot": false,
"headline": "Revert \"Polishing\"",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-07-04T11:06:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e2c9f4bebc3720810e9b11f54142e932203e0b1",
"body": "This change removes the mention of a Play Framework application. It also adds\nthe EJB-based application that has existed for some time.\n\n[resolves #20]",
"is_bot": false,
"headline": "Remove Play Application Mention",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-07-04T09:55:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c528827f7ac80e11bda3d3778b047ec3b927f4f2",
"body": null,
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-07-04T08:58:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90b919935f5030715431bdcc8fffb68163fe24d9",
"body": null,
"is_bot": false,
"headline": "Add Concourse Caching",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-07-04T08:55:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e40f0e297bd0db37ddf6498991da766607b5fcc",
"body": null,
"is_bot": false,
"headline": "Use the default container size",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-03-09T18:13:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3a7c729c91edadd5818c4f36c8003e41f1c155a",
"body": "In preparation for a new version of the memory calculator that requires more\nmemory, the sample applications have been updated with the new effective\nminimum.\n\n[cloudfoundry/java-buildpack#135936599]",
"is_bot": false,
"headline": "Update Container Memory",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-03-02T16:14:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "568da7c2b93388783a237354e0ed6cef964a50e7",
"body": null,
"is_bot": false,
"headline": "Polishing",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-02-06T22:09:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85fbfc0e8feae437f6b1b51e67a7e2b4be1f3692",
"body": null,
"is_bot": false,
"headline": "NOTICE file update",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2017-01-26T23:44:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3067f375e6f9a2aca0fe51e2fa9ec038236a7251",
"body": "This change updates to the official Java Docker image.",
"is_bot": false,
"headline": "Update Java Docker Image",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-12-13T22:33:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d0dc988bb60492b6ecd79a5f695ddce390860fc",
"body": "We no longer need Java 7 CI support. This change removes it.",
"is_bot": false,
"headline": "Remove Java 7 CI support",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-10-12T21:54:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc062bd7a01daf0b165717eb64d249a3684dec71",
"body": "This commit removes any reference to the Grails application that was deleted earlier in 2016. This is to avoid confusion with users.\n\n[finishes #131978235]",
"is_bot": false,
"headline": "Remove references to Grails in the Readme",
"author_name": "Christopher Frost",
"author_login": null,
"committed_at": "2016-10-10T12:36:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49a6bc136d47c66f45220749dad109b598574977",
"body": "This change adds support for another DataSource type. This is to accomodate\nthe DataSource in TomEE.",
"is_bot": false,
"headline": "Additional datasource support",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-10-05T17:32:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ba61f0e11d9ddff1022bb5117dbbbd998ddcab3",
"body": "This change adds a new library to the docker image in the hopes that it fixes\nproblems with Gradle.",
"is_bot": false,
"headline": "More Docker Image Updates",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-10-03T22:51:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fae11ac6aeeef297fe36ab2245a0aa5061b248c",
"body": "This change updates some of the versions in the docker images.",
"is_bot": false,
"headline": "Version Updates",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-10-03T22:37:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d7c11588b0a189d7da00951a91cad343a2c1714",
"body": "This change updates the project to use Gradle 3.1.",
"is_bot": false,
"headline": "Gradle Update",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-10-03T21:54:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2a98fcc497b94c8ce0482b212bd2d0ab013ab62",
"body": "This change updates all of the dependencies (except Gradle) to their latest\nversions.",
"is_bot": false,
"headline": "Dependency Updates",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-10-03T21:49:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ba3a8780dc00aed27f2e9c6c1a8f20973be63ba",
"body": "This reverts commit e5669ad4b9920f7e1d282db93cb49f296c701155.",
"is_bot": false,
"headline": "Revert \"Correct build instructions\"",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-09-22T18:15:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62cd889b8b23babf2b099f0cce1c79ecd0fc8cbf",
"body": "This change splits the unit tests into two versions, one for Java 7 and one\nfor Java 8. This is to facilitate unit testing the test applications for both\nversions of Java.",
"is_bot": false,
"headline": "Unit Test on Java 7 and Java 8",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-08-10T14:33:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78264f1fa3fba7b77964150150ad77832a6e604d",
"body": "This change splits the build into two versions, one for Java 7 and one for\nJava 8. This is to facilitate building the test applications for both\nversions of Java.",
"is_bot": false,
"headline": "Build on Java 7 and Java 8",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-08-10T14:31:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "016b80e36f6a643e795e58f3371696d810d2eb47",
"body": "Previously there was only a single docker image for building the test\napplications. As some testing must be done on Java 7, we need a second Docker\nfile for Java 7.",
"is_bot": false,
"headline": "Create Java 7 and Java 8 Docker files",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-08-10T14:25:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c36df143fdaf2640c01acca551f95844d6e23a6b",
"body": "This change updates the version of Spring Boot in the docker image to the\nlatest version.",
"is_bot": false,
"headline": "Spring Boot Upgrade",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-08-10T13:47:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c248f4085048ee21d2e72f6eba66972a9ba8c853",
"body": null,
"is_bot": false,
"headline": "Merge branch 'version-updates'",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-08-08T19:51:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5070ebcf3da21d38b956e8ab54610de1943591af",
"body": "This change updates the IntelliJ artifacts for the projects.",
"is_bot": false,
"headline": "Update IntelliJ artifacts",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-08-08T19:51:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "096f2fbad266668fb9885c0f22f32fdc8f586a95",
"body": "This change updates Spring Boot to the latest version.",
"is_bot": false,
"headline": "Upgrade Spring Boot",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-08-08T19:45:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "199d07e1ddd715a8fc8e2d784d98902bb6f6ee49",
"body": "This change updates the Platform BOM to the latest version.",
"is_bot": false,
"headline": "Upgrade Platform BOM",
"author_name": "Ben Hale",
"author_login": "nebhale",
"committed_at": "2016-08-08T19:43:29Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 2,
"commits_last_year": 15,
"latest_release_at": "2026-07-16T13:44:33Z",
"latest_release_tag": "v1.0.0",
"releases_from_tags": false,
"days_since_last_push": 11,
"active_weeks_last_year": 2,
"days_since_latest_release": 11,
"mean_days_between_releases": 0
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 67,
"stars": 33,
"watchers": 20,
"fork_history": {
"days": [
{
"date": "2013-11-06",
"count": 1
},
{
"date": "2013-11-19",
"count": 1
},
{
"date": "2013-12-12",
"count": 1
},
{
"date": "2014-02-05",
"count": 1
},
{
"date": "2014-03-12",
"count": 1
},
{
"date": "2014-05-07",
"count": 1
},
{
"date": "2014-06-16",
"count": 1
},
{
"date": "2014-07-27",
"count": 1
},
{
"date": "2014-08-14",
"count": 1
},
{
"date": "2014-10-05",
"count": 2
},
{
"date": "2014-12-23",
"count": 1
},
{
"date": "2015-01-29",
"count": 1
},
{
"date": "2015-05-04",
"count": 1
},
{
"date": "2015-05-05",
"count": 1
},
{
"date": "2015-05-15",
"count": 1
},
{
"date": "2015-07-30",
"count": 1
},
{
"date": "2015-08-27",
"count": 1
},
{
"date": "2015-12-01",
"count": 1
},
{
"date": "2015-12-11",
"count": 1
},
{
"date": "2015-12-17",
"count": 1
},
{
"date": "2016-05-16",
"count": 1
},
{
"date": "2016-05-29",
"count": 1
},
{
"date": "2016-09-08",
"count": 1
},
{
"date": "2016-11-30",
"count": 1
},
{
"date": "2016-12-29",
"count": 1
},
{
"date": "2017-01-16",
"count": 1
},
{
"date": "2017-01-19",
"count": 1
},
{
"date": "2017-01-25",
"count": 1
},
{
"date": "2017-03-01",
"count": 1
},
{
"date": "2017-03-06",
"count": 1
},
{
"date": "2017-03-14",
"count": 1
},
{
"date": "2017-04-05",
"count": 1
},
{
"date": "2017-05-15",
"count": 1
},
{
"date": "2017-08-28",
"count": 1
},
{
"date": "2017-12-13",
"count": 1
},
{
"date": "2017-12-17",
"count": 1
},
{
"date": "2018-01-10",
"count": 1
},
{
"date": "2018-01-12",
"count": 1
},
{
"date": "2018-04-20",
"count": 1
},
{
"date": "2018-06-15",
"count": 1
},
{
"date": "2018-06-20",
"count": 1
},
{
"date": "2018-07-25",
"count": 1
},
{
"date": "2018-07-27",
"count": 1
},
{
"date": "2018-12-14",
"count": 1
},
{
"date": "2019-01-10",
"count": 1
},
{
"date": "2019-01-17",
"count": 1
},
{
"date": "2019-02-07",
"count": 1
},
{
"date": "2019-07-29",
"count": 1
},
{
"date": "2019-10-03",
"count": 1
},
{
"date": "2019-11-19",
"count": 1
},
{
"date": "2020-12-09",
"count": 1
},
{
"date": "2020-12-18",
"count": 1
},
{
"date": "2021-06-08",
"count": 1
},
{
"date": "2022-02-10",
"count": 1
},
{
"date": "2023-08-29",
"count": 1
},
{
"date": "2023-08-30",
"count": 1
},
{
"date": "2023-08-31",
"count": 1
},
{
"date": "2023-09-30",
"count": 2
},
{
"date": "2023-11-14",
"count": 1
},
{
"date": "2024-10-08",
"count": 1
},
{
"date": "2025-02-21",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
}
],
"complete": true,
"collected": 64,
"total_forks": 67
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"build.gradle",
"core/build.gradle",
"dist-zip-application/build.gradle",
"ejb-application/build.gradle",
"groovy-application/build.gradle",
"java-main-application-boot3/build.gradle",
"java-main-application/build.gradle",
"java-task-application/build.gradle",
"spring-common/build.gradle",
"web-application/build.gradle"
],
"largest_source_bytes": 5108,
"source_files_sampled": 29,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"build.gradle",
"core/build.gradle",
"dist-zip-application/build.gradle",
"ejb-application/build.gradle",
"groovy-application/build.gradle",
"java-main-application-boot3/build.gradle",
"java-main-application/build.gradle",
"java-task-application/build.gradle",
"spring-common/build.gradle",
"web-application/build.gradle"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 16,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 5,
"closed_unmerged_prs": 8
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "nebhale",
"commits": 257,
"avatar_url": "https://avatars.githubusercontent.com/u/60754?v=4"
},
{
"type": "User",
"login": "stokpop",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/8797018?v=4"
},
{
"type": "User",
"login": "ramnivas",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/137002?v=4"
},
{
"type": "User",
"login": "ramonskie",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/1135244?v=4"
},
{
"type": "User",
"login": "glyn",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/94953?v=4"
},
{
"type": "User",
"login": "cgfrost",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/166104?v=4"
},
{
"type": "User",
"login": "scottfrederick",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/60661?v=4"
},
{
"type": "User",
"login": "violetagg",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/696661?v=4"
}
],
"contributors_sampled": 8,
"top_contributor_share": 0.902
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"release.yml",
"snapshot-release.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 8,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 5 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 3/14 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 10 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "21dcee6efc143b4d2d03f161239a56663b3c581e",
"ran_at": "2026-07-27T20:14:36Z",
"aggregate_score": 5.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-16T13:44:44Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-16T13:41:43Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/cloudfoundry/java-test-applications",
"host": "github.com",
"name": "java-test-applications",
"owner": "cloudfoundry"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 56 is calibrated to 59 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 56,
"calibrated": 59,
"calibration": "2026-08-02"
}
}
],
"value": 59,
"inputs": {
"security": 53,
"vitality": 67,
"community": 48,
"governance": 59,
"calibration": "2026-08-02",
"engineering": 49,
"ai_readiness": 50,
"weighted_overall_raw": 56
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 67,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"commits_last_year": 15,
"human_commit_share": 1,
"days_since_last_push": 11,
"active_weeks_last_year": 2
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 11 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "2/52 weeks with commits",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 2
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "15 commits in the last year",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 15
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 2,
"latest_release_tag": "v1.0.0",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 19,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 19 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 19
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 48,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"forks": 67,
"stars": 33,
"watchers": 20,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "33 stars",
"points": 24.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 33
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "67 forks",
"points": 15.2,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 67
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "20 watchers",
"points": 7.1,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 20
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 59,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 8,
"top_contributor_share": 0.902
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 90% of commits",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 90
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "8 contributors",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 8
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 75,
"inputs": {
"merged_prs": 16,
"open_issues": 0,
"closed_issues": 5,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 8,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "16/24 decided PRs merged",
"points": 20,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 16,
"decided": 24
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 3/14 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"followers": 743,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "cloudfoundry",
"public_repos": 571,
"account_age_days": 5640
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "743 followers of cloudfoundry",
"points": 20.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 743,
"login": "cloudfoundry"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "571 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 571
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "weak",
"name": "Engineering Quality",
"value": 49,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "weak",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 5 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 53,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 53,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 5 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 3/14 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 50,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 18,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.33,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "33 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 17.6,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 33,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"build.gradle",
"core/build.gradle",
"dist-zip-application/build.gradle",
"ejb-application/build.gradle",
"groovy-application/build.gradle",
"java-main-application-boot3/build.gradle",
"java-main-application/build.gradle",
"java-task-application/build.gradle",
"spring-common/build.gradle",
"web-application/build.gradle"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "build.gradle, core/build.gradle, dist-zip-application/build.gradle (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "build.gradle, core/build.gradle, dist-zip-application/build.gradle"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Java (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 5108,
"source_files_sampled": 29,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/29 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 29,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [],
"labels": [],
"scores": {},
"primary": null,
"evidence": [],
"artifacts": [],
"confidence": "none",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": false
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T20:14:52.244721Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/cloudfoundry/java-test-applications.svg",
"full_name": "cloudfoundry/java-test-applications",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.