doorkeeper-gem/doorkeeper-openid_connect holds a health index of 77 out of 100, placing it in the Good band. It scores highest on Vitality (87/100) and lowest on AI Readiness (61/100). It was last updated today. 2 contributors account for most of its recent work.
77
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
77
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Type-checkable code — Ruby without a type-check config
55/55
Manageable file sizes — 0/106 source files over 60KB
Inputs used
primary_language
Ruby
largest_source_bytes
33,692
source_files_sampled
106
oversized_source_files
0
Key facts
216GitHub stars
57contributors
241commits, last 12 months
0days since last push
21releases
2bus factor
9open issues
RubyGemspackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
No resolved dependencies carried a version and a supported ecosystem
More detail
Star and fork history 0 ★ / 131 ⇿
0Stars
131Forks
21Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 3Patch 17
Each point covers 11 days.
OpenSSF Scorecard 7.3 / 10
7.3aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-27 18:21 UTC
Full resolved dependency set from the GitHub dependency graph: 1 direct and 16 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
RubyGems
rails-controller-testing
—
direct
RubyGems
bigdecimal
—
indirect
RubyGems
conventional-changelog
—
indirect
RubyGems
doorkeeper
—
indirect
RubyGems
drb
—
indirect
RubyGems
factory_bot
—
indirect
RubyGems
jwt
—
indirect
RubyGems
mutex_m
—
indirect
RubyGems
ostruct
—
indirect
RubyGems
pry-byebug
—
indirect
RubyGems
puma
—
indirect
RubyGems
rspec-rails
—
indirect
RubyGems
rubocop
—
indirect
RubyGems
rubocop-performance
—
indirect
RubyGems
rubocop-rails
—
indirect
RubyGems
rubocop-rspec
—
indirect
RubyGems
sqlite3
—
indirect
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"doorkeeper",
"openidconnect",
"openid-provider",
"oauth"
],
"is_fork": false,
"size_kb": 1442,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 736,
"HTML": 22211,
"Ruby": 297326,
"Shell": 131,
"JavaScript": 741
},
"pushed_at": "2026-07-27T10:47:57Z",
"created_at": "2014-06-10T21:32:07Z",
"owner_type": "Organization",
"updated_at": "2026-07-27T10:15:34Z",
"description": "OpenID Connect extension for Doorkeeper",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Ruby",
"significant_languages": [
"Ruby"
]
},
"owner": {
"blog": null,
"name": "doorkeeper gem",
"type": "Organization",
"login": "doorkeeper-gem",
"company": null,
"location": null,
"followers": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/7275750?v=4",
"created_at": "2014-04-12T20:41:06Z",
"is_verified": null,
"public_repos": 11,
"account_age_days": 4488
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.10.5",
"kind": "patch",
"published_at": "2026-07-14T14:21:42Z"
},
{
"tag": "v1.10.4",
"kind": "patch",
"published_at": "2026-07-07T06:55:54Z"
},
{
"tag": "v1.10.3",
"kind": "patch",
"published_at": "2026-06-23T11:09:58Z"
},
{
"tag": "v1.10.2",
"kind": "patch",
"published_at": "2026-06-22T11:12:30Z"
},
{
"tag": "v1.10.1",
"kind": "patch",
"published_at": "2026-06-03T13:42:59Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-06-01T07:29:32Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-03-16T14:06:01Z"
},
{
"tag": "v1.8.11",
"kind": "patch",
"published_at": "2025-02-10T10:16:56Z"
},
{
"tag": "v1.8.10",
"kind": "patch",
"published_at": "2024-11-29T15:40:32Z"
},
{
"tag": "v.1.8.9",
"kind": "other",
"published_at": "2024-05-07T09:36:11Z"
},
{
"tag": "v1.8.8",
"kind": "patch",
"published_at": "2024-02-26T08:11:45Z"
},
{
"tag": "v1.8.7",
"kind": "patch",
"published_at": "2023-05-18T07:04:37Z"
},
{
"tag": "v1.8.6",
"kind": "patch",
"published_at": "2023-05-12T06:30:28Z"
},
{
"tag": "v1.8.5",
"kind": "patch",
"published_at": "2023-04-17T06:40:32Z"
},
{
"tag": "v1.8.4",
"kind": "patch",
"published_at": "2023-02-01T08:07:24Z"
},
{
"tag": "v1.8.3",
"kind": "patch",
"published_at": "2022-12-02T07:13:38Z"
},
{
"tag": "v1.8.2",
"kind": "patch",
"published_at": "2022-07-13T08:37:18Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2022-02-09T11:13:42Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2021-05-11T08:11:30Z"
},
{
"tag": "v1.7.5",
"kind": "patch",
"published_at": "2020-12-16T10:54:16Z"
},
{
"tag": "v1.7.2",
"kind": "patch",
"published_at": "2020-05-20T10:32:00Z"
}
],
"recent_commits": [
{
"oid": "5843055b989382b472fa3a12dc42f722d4432baf",
"body": "Follow-up to #351: compute at_hash from the plaintext access token",
"is_bot": false,
"headline": "Merge pull request #355 from 55728/fix/at-hash-plaintext-token",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-27T10:14:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb4ea91c75dbb224259a7b13a250f2fec1de0d57",
"body": "Align discovery and DCR responses with RFC 7591 / RFC 7033",
"is_bot": false,
"headline": "Merge pull request #350 from 55728/fix/discovery-dcr-compliance",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-27T10:13:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a18976afa7eb54a3bba14214c72a6871305a0bd",
"body": "Remove stale TODO/FIXME markers and the dead compat code behind them",
"is_bot": false,
"headline": "Merge pull request #354 from 55728/chore/prune-stale-todo-fixme",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-27T07:59:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26e1cfd544b3d0284baeb2f60eac192e6af185b8",
"body": "With a hashing token-secret strategy (hash_token_secrets) the stored\n`token` is a digest while the client receives the plaintext value, so\nan at_hash computed over the stored value never matches what a\nconforming RP derives from the access token it received (OIDC Core\n§3.2.2.9), and ID Token validat\n[…]\nhash over\n`plaintext_token` instead — the same alignment #351 applied to the\n`id_token token` response body. With the default plain strategy\n`plaintext_token == token`, so behavior there is unchanged.",
"is_bot": false,
"headline": "Compute at_hash from the plaintext access token",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-25T01:28:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "441bea350f9a6e82087b56655feac1ca41e0afb2",
"body": null,
"is_bot": false,
"headline": "Add CHANGELOG entry for the stale TODO/FIXME cleanup",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-24T14:08:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53e9dbe2dd9bd7041ebd1ab7bf7a9521efaf880f",
"body": "The line was marked \"FIXME: workaround for Rails 5\", but\nrails/rails#25106 is still present in Rails 8: response_body = nil only\nresets the response object's body and leaves @_response_body assigned,\nwhich would keep performed? returning true. Replace the FIXME with a\ncomment stating the constraint so the line doesn't read as removable.",
"is_bot": false,
"headline": "Explain why clearing @_response_body is still required",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-24T14:08:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59643bb3c7112eef9154f773b2487ccee94e16c5",
"body": "The id_token and id_token token flows have been registered by this gem\nfor years, and response_types_supported is built dynamically from\ndoorkeeper.authorization_response_types, so the discovery document\nalready advertises whatever the host application enables.",
"is_bot": false,
"headline": "Drop the stale \"support id_token response type\" TODO",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-24T14:07:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c511187dcef415ed2c8ae0ac3e3e9f62eaaa79e",
"body": "issue_token! exists on every installable version — the gemspec floor is\ndoorkeeper >= 5.5 and the rename shipped in 5.4 — so the method_defined?\nguard in OAuth::Authorization::Code, the FIXME'd issue_token fallback\nbranch it selected, and the respond_to?(:issue_token!) checks in\nIdTokenRequest and the id_token response specs were all dead code, dating\nback to 430413d (\"Add support for Doorkeeper 5.4\").\n\nThe public issue_token alias is kept, so the gem's API is unchanged.",
"is_bot": false,
"headline": "Remove the Doorkeeper < 5.4 issue_token compatibility paths",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-24T14:07:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "348dfe17ed11fa77ee0822f7c5113942ca1f6094",
"body": "Added in 430413d (\"Add support for Doorkeeper 5.4\") with a FIXME to\nremove it once Doorkeeper merged the same memoization. Doorkeeper did,\nin 5.5.0 (doorkeeper#1410) — the gemspec floor — so the identical\ndefined? check now lives upstream on every supported version and the\nprepended override was redundant.",
"is_bot": false,
"headline": "Drop the redundant current_resource_owner override",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-24T14:07:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "854d5cf13ebfbde99b677292295cfe733409d142",
"body": "Align OIDC token/authorization responses with doorkeeper core",
"is_bot": false,
"headline": "Merge pull request #351 from 55728/fix/token-response-core-alignment",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-24T10:23:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea5aba4886bf4cccaf057ca16a1f8f10912c500a",
"body": "Harden the OIDC authorization endpoint against malformed requests",
"is_bot": false,
"headline": "Merge pull request #348 from 55728/fix/authorization-endpoint-hardening",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-24T10:19:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec200443289b96b4c1b3e0f0953361f0f02f1346",
"body": "Potential fix for code scanning alert no. 3: Workflow does not contain permissions",
"is_bot": false,
"headline": "Merge pull request #352 from doorkeeper-gem/alert-autofix-3",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-23T11:11:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7666bf26ea1dfe0835bf607234bd3ac8a48b984f",
"body": "…n permissions\n\nCo-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>",
"is_bot": false,
"headline": "Potential fix for code scanning alert no. 3: Workflow does not contai…",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-23T11:05:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "61201efafd0f864e54d5e8457cbdb3a077c55460",
"body": "Omit symmetric (oct) keys from the JWKS endpoint",
"is_bot": false,
"headline": "Merge pull request #347 from 55728/fix/jwks-omit-oct-keys",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-23T10:12:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e758f69e86fa1af76e2153ce7933d159bae7a4bd",
"body": "Allow Doorkeeper 6.0",
"is_bot": false,
"headline": "Merge pull request #334 from 55728/compat/doorkeeper-6-cap",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-23T08:35:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93f8830406f2fac106e84d3fe3e752dbe8d82771",
"body": "Tests only - Add specs for uncovered branches reachable on current Doorkeeper",
"is_bot": false,
"headline": "Merge pull request #346 from 55728/test/coverage-branch-gaps",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-23T08:28:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf4bea48818f734a89a842b90b6a6544633fa298",
"body": "Close the coverage gaps that correspond to real, reachable behavior:\n\n- Implicit flow end-to-end through AuthorizationsController: approving\n response_type=id_token and 'id_token token' (fragment redirect, nonce,\n aud, at_hash per OIDC Core 3.2.2.9) and denying via #destroy\n (access_denied in the\n[…]\niscovery routes drawn because\nJourney::Routes#clear does not invalidate the memoized recognition\ncache (actionpack 8.0.5); only add_route does, so an empty redraw would\nleave stale recognition behind.",
"is_bot": false,
"headline": "Add specs for uncovered branches reachable on current Doorkeeper",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-21T12:18:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f734f9f36b6f400a22dfa40c841191f505569b5d",
"body": "…/actions/checkout-7\n\nBump actions/checkout from 3 to 7",
"is_bot": false,
"headline": "Merge pull request #343 from doorkeeper-gem/dependabot/github_actions…",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-20T07:50:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5528c5307caedceafea49c84765030b69b2a7279",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v3...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 3 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T07:46:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d2ac3cccdd2af159c5b2ba0de339384436bd2ac8",
"body": "ci: pin changelog-enforcer to v3.7.0 (node24 build)",
"is_bot": false,
"headline": "Merge pull request #342 from 55728/ci/pin-changelog-enforcer-v3.7.0",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-20T07:46:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5b3bef4561fc339c26f4de8d20b69b7fdc18dec",
"body": "Use Doorkeeper's `application_class` config for dynamic client registration",
"is_bot": false,
"headline": "Merge pull request #341 from hzm-s/feature/use_doorkeeper_config_for_dcr",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-20T07:23:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3277810c0f69fac54ecb0fc4d3284c5f4750975e",
"body": "…tion",
"is_bot": false,
"headline": "Use Doorkeeper's application_class config for dynamic client registra…",
"author_name": "Hajime Sueyoshi",
"author_login": "hzm-s",
"committed_at": "2026-07-20T07:07:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07ceb45afe61de636720c4868258aecd828aa8af",
"body": null,
"is_bot": false,
"headline": "ci: indent steps items to match other workflows",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-20T06:40:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4b80c08d08014fa263caa8359d74e9a4281ad17",
"body": "Dependabot labels its PRs \"dependencies\" automatically; those bumps\ndon't need a changelog entry, so the enforcer now skips that label.\n\"Skip-Changelog\" (the action's default) is kept as a manual escape\nhatch for other PRs.",
"is_bot": false,
"headline": "ci: let Dependabot watch GitHub Actions, skip changelog check for it",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-20T06:23:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cf32c1789fa6ef7559663ee225142abb897f418",
"body": "The floating v3 tag still resolves to a node20 build of the action,\nwhich triggers GitHub's Node 20 deprecation warning on every run of\nthe changelog job. v3.7.0 is built with node24.",
"is_bot": false,
"headline": "ci: pin changelog-enforcer to v3.7.0 (node24 build)",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-20T06:20:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "916be1c431d3d6e39b275847c93613429c6e3149",
"body": "Add escape hatches for ID Token and User Info classes",
"is_bot": false,
"headline": "Merge pull request #335 from XIVAuth/claim-escape-hatch",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-19T05:44:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4fd8617bc2899efafcb330753e5b002ab4a572a",
"body": null,
"is_bot": false,
"headline": "feat: force a satisfied api contract for custom classes",
"author_name": "Kaz Wolfe",
"author_login": "KazWolfe",
"committed_at": "2026-07-19T03:34:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dc64f311dcf380a2ae0907f8fb53d75d74afc61",
"body": null,
"is_bot": false,
"headline": "feat: Hybrid flow should also support custom tokens",
"author_name": "Kaz Wolfe",
"author_login": "KazWolfe",
"committed_at": "2026-07-19T03:08:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c2aa58292bd591b1fc454bcd283b6063bb02200",
"body": null,
"is_bot": false,
"headline": "fix: rubocop lied to me.",
"author_name": "Kaz Wolfe",
"author_login": "KazWolfe",
"committed_at": "2026-07-18T23:29:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d485f18a4aff99fdef84c59832c541a85105cac9",
"body": null,
"is_bot": false,
"headline": "docs: document the new changes",
"author_name": "Kaz Wolfe",
"author_login": "KazWolfe",
"committed_at": "2026-07-18T18:03:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb689b1c02d5096021ce854e402aae532f9fdbd5",
"body": null,
"is_bot": false,
"headline": "fix: rubocop got upset",
"author_name": "Kaz Wolfe",
"author_login": "KazWolfe",
"committed_at": "2026-07-18T17:52:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cc41111d106e1b259019ff5e48f8f8f0ce5f79d",
"body": null,
"is_bot": false,
"headline": "spec: add test for new class overrides",
"author_name": "Kaz Wolfe",
"author_login": "KazWolfe",
"committed_at": "2026-07-18T17:51:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a46d71c2b6061d9e40538e05e02b2c12c814de2",
"body": null,
"is_bot": false,
"headline": "feat: add configurable classes for id_token/user_info models",
"author_name": "Kaz Wolfe",
"author_login": "KazWolfe",
"committed_at": "2026-07-18T17:45:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5abe0054d406e82238b488fd25a07b96a92a1a8",
"body": null,
"is_bot": false,
"headline": "Merge pull request #333 from 55728/feat/rfc9207-companion",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-16T12:39:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49dbc418b3a54e6720a61ee7da66390bbf4b7a66",
"body": "Don't advertise refresh_token twice in grant_types_supported",
"is_bot": false,
"headline": "Merge pull request #332 from 55728/fix/grant-types-refresh-token-dedupe",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-16T10:27:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6f9c1905288c84be07c4c066fc659ee038caba4",
"body": "Raise the gemspec cap to doorkeeper >= 5.5, < 7.0 so the gem installs\nalongside the upcoming major release, and add a CI matrix row pinning\nthe 6.0 series (gemfiles/doorkeeper_6.0.gemfile). Only 6.0.0.beta1 is\nreleased so far, so the gemfile uses the prerelease-aware constraint\n\"~> 6.0.0.beta1\" (>= \n[…]\ntoo, and (as before) does not exempt OIDC response types that never\nissue an authorization code, so id_token / id_token token requests\nwithout a code_challenge are rejected when force_pkce is enabled.",
"is_bot": false,
"headline": "Allow Doorkeeper 6.0",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-15T13:29:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eaaa086ab04f1fbe66ac3720405942af0abf6f18",
"body": "When Doorkeeper is configured with an issuer (doorkeeper#1838), it\nemits the RFC 9207 iss parameter on authorization responses and\nadvertises authorization_response_iss_parameter_supported in its\nRFC 8414 metadata (doorkeeper#1849) — but only for the response types\nand error paths Doorkeeper itself \n[…]\nnd eagerly builds a default\nconfiguration on newer versions, and Doorkeeper.configured? only\nexists since 5.6 — reporting false on 5.5 is also correct there, since\nits config has no issuer to compare.",
"is_bot": false,
"headline": "Add RFC 9207 companion support for doorkeeper#1849",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-15T13:23:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a970443ac4e16665d0369a8633e3d6cf07bcf6db",
"body": "The discovery document's grant_types_supported (also used by Dynamic\nClient Registration to validate requested grant types) is built from\nthe raw grant_flows configuration plus an unconditional refresh_token\nappend when use_refresh_token is enabled. A configuration that both\nlists refresh_token in g\n[…]\nrant_flows) because extension-registered authorization flows\nsuch as id_token are part of the advertised list here, and the raw\noption is the only accessor shared by all supported Doorkeeper\nversions.",
"is_bot": false,
"headline": "Don't advertise refresh_token twice in grant_types_supported",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-15T11:04:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8775b2b35bbc31cbf646fe3300d352ca3058c8d7",
"body": "Fall back to Doorkeeper's `issuer` config when the OpenID Connect `issuer` is unset",
"is_bot": false,
"headline": "Merge pull request #322 from 55728/feat/issuer-fallback-to-doorkeeper",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-14T12:30:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25c03ff5720a620e3ba6c00b52d092c25086dce0",
"body": "The install generator template hard-codes an issuer block with no hint\nthat it can now be omitted, which encourages configuring the issuer\ntwice once Doorkeeper's own RFC 8414 `issuer` option is set. Explain\nthe fallback introduced for #321 directly above the block: the OpenID\nConnect issuer takes p\n[…]\n and the block\nshould only be removed once Doorkeeper's `issuer` is set (older\nDoorkeeper versions have no such option and would fail with \"issuer\nnot configured\").\n\nAddresses review feedback on #322.",
"is_bot": false,
"headline": "Document Doorkeeper issuer fallback in the initializer template",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-14T12:16:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cf3c20e4efc0652d84a27ee7a974e0059f2b4ab0",
"body": "…-registry-companion",
"is_bot": false,
"headline": "Merge pull request #323 from 55728/feat/client-authentication-methods…",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-13T23:25:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "433d8e313609f7ed777e5eddd80fe99628b0f7f3",
"body": "Support mounting the engine under multiple named scopes (#192)",
"is_bot": false,
"headline": "Merge pull request #320 from 55728/feature/192-multi-mount-discovery",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-13T12:28:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9473aceb420ae3a17f9bd33dcc65e251ed51fa6d",
"body": null,
"is_bot": false,
"headline": "Release 1.10.5 :tada:",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-09T14:39:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00b89c1e9dec896eec74b4286c56aec11a95cfe1",
"body": "Improve inline documentation: why-comments and initializer config examples",
"is_bot": false,
"headline": "Merge pull request #327 from 55728/docs/initializer-and-readme",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-09T10:22:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9b1ac6de478d5d1b648558fd65d22cf3e9be900",
"body": "Harden the DCR spec against pre-existing `Application` rows",
"is_bot": false,
"headline": "Merge pull request #326 from 55728/test/dcr-spec-relative-counts",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-09T09:39:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ce78d00b372d941df3b091a1f155d56bba5fc0b",
"body": "Split `Helpers::Controller` into submodules, drop 3 RuboCop Metrics overrides",
"is_bot": false,
"headline": "Merge pull request #324 from 55728/refactor/controller-helpers-metrics",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-08T12:44:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "079b5d96f727266aa5a0ca44c9988278b881c220",
"body": "Remove dead `Claims::AggregatedClaim` and `Claims::DistributedClaim` classes",
"is_bot": false,
"headline": "Merge pull request #325 from 55728/chore/remove-dead-claim-classes",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-08T11:49:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e8c6b2d40741f042a2255007772c22a539378b3",
"body": "Restore compatibility with the full `doorkeeper >= 5.5` range",
"is_bot": false,
"headline": "Merge pull request #329 from 55728/compat/doorkeeper-5-5-support",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-08T09:14:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79d3308080086301370ff6fe45a8d8ba3bb9ad4c",
"body": "The gemspec declares doorkeeper >= 5.5 but the gem only worked on 5.8+\n(#328). Three version-specific breakages:\n\n* doorkeeper 5.5.x: Doorkeeper::Orm::ActiveRecord::Mixins is not\n autoloadable (registered only since 5.6.0), so referencing\n Mixins::AccessGrant raised NameError at require time and k\n[…]\nkeeper-gem/doorkeeper@6cd5cca2).\n\nCI gains gemfiles/doorkeeper_5.{5,6,7}.gemfile rows (single Ruby) so the\ndeclared floor stays honest.\n\nVerified locally: 305/0 on 5.5.4, 5.6.7, 5.7.1; 307/0 on 5.9.3.",
"is_bot": false,
"headline": "Restore compatibility with doorkeeper 5.5–5.7",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-07T11:00:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9f956e5012b36f593e99803680ed4761340f89a5",
"body": null,
"is_bot": false,
"headline": "Release 1.10.4 :tada:",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-07T06:54:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24c3cb1729b69f48649a6f4491dcae69f805000d",
"body": "Validate DCR registration scope against configured server scopes",
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-07-06T18:01:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbaa8c759c946a5823efaa93a08112546a30d2e0",
"body": "The link used Unicode hyphens (U+2010) and lowercase \"old-versions\",\nso it 404'd. Point it at the actual wiki slug Migration-from-Old-Versions\nwith ASCII hyphens, matching the other wiki links below it.",
"is_bot": false,
"headline": "Fix broken Migration wiki link in README",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-05T09:00:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38dbb3165774fe23e0fbc87ed815ada27690c6dc",
"body": "Document the intent behind three spots whose rationale is not evident\nfrom the code alone:\n\n- authorizations_extension: why nonce is whitelisted into PreAuthorization\n- authorization_code_request: the one-time OpenidRequest / nonce ordering\n that prevents a replayed code from reusing a nonce\n- token_response: when id_token is preset vs. built nonce-less (refresh_token)",
"is_bot": false,
"headline": "Add why-comments to non-obvious OIDC wiring",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-05T02:26:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afee80e94dbc120b0066bd506ee7fccf791d721c",
"body": "The dynamic client registration spec asserted absolute state —\nexpect(Doorkeeper::Application.count).to eq(0|1) in ten places and\nDoorkeeper::Application.first in six — so any Application row already\npresent in spec/dummy/db/test.sqlite3 (for example left behind by a\n'rake server' dashboard session \n[…]\nse expect { post ... }.to change(Doorkeeper::Application, :count)\nmatchers and Application.find_by(uid:) instead, so the examples assert\nwhat the request did rather than what the whole table contains.",
"is_bot": false,
"headline": "Harden DCR spec against pre-existing Application rows",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-05T02:20:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "50d5578cf81ee3308c6cf5fddc9f7fe834fb6fa3",
"body": "A JWKS publishes verification keys, but an HMAC JWK is the shared secret\nitself: clients cannot verify tokens with it, so it does not belong in a\npublic discovery document (RFC 7517).\n\nsigning_keys_normalized now drops oct entries, so /oauth/discovery/keys\nreturns an empty keys array for HMAC (HS256/HS384/HS512) configurations.",
"is_bot": false,
"headline": "Omit symmetric (oct) keys from the JWKS endpoint",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-04T07:19:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b24816c5642f0b778932a40bdb15dde4fa65a679",
"body": "Re-implementation of the lost pr/docs-improvements branch.\n\nThe generated initializer only documented a subset of the available\nconfig options. Add commented-out examples with explanatory comments for\noptions that were otherwise undiscoverable from the template (README\nconfig docs having moved to th\n[…]\n- control whether a claim is returned\n from the ID Token, UserInfo, or both\n\nDocumentation only; the template stays syntactically valid and is\nalready excluded from RuboCop. 303 examples, 0 failures.",
"is_bot": false,
"headline": "Document remaining config options in the initializer template",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-04T02:25:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a01ff8e886032a05223f6154896d6ea02ae53d78",
"body": "Re-implementation of the lost pr/token-response-core-alignment branch.\n\n- IdTokenTokenResponse#body returned auth.token.token for the implicit\n 'id_token token' access_token. With a hashing token-secret strategy\n the stored token attribute is the hash, so the client received an\n unusable access t\n[…]\nn the\n password flow but not the auth-code flow. Attach before super in both.\n\nEach fix is covered by a regression spec that fails on the old code\n(verified). 331 examples, 0 failures; rubocop clean.",
"is_bot": false,
"headline": "Align OIDC token/authorization responses with doorkeeper core",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-04T02:15:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b90ca18dc98d7307bca6b1b205915ac280cd5fdb",
"body": "Re-implementation of the lost pr/authorization-endpoint-hardening branch.\n\n- max_age: a non-scalar value (e.g. max_age[]=1, arriving as an Array or\n ActionController::Parameters) does not respond to #to_i, so\n handle_oidc_max_age_param! raised NoMethodError and returned a 500.\n Parse max_age thro\n[…]\nuired/InteractionRequired/\n AccountSelectionRequired remain OpenidConnectError subclasses, so\n existing 'rescue OpenidConnectError' handlers are unaffected.\n\n331 examples, 0 failures; rubocop clean.",
"is_bot": false,
"headline": "Harden the OIDC authorization endpoint against malformed requests",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-04T02:09:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e06cb0dc7746ecb55000689bccd3ec0f202278d6",
"body": "Re-implementation of the lost pr/discovery-dcr-compliance branch.\n\n- grant_types_supported leaked doorkeeper's internal implicit_oidc grant\n flow name (registered by this gem for the id_token response types)\n into the discovery document and DCR responses. Map it to the standard\n 'implicit' grant \n[…]\neper.config.application_model\n instead of hardcoded Doorkeeper::Application, so installations with a\n custom application model can use dynamic registration.\n\n332 examples, 0 failures; rubocop clean.",
"is_bot": false,
"headline": "Align discovery and DCR responses with RFC 7591 / RFC 7033",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-04T02:01:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b8494ba1faff1df1e8433587ae29b7078dcc65b2",
"body": "Helpers::Controller had grown to a 294-line module mixing four\nconcerns, held together by Metrics/ModuleLength Max: 209 in\n.rubocop_todo.yml, plus CyclomaticComplexity Max: 13 and\nPerceivedComplexity Max: 10 for its two biggest methods.\n\nSplit it by concern, all included into the prepended Controlle\n[…]\ner_response hash (same accommodation upstream doorkeeper makes\nfor its own config-shaped methods).\n\nBehavior-preserving: 303 examples green on latest doorkeeper and on\ndoorkeeper 5.8.0, rubocop clean.",
"is_bot": false,
"headline": "Split Helpers::Controller into submodules, drop 3 Metrics overrides",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-04T01:30:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8d0f1599e66c15a372e12a04244206c1fd47e969",
"body": "Claims::AggregatedClaim and Claims::DistributedClaim were added in 2016\n(25f2170) but never wired up: lib/doorkeeper/openid_connect.rb never\nrequires their files, ClaimsBuilder only constructs NormalClaim, and no\ncode, spec, or documentation references them. The discovery document\naccordingly advert\n[…]\ne 1.0 section 5.6) remain a\npossible future feature, but these empty attr_accessor shells carry no\nimplementation to build on — whoever implements the feature will start\nfrom the spec, not from these.",
"is_bot": false,
"headline": "Remove dead AggregatedClaim and DistributedClaim classes",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-04T01:23:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "abb47dc5e6012ea05eda0b7979cc6bd41904011b",
"body": "Intersect the client-supplied scope against\n`Doorkeeper.configuration.scopes` (`default_scopes` +\n`optional_scopes`) using `Scopes#allowed` before persisting it.\nUnrecognized scopes are silently dropped and the confirmed set is\nechoed in the registration response, per RFC 7591 §2.",
"is_bot": false,
"headline": "Validate DCR registration scope against configured server scopes",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-07-02T13:10:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7524be1d4b4e7b6b9c317841b9fa14fae01b1d1",
"body": "…on registry (doorkeeper#1840)\n\nDoorkeeper renamed `client_credentials_methods` to\n`client_authentication_methods` and changed its return value from bare\nstrategy symbols (`:from_basic` / `:from_params`) to\n`Doorkeeper::ClientAuthentication::Method` objects whose `name` is the\nRFC 8414 identifier (`\n[…]\nC_CLIENT_AUTH_METHOD\nseparately). The \"none\" public-client pseudo-method is therefore filtered\nout, keeping existing discovery and DCR specs green on both the new\nregistry API and the legacy fallback.",
"is_bot": false,
"headline": "Resolve token_endpoint_auth_methods_supported via client authenticati…",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-27T13:50:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5f6bbaf59984041ead066bb1bd0f74e50c23152b",
"body": "Doorkeeper added a top-level `issuer` option for RFC 8414 Authorization\nServer Metadata (doorkeeper-gem/doorkeeper#1838). RFC 8414's `issuer` and\nthe OIDC `iss` claim identify the same authorization server, so when the\nOpenID Connect `issuer` is not configured, resolve_issuer now falls back\nto `Door\n[…]\n)\n- Both unset preserves the existing InvalidConfiguration behavior\n- respond_to? guard keeps it a no-op on Doorkeeper versions predating\n config.issuer; gemspec constraint left unchanged with a TODO",
"is_bot": false,
"headline": "Fall back to Doorkeeper issuer config when OIDC issuer is unset (#321)",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-27T12:57:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4b7d231f25855cdf0d45734cfd09c613e98937ab",
"body": "The discovery controller built the published endpoints by calling\nDoorkeeper's URL helpers (`oauth_authorization_url`, ...) directly. When\nthe engine is mounted more than once under named scopes (e.g. a `User`\nand a `Customer` mount), every namespace's discovery document resolved\nthe same un-prefixe\n[…]\ny prefix and keep calling the bare helpers, so behaviour is\nunchanged.\n\nAdds a second namespaced mount to the dummy app and a request spec\ncovering both the namespaced and default discovery documents.",
"is_bot": false,
"headline": "Support mounting the engine under multiple named scopes (#192)",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-24T12:34:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0de04e0ea6db49fa17d211535090a5d71c268da2",
"body": "Release 1.10.3 🎉",
"is_bot": false,
"headline": "Merge pull request #319 from 55728/release/v1.10.3",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-06-23T11:03:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83c16825fca334264b8722c2e0f4316c5bf15660",
"body": null,
"is_bot": false,
"headline": "Release 1.10.3 🎉",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-23T10:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4eaff659926819e375cf5adbd792b10b8861d96",
"body": "Wire `openid_request` from the AccessGrant mixin instead of `on_load(:active_record)`",
"is_bot": false,
"headline": "Merge pull request #308 from 55728/fix/306-remove-on-load-active-record",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-23T10:28:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dba2c846dc032eba85593180094b5219699bd88f",
"body": "Release 1.10.2 🎉",
"is_bot": false,
"headline": "Merge pull request #318 from 55728/release/v1.10.2",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-06-22T11:10:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58eede21ccc337364391ca0bfd80fb6db16714e3",
"body": "Add browser dashboard to spec/dummy for exercising OIDC endpoints",
"is_bot": false,
"headline": "Merge pull request #309 from 55728/feature/dummy-oidc-dashboard",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-06-22T08:44:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "967648d4d8c2d2cfec81f5a1850fb5f7e21ff303",
"body": null,
"is_bot": false,
"headline": "Release 1.10.2 🎉",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-21T15:00:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25ab03892be8be65fa85b1adaba7cd853cabe748",
"body": "Set `fail-fast: false` in CI matrix",
"is_bot": false,
"headline": "Merge pull request #316 from 55728/ci/fail-fast-false",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-18T12:18:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "149c3638e711e1efdf48423054bde8fa48391e02",
"body": "Drop EOL Ruby 3.1, require Ruby >= 3.2",
"is_bot": false,
"headline": "Merge pull request #315 from 55728/fix/314-drop-ruby-3.1",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-18T12:16:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4e9caa2e4466b84214121cf152c15b2fe475464",
"body": "With fail-fast: true, a single failing matrix job cancels every other\njob, so the whole run shows red even when the other Ruby/Rails\ncombinations pass. Disable fail-fast so each job reports its real\nstatus independently.",
"is_bot": false,
"headline": "Set fail-fast: false in CI matrix",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-17T23:48:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "808c76c9d788fc4c706d090c89fd868a0bb21490",
"body": "Ruby 3.1 reached EOL on 2025-03-25. Since i18n 1.15.0 (2026-06-17)\nuses the Fiber[] storage API, which only exists on Ruby 3.2+, the\nRuby 3.1 CI row fails at load time. Drop the 3.1 matrix row (3.2 is\nalready covered) and its now-redundant exclude entries, and bump\nrequired_ruby_version to '>= 3.2'.\n\nCloses #314",
"is_bot": false,
"headline": "Drop EOL Ruby 3.1, require Ruby >= 3.2",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-17T23:41:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db6e4a952de3ff44d9ac55975cd9609daf406479",
"body": "Add `client_secret_expires_at` to Dynamic Client Registration response",
"is_bot": false,
"headline": "Merge pull request #311 from 55728/fix/dcr-client-secret-expires-at",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-17T13:17:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54f79bf579e89f1c2f0db7ee4c485cb319fc2c05",
"body": null,
"is_bot": false,
"headline": "Merge pull request #312 from 55728/fix/id-token-required-claim-guard",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-17T12:56:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2538cb096f028f5268c3215c127b6af8da9cfae",
"body": "OIDC Core 1.0 §2 lists iss/sub/aud/exp/iat as REQUIRED. IdToken#as_json\nrejected nil/empty values uniformly, so a blank REQUIRED claim was\nsilently omitted, producing a non-conformant ID Token. Raise the new\nErrors::MissingRequiredClaim for those claims; OPTIONAL claims (nonce,\nauth_time, custom) are still dropped when blank.",
"is_bot": false,
"headline": "Raise on blank REQUIRED ID Token claims instead of dropping them",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-16T13:38:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "befda381808d142c04b9a484daf4adaa1ab0cd80",
"body": "Move Configuration documentation from README to Wiki",
"is_bot": false,
"headline": "Merge pull request #313 from 55728/289-move-configuration-docs-to-wiki",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-16T13:36:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf46487afff91fde967260bcef04810908219cb9",
"body": "* execute account selection even without owner\n\n* fix select_account handling spec\n\n* add changelog\n\n* explicitly name resource_owner can be nil\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n* update spec comment, and check the resource_owner_or_nil is nil\n\n* update changelog\n\n* fix rubocop\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "execute account selection even without owner (#303)",
"author_name": "Nov Matake",
"author_login": "nov",
"committed_at": "2026-06-16T13:31:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "237b17a85781dfe3113c62d3a24b09e82a4ac8aa",
"body": "Replace the detailed Configuration section (previously ~530 lines)\nwith a brief pointer to the Wiki, where the content now lives as\ndedicated pages for each topic.\n\nThe Wiki migration was tracked and discussed in #289.\n\nCloses #289",
"is_bot": false,
"headline": "Move Configuration docs from README to Wiki",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-15T13:12:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00d307225d67ab380fa5dcb21ec924be9d60bcf0",
"body": "RFC 7591 §3.2.1 and OIDC Dynamic Client Registration 1.0 §3.2 require\nclient_secret_expires_at whenever a client_secret is issued. Doorkeeper\nsecrets never expire, so emit 0 (no expiration) for confidential clients.",
"is_bot": false,
"headline": "Add client_secret_expires_at to Dynamic Client Registration response",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-15T12:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd9dc8929bc2b6cea4dc451d0fdd87bb7d5388d3",
"body": "Replace the DummyController root redirect with a single-page dashboard that\ndrives every OpenID Connect endpoint from the browser, removing the need for\nrails console + curl when trying the gem out by hand.\n\n- Setup: create users and OAuth applications via plain Rails forms (CSRF\n tokens are auto-a\n[…]\nedirects straight back with a code; the test environment is unchanged\n(controller specs stub skip_authorization? themselves). Adds a minimal\ndevelopment environment file. No new tests (dummy UI only).",
"is_bot": false,
"headline": "Add browser dashboard to spec/dummy for exercising OIDC endpoints",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-12T14:11:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d3e9eed1590c00375ba56499567edf1b65ee9283",
"body": "Namespaced custom access grant models (e.g. `Auth::OAuthAccessGrant <\nApplicationRecord`) crashed on Rails boot since v1.10.0 with\n`NameError: uninitialized constant Auth::ApplicationRecord`.\n\nv1.10.0 (#241) wrapped the access-grant prepend in\n`ActiveSupport.on_load(:active_record)`, following doork\n[…]\nrkeeper 5.9.x, which no longer exposes `active_record_options`).\n\nAdds regression coverage: a namespaced custom model that includes the\ndoorkeeper mixin is wired with the `openid_request` association.",
"is_bot": false,
"headline": "Wire openid_request from AccessGrant mixin instead of on_load (#306)",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-12T13:22:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "75d1613c4f77672684801a0c39c333f12f00ecb2",
"body": "Fix `bundle exec rake server` for the test application",
"is_bot": false,
"headline": "Merge pull request #307 from 55728/chore/maintain-dummy-server",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-11T12:23:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb0ce98aa5801e8880093d5171ff0c53f7094529",
"body": null,
"is_bot": false,
"headline": "Fix `bundle exec rake server` for the test application",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-11T12:10:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa0ecd86f2e7dba875cf9bf92160a5f2730b3412",
"body": "…token\n\nDocument `auth_time_from_access_token` config option in README",
"is_bot": false,
"headline": "Merge pull request #305 from 55728/docs/readme-auth-time-from-access-…",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-10T10:28:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2afae26a444fbf75deccdcdbe2c9b8e2cb1cf85",
"body": "#304 added the `auth_time_from_access_token` config option (per-grant\nauth_time) and documented it in the initializer template and CHANGELOG,\nbut the README option list was not updated.\n\nAdd an `auth_time_from_access_token` entry alongside\n`auth_time_from_resource_owner` / `auth_time_from_session`, \n[…]\n `auth_time_from_resource_owner` for the ID Token claim\n- it only affects the ID Token `auth_time` claim and is NOT used for\n `max_age` enforcement (which still resolves via session / resource owner)",
"is_bot": false,
"headline": "Document auth_time_from_access_token config option in README",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-07T08:50:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d9e9eac07c347ed5d86cdef2e1d9fbd67b4a19c0",
"body": null,
"is_bot": false,
"headline": "Merge pull request #304 from nov/feature/auth_time_fron_grant",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-05T12:13:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60e116fc883d9f2f90409c1a03f9d9970c2e69d6",
"body": null,
"is_bot": false,
"headline": "sorry, I did copy&paste :p",
"author_name": "nov",
"author_login": "nov",
"committed_at": "2026-06-04T23:59:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19a46793d3ca5b97caebff45efa764ddf64e4a26",
"body": null,
"is_bot": false,
"headline": "add changelog",
"author_name": "nov",
"author_login": "nov",
"committed_at": "2026-06-04T23:57:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f557ce17da139e14177dfe64eb42083cb1cee24",
"body": null,
"is_bot": false,
"headline": "fix rubocop error",
"author_name": "nov",
"author_login": "nov",
"committed_at": "2026-06-04T23:57:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62278e7e07195f798f2b1bdea19dc65045f613db",
"body": null,
"is_bot": false,
"headline": "allow handle auth_time per grant",
"author_name": "nov",
"author_login": "nov",
"committed_at": "2026-06-04T23:44:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "401e5fcdcd875205f9ae0b69a125e854ea472654",
"body": "Release 1.10.1 🎉",
"is_bot": false,
"headline": "Merge pull request #301 from 55728/release/v1.10.1",
"author_name": "Nikita Bulai",
"author_login": "nbulaj",
"committed_at": "2026-06-03T13:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ab16258090665eefa6205b77f2d7a9cf112fdc5",
"body": null,
"is_bot": false,
"headline": "Release 1.10.1 🎉",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-03T13:38:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5620cfe0aaf0dddd9b48f4d780329826129533a2",
"body": "Raise on blank issuer in `resolve_issuer`",
"is_bot": false,
"headline": "Merge pull request #299 from 55728/fix/issue-298-blank-issuer-guard",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-03T13:27:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbf4f687cda74b88f3c36668b879d786f460b631",
"body": "Ignore blank entries in the `prompt` parameter",
"is_bot": false,
"headline": "Merge pull request #296 from 55728/fix/prompt-leading-whitespace",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-03T13:00:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8ca5af5d56779e094969b92612853f7dad71c82",
"body": "…aking-note\n\nAdd breaking-change note for arity-2 issuer blocks to v1.10.0 CHANGELOG",
"is_bot": false,
"headline": "Merge pull request #300 from 55728/docs/changelog-v1.10.0-arity-2-bre…",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-03T12:59:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ce74737b477857c170c7ebb6fb48178501d3ff1",
"body": "The issuer dispatch unification in v1.10.0 is a practical breaking change\nfor existing arity-2 blocks that relied on DiscoveryController passing\nrequest as the first argument. Add an [!IMPORTANT] callout to the v1.10.0\nsection so upgraders see the migration path immediately.\n\nSee #298",
"is_bot": false,
"headline": "Add breaking-change note for arity-2 issuer blocks to v1.10.0 CHANGELOG",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-03T12:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d4e791d0c52234addbfc1ef88305661e9967f40",
"body": "Since v1.10.0, `resolve_issuer` dispatches arity-2 issuer blocks with\n`(resource_owner, application)`. In the discovery context both are nil,\nso an existing arity-2 block that relied on the v1.9.0 behavior (where\nDiscoveryController passed the request as the first argument) can return\nnil. `resolve_\n[…]\n shipping a broken discovery document.\n\nSpecs that reconfigured OpenID Connect without an issuer (and only\nasserted unrelated fields) relied on the old silent-\"\" behavior; they\nnow set a valid issuer.",
"is_bot": false,
"headline": "Raise on blank issuer in resolve_issuer (#298)",
"author_name": "Kenta Ishizaki",
"author_login": "55728",
"committed_at": "2026-06-03T12:31:18Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 21,
"commits_last_year": 241,
"latest_release_at": "2026-07-14T14:21:42Z",
"latest_release_tag": "v1.10.5",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 28,
"days_since_latest_release": 13,
"mean_days_between_releases": 88.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "doorkeeper-openid_connect",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "rubygems",
"matches_repo": true,
"registry_url": "https://rubygems.org/gems/doorkeeper-openid_connect",
"is_deprecated": false,
"latest_version": "1.10.5",
"repository_url": "https://github.com/doorkeeper-gem/doorkeeper-openid_connect",
"versions_count": 44,
"total_downloads": 43711217,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2015-03-24T17:57:11.539000Z",
"latest_published_at": "2026-07-09T14:40:05.156000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 18
}
]
},
"popularity": {
"forks": 131,
"stars": 216,
"watchers": 17,
"fork_history": {
"days": [
{
"date": "2014-09-02",
"count": 1
},
{
"date": "2015-04-18",
"count": 1
},
{
"date": "2015-05-08",
"count": 1
},
{
"date": "2016-02-12",
"count": 1
},
{
"date": "2016-11-16",
"count": 1
},
{
"date": "2016-12-01",
"count": 1
},
{
"date": "2016-12-27",
"count": 1
},
{
"date": "2016-12-28",
"count": 1
},
{
"date": "2017-01-06",
"count": 1
},
{
"date": "2017-01-11",
"count": 1
},
{
"date": "2017-04-17",
"count": 1
},
{
"date": "2017-05-04",
"count": 1
},
{
"date": "2017-05-09",
"count": 1
},
{
"date": "2017-05-31",
"count": 1
},
{
"date": "2017-07-07",
"count": 1
},
{
"date": "2017-07-14",
"count": 1
},
{
"date": "2017-07-29",
"count": 1
},
{
"date": "2017-08-15",
"count": 1
},
{
"date": "2017-10-19",
"count": 1
},
{
"date": "2017-11-06",
"count": 1
},
{
"date": "2018-01-20",
"count": 1
},
{
"date": "2018-02-06",
"count": 1
},
{
"date": "2018-02-27",
"count": 1
},
{
"date": "2018-05-04",
"count": 1
},
{
"date": "2018-06-07",
"count": 1
},
{
"date": "2018-08-01",
"count": 1
},
{
"date": "2018-09-05",
"count": 1
},
{
"date": "2018-12-13",
"count": 1
},
{
"date": "2019-01-03",
"count": 1
},
{
"date": "2019-01-10",
"count": 1
},
{
"date": "2019-02-07",
"count": 1
},
{
"date": "2019-03-05",
"count": 1
},
{
"date": "2019-03-26",
"count": 1
},
{
"date": "2019-04-15",
"count": 1
},
{
"date": "2019-05-22",
"count": 1
},
{
"date": "2019-07-12",
"count": 1
},
{
"date": "2019-07-16",
"count": 1
},
{
"date": "2019-08-12",
"count": 1
},
{
"date": "2019-08-23",
"count": 1
},
{
"date": "2019-09-12",
"count": 1
},
{
"date": "2019-09-16",
"count": 1
},
{
"date": "2019-10-02",
"count": 1
},
{
"date": "2019-10-11",
"count": 1
},
{
"date": "2019-11-01",
"count": 1
},
{
"date": "2019-12-03",
"count": 1
},
{
"date": "2019-12-06",
"count": 1
},
{
"date": "2019-12-10",
"count": 1
},
{
"date": "2020-02-07",
"count": 1
},
{
"date": "2020-03-08",
"count": 1
},
{
"date": "2020-04-17",
"count": 1
},
{
"date": "2020-04-28",
"count": 1
},
{
"date": "2020-05-19",
"count": 1
},
{
"date": "2020-05-21",
"count": 1
},
{
"date": "2020-05-24",
"count": 1
},
{
"date": "2020-06-04",
"count": 1
},
{
"date": "2020-07-10",
"count": 1
},
{
"date": "2020-07-18",
"count": 1
},
{
"date": "2020-07-24",
"count": 1
},
{
"date": "2020-08-25",
"count": 1
},
{
"date": "2020-09-01",
"count": 1
},
{
"date": "2020-09-24",
"count": 1
},
{
"date": "2020-11-04",
"count": 1
},
{
"date": "2020-12-14",
"count": 1
},
{
"date": "2021-02-10",
"count": 1
},
{
"date": "2021-03-11",
"count": 1
},
{
"date": "2021-04-08",
"count": 1
},
{
"date": "2021-04-11",
"count": 1
},
{
"date": "2021-04-15",
"count": 1
},
{
"date": "2021-04-19",
"count": 1
},
{
"date": "2021-05-09",
"count": 1
},
{
"date": "2021-06-04",
"count": 1
},
{
"date": "2021-06-18",
"count": 1
},
{
"date": "2021-08-20",
"count": 1
},
{
"date": "2021-10-06",
"count": 1
},
{
"date": "2021-10-09",
"count": 1
},
{
"date": "2021-10-17",
"count": 1
},
{
"date": "2021-10-19",
"count": 1
},
{
"date": "2021-11-12",
"count": 1
},
{
"date": "2021-11-22",
"count": 1
},
{
"date": "2022-03-03",
"count": 1
},
{
"date": "2022-03-08",
"count": 1
},
{
"date": "2022-05-16",
"count": 1
},
{
"date": "2022-07-01",
"count": 1
},
{
"date": "2022-07-05",
"count": 1
},
{
"date": "2022-08-15",
"count": 1
},
{
"date": "2022-08-26",
"count": 1
},
{
"date": "2022-09-11",
"count": 1
},
{
"date": "2022-09-14",
"count": 1
},
{
"date": "2022-10-17",
"count": 1
},
{
"date": "2022-11-02",
"count": 1
},
{
"date": "2022-11-14",
"count": 1
},
{
"date": "2022-11-22",
"count": 1
},
{
"date": "2023-01-30",
"count": 1
},
{
"date": "2023-02-01",
"count": 2
},
{
"date": "2023-02-24",
"count": 1
},
{
"date": "2023-03-06",
"count": 1
},
{
"date": "2023-10-03",
"count": 1
},
{
"date": "2023-11-14",
"count": 1
},
{
"date": "2023-11-23",
"count": 1
},
{
"date": "2024-01-25",
"count": 1
},
{
"date": "2024-06-06",
"count": 1
},
{
"date": "2024-06-09",
"count": 1
},
{
"date": "2024-07-09",
"count": 1
},
{
"date": "2024-07-26",
"count": 1
},
{
"date": "2024-10-11",
"count": 1
},
{
"date": "2024-11-05",
"count": 1
},
{
"date": "2024-11-21",
"count": 1
},
{
"date": "2025-01-07",
"count": 1
},
{
"date": "2025-02-26",
"count": 1
},
{
"date": "2025-03-19",
"count": 1
},
{
"date": "2025-08-19",
"count": 1
},
{
"date": "2025-08-22",
"count": 1
},
{
"date": "2025-09-02",
"count": 1
},
{
"date": "2025-09-18",
"count": 1
},
{
"date": "2025-11-04",
"count": 1
},
{
"date": "2025-11-09",
"count": 1
},
{
"date": "2025-11-17",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
},
{
"date": "2026-01-06",
"count": 1
},
{
"date": "2026-02-02",
"count": 1
},
{
"date": "2026-03-16",
"count": 1
},
{
"date": "2026-05-18",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
}
],
"complete": true,
"collected": 126,
"total_forks": 131
},
"star_history": null,
"open_issues_and_prs": 15
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 33692,
"source_files_sampled": 106,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 3995
},
"dependencies": {
"manifests": [
"Gemfile"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 17,
"direct_affected_count": 0
},
"ecosystems": [
"rubygems"
],
"dependencies": [
{
"name": "rails",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "rails-controller-testing",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "rails-controller-testing",
"direct": true,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "bigdecimal",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "conventional-changelog",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "doorkeeper",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "drb",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "factory_bot",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "jwt",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "mutex_m",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "ostruct",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "pry-byebug",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "puma",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rspec-rails",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-performance",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-rails",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop-rspec",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "sqlite3",
"direct": false,
"version": null,
"ecosystem": "rubygems"
}
],
"collected": true,
"truncated": false,
"total_count": 17,
"direct_count": 1,
"indirect_count": 16
}
},
"maintainership": {
"issues": {
"open_prs": 6,
"merged_prs": 203,
"open_issues": 9,
"closed_ratio": 0.916,
"closed_issues": 98,
"closed_unmerged_prs": 39
},
"bus_factor": 2,
"bot_contributors": 3,
"top_contributors": [
{
"type": "User",
"login": "toupeira",
"commits": 172,
"avatar_url": "https://avatars.githubusercontent.com/u/6501?v=4"
},
{
"type": "User",
"login": "55728",
"commits": 150,
"avatar_url": "https://avatars.githubusercontent.com/u/153918146?v=4"
},
{
"type": "User",
"login": "nbulaj",
"commits": 144,
"avatar_url": "https://avatars.githubusercontent.com/u/1443426?v=4"
},
{
"type": "User",
"login": "nov",
"commits": 27,
"avatar_url": "https://avatars.githubusercontent.com/u/27299?v=4"
},
{
"type": "User",
"login": "linhdangduy",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/9018303?v=4"
},
{
"type": "User",
"login": "stanhu",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/963826?v=4"
},
{
"type": "User",
"login": "KazWolfe",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/5192145?v=4"
},
{
"type": "User",
"login": "nashby",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/200500?v=4"
},
{
"type": "User",
"login": "sato11",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/22004610?v=4"
},
{
"type": "User",
"login": "nbibler",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/3775?v=4"
}
],
"contributors_sampled": 57,
"top_contributor_share": 0.282
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"changelog.yml",
"ci.yml",
"rubocop.yml"
],
"has_docs_dir": false,
"linter_configs": [
".rubocop.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 6,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 27 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "5843055b989382b472fa3a12dc42f722d4432baf",
"ran_at": "2026-07-27T18:21:24Z",
"aggregate_score": 7.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T18:07:57Z",
"oldest_open_prs": [
{
"number": 243,
"created_at": "2026-04-22T09:35:19Z",
"last_comment_at": "2026-06-24T12:32:00Z",
"last_comment_author": "55728"
},
{
"number": 244,
"created_at": "2026-04-22T09:54:22Z",
"last_comment_at": "2026-06-22T13:04:19Z",
"last_comment_author": "55728"
},
{
"number": 337,
"created_at": "2026-07-19T09:04:33Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 338,
"created_at": "2026-07-19T09:22:20Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 349,
"created_at": "2026-07-22T22:52:10Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 353,
"created_at": "2026-07-23T14:14:21Z",
"last_comment_at": "2026-07-23T14:50:43Z",
"last_comment_author": "55728"
}
],
"last_merged_pr_at": "2026-07-27T10:14:53Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 154,
"created_at": "2021-06-15T18:38:22Z",
"last_comment_at": "2023-10-04T15:28:40Z",
"last_comment_author": "cyclingzealot"
},
{
"number": 179,
"created_at": "2022-11-09T19:32:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 191,
"created_at": "2023-02-17T14:14:11Z",
"last_comment_at": "2026-06-24T12:49:15Z",
"last_comment_author": "55728"
},
{
"number": 330,
"created_at": "2026-07-09T15:18:59Z",
"last_comment_at": "2026-07-09T16:13:11Z",
"last_comment_author": "55728"
},
{
"number": 331,
"created_at": "2026-07-14T13:03:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 339,
"created_at": "2026-07-19T16:43:58Z",
"last_comment_at": "2026-07-20T09:06:24Z",
"last_comment_author": "55728"
},
{
"number": 340,
"created_at": "2026-07-19T16:44:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 344,
"created_at": "2026-07-20T09:13:56Z",
"last_comment_at": "2026-07-27T10:17:34Z",
"last_comment_author": "55728"
},
{
"number": 345,
"created_at": "2026-07-20T12:45:58Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/doorkeeper-gem/doorkeeper-openid_connect",
"host": "github.com",
"name": "doorkeeper-openid_connect",
"owner": "doorkeeper-gem"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"security": 73,
"vitality": 87,
"community": 74,
"governance": 77,
"engineering": 74
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 87,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"commits_last_year": 241,
"human_commit_share": 0.99,
"days_since_last_push": 0,
"active_weeks_last_year": 28
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "28/52 weeks with commits",
"points": 19.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 28
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "241 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 241
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 21,
"latest_release_tag": "v1.10.5",
"releases_from_tags": false,
"days_since_latest_release": 13,
"mean_days_between_releases": 88.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "21 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 21
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 13 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 13
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~88.7 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 88.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 74,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"forks": 131,
"stars": 216,
"watchers": 17,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "216 stars",
"points": 37.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 216
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "131 forks",
"points": 17.6,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 131
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "17 watchers",
"points": 6.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 17
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 99,
"inputs": {
"packages": [
"doorkeeper-openid_connect"
],
"dependents": null,
"ecosystems": "rubygems",
"total_downloads": 43711217,
"monthly_downloads": null
},
"components": [
{
"key": "total_downloads",
"name": "Total downloads",
"detail": "43,711,217 downloads all-time across rubygems",
"points": 79.4,
"status": "partial",
"details": [
{
"code": "downloads_total",
"params": {
"count": 43711217,
"ecosystems": "rubygems"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 77,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 57,
"top_contributor_share": 0.282
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 28% of commits",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 28
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "57 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 57
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 27 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"merged_prs": 203,
"open_issues": 9,
"closed_issues": 98,
"issue_closed_ratio": 0.916,
"closed_unmerged_prs": 39
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "92% of issues closed",
"points": 42.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 92
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "203/242 decided PRs merged",
"points": 32.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 203,
"decided": 242
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"followers": 20,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "doorkeeper-gem",
"public_repos": 11,
"account_age_days": 4488
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "20 followers of doorkeeper-gem",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 20,
"login": "doorkeeper-gem"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "11 public repos, account ~12 yr old",
"points": 19.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 11
}
},
{
"code": "account_age_years",
"params": {
"years": 12
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"doorkeeper-openid_connect"
],
"ecosystems": "rubygems",
"any_deprecated": false,
"min_days_since_publish": 18
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on rubygems",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "rubygems"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 18 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 18
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "44 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 44
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 74,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".rubocop.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"doorkeeper",
"openidconnect",
"openid-provider",
"oauth"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 73,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 73,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 7.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 27 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 61,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.869,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 3995
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "86 of 99 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 86,
"sampled": 99
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.02,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.01
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".rubocop.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "2 of the last 100 commits agent-authored or agent-credited",
"points": 4,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "1 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Ruby",
"largest_source_bytes": 33692,
"source_files_sampled": 106,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Ruby without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Ruby"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/106 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 106,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-27T18:21:53.394759Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/doorkeeper-gem/doorkeeper-openid_connect.svg",
"full_name": "doorkeeper-gem/doorkeeper-openid_connect",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with doorkeeper-gem/doorkeeper-openid_connect. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
