Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-25 11:27 UTC

eclipse-lyo / lyo

Eclipse Lyo, a Java SDK for OSLC-based tool integration

JavaEPL-2.0★ 25 stars⑂ 20 forkssince Jun 2018View on GitHub ↗

eclipse-lyo/lyo holds a health index of 72 out of 100, placing it in the Good band. It scores highest on Vitality (90/100) and lowest on Sustainability & Governance (56/100). It was last updated 1 day ago. A single contributor accounts for most of its recent work.

72
overall / 100
Good

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

72
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

Eclipse LyoOrganization
4 followers19 public repossince Sep 2024

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Mavenorg.eclipse.lyo:lyo-validation7.0.0.Alpha12-1910 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

90Excellent · 22% of overall
How it's scored
36/36Push recency — last push 1 days ago
24.9/36Commit cadence — 36/52 weeks with commits
18/18Commit volume — 162 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year162
human_commit_share0.46
days_since_last_push1
active_weeks_last_year36
How it's scored
27/27Ships releases — 26 releases published
36/36Release recency — latest release 20 days ago
19.8/27Release cadence — a release every ~66.2 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count26
latest_release_tagv7.0.0-Alpha.10
releases_from_tagsno
days_since_latest_release20
mean_days_between_releases66.2
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

62Moderate · 18% of overall
How it's scored
22.4/60Stars — 25 stars
10.7/25Forks — 20 forks
3.3/15Watchers — 5 watchers
Inputs used
forks20
stars25
watchers5
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community health

92Excellent
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (EPL-2.0)
18/18CONTRIBUTING guide
13.5/13.5Code of conduct
0/7.2Issue template
6.3/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingyes
has_issue_templateno
has_code_of_conductyes
has_pull_request_templateyes

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

56Moderate · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
7.4/22.5Commit distribution — top contributor authored 67% of commits
13.5/13.5Contributor breadth — 27 contributors
10/10OpenSSF Scorecard: Contributors — project has 12 contributing companies or organizations
Inputs used
bus_factor1
contributors_sampled27
top_contributor_share0.671
How it's scored
24.9/46.8Issue resolution — 53% of issues closed
24.2/38.3PR acceptance — 467/737 decided PRs merged
0/15OpenSSF Scorecard: Code-Review — Found 1/13 approved changesets -- score normalized to 0
Inputs used
merged_prs467
open_issues103
closed_issues117
issue_closed_ratio0.532
closed_unmerged_prs270
How it's scored
30/30Ownership backing — organization-owned
0/20Verified domain
5/25Owner reach — 4 followers of eclipse-lyo
13.1/25Track record — 19 public repos, account ~1 yr old
Inputs used
followers4
owner_typeOrganization
is_verified
owner_logineclipse-lyo
public_repos19
account_age_days662
How it's scored
25/25Published & resolvable — 1 package(s) on maven
35/35Publish recency — latest publish 10 days ago
20/20Version history — 19 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesorg.eclipse.lyo:lyo-validation
ecosystemsmaven
any_deprecatedno
min_days_since_publish10

Engineering Quality

Are baseline engineering and documentation practices in place?

84Good · 20% of overall
How it's scored
24/24CI workflows — 3 workflow(s)
24/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
6.4/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigyes
has_linter_configno
has_precommit_configno

Documentation

100Excellent
How it's scored
30/30README
25/25Documentation directory
15/15Documentation / homepage site — https://oslc.github.io/developing-oslc-applications/eclipse_lyo/eclipse-lyo.html
10/10Repository description
10/10Topics — 3 topics
10/10Wiki
Inputs used
topicsintegration, oslc, rdf
has_wikiyes
homepagehttps://oslc.github.io/developing-oslc-applications/eclipse_lyo/eclipse-lyo.html
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

66Moderate · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 25 out of 25 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 1/13 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 12 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
3.5/5SAST — SAST tool detected but not run on all commits
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate6.1
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
10.4/25Indirect dependencies free of known advisories — 1 affected: org.apache.thrift:libthrift 0.22.0 (high 7.3)
40/40No advisories left outstanding — no advisory has been public longer than 90 days
Inputs used
sourceosv
advisories1
affected_packages1
assessed_packages51
unassessed_packages0
affected_by_severityhigh 1
direct_affected_packages0
Matched the maven:org.eclipse.lyo:lyo-validation@7.0.0.Alpha12 runtime dependency closure — what installing the published package pulls in — 51 packages. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

78Good · 0% of overall
How it's scored
45/45Agent instructions — .github/copilot-instructions.md
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 41 of 46 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.891
agent_instruction_files.github/copilot-instructions.md
agent_instruction_max_bytes1,530
How it's scored
12.6/18One-command bootstrap — bom/lyo-bom-consumer-test/pom.xml, bom/lyo-bom/pom.xml, client/oslc-client-base/pom.xml (toolchain convention, no task runner)
22/22Automated tests
0/11Lint / format config
11/11Static type checking — Java (statically typed)
0/10Reproducible environment
10/10Demonstrated agent practice — 6 of the last 100 commits agent-authored or agent-credited
8/8Automated maintenance — 54 of the last 100 commits are automated dependency updates
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfiles
has_dockerfileno
typed_languageyes
bootstrap_files
has_devcontainerno
has_linter_configno
typecheck_configs
agent_commit_share0.06
toolchain_manifestsbom/lyo-bom-consumer-test/pom.xml, bom/lyo-bom/pom.xml, client/oslc-client-base/pom.xml, client/oslc-client/pom.xml, client/oslc-java-client-resources/pom.xml, client/pom.xml, core/lyo-core-model/pom.xml, core/lyo-core-settings/pom.xml, core/oslc-query/pom.xml, core/oslc-trs/pom.xml, core/oslc4j-core-build/pom.xml, core/oslc4j-core-wink/pom.xml, core/oslc4j-core/pom.xml, core/oslc4j-jena-provider/pom.xml, core/oslc4j-json4j-provider/pom.xml, core/oslc4j-utils/pom.xml, core/shacl/pom.xml, domains/oslc-domains/pom.xml, pom.xml, server/net.oauth.core-oauth-consumer-jakarta/pom.xml, server/net.oauth.core-oauth-httpclient4-jakarta/pom.xml, server/net.oauth.core-oauth-jakarta/pom.xml, server/net.oauth.core-oauth-provider-jakarta/pom.xml, server/oauth-consumer-store/pom.xml, server/oauth-core/pom.xml, server/oauth-webapp/pom.xml, server/oslc-ui-model/pom.xml, server/pom.xml, store/pom.xml, store/store-core/pom.xml, trs/client/client-source-mqtt/pom.xml, trs/client/pom.xml, trs/client/trs-client/pom.xml, trs/server/pom.xml, validation/pom.xml
dependency_bot_commit_share0.54
How it's scored
45/45Type-checkable code — Java (statically typed)
54.8/55Manageable file sizes — 2/634 source files over 60KB
Inputs used
primary_languageJava
largest_source_bytes88,178
source_files_sampled634
oversized_source_files2

Key facts

25GitHub stars
27contributors
162commits, last 12 months
1days since last push
26releases
1bus factor
103open issues
Mavenpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

More detail

Star and fork history 0 ★ / 20 ⇿
0Stars
20Forks
26Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

0481216202032020-062023-072026-07
Major 2Minor 2Patch 0

Each point covers 6 days.

OpenSSF Scorecard 6.1 / 10
6.1aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 11:27 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests25 out of 25 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 1/13 approved changesets -- score normalized to 0
10Contributorsproject has 12 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
7SASTSAST tool detected but not run on all commits
10Security-Policysecurity policy file detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Direct dependencies 42
RegistryPackageVersion constraintManifest
Mavenorg.apache.httpcomponents:httpclient${v.httpclient}pom.xml
Mavenjakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api3.0.2pom.xml
Mavenorg.eclipse.lyo.oslc4j.core:oslc4j-core${v.lyo}pom.xml
Mavenorg.eclipse.lyo.oslc4j.core:oslc4j-jena-provider${v.lyo}pom.xml
Mavenorg.eclipse.lyo.oslc4j.core:oslc4j-json4j-provider${v.lyo}pom.xml
Mavenjakarta.xml.bind:jakarta.xml.bind-api4.0.2pom.xml
Mavenorg.glassfish.jaxb:jaxb-runtime4.0.5pom.xml
Mavenorg.slf4j:slf4j-api${v.slf4j}pom.xml
Mavenorg.slf4j:slf4j-simple${v.slf4j}pom.xml
Mavenorg.slf4j:jcl-over-slf4j${v.slf4j}pom.xml
Mavenstax:stax-api1.0.1pom.xml
Mavenorg.apache.jena:jena-core${v.jena}pom.xml
Mavenorg.apache.jena:apache-jena-libs${v.jena}pom.xml
Mavenorg.glassfish.jersey.core:jersey-client${v.jersey}pom.xml
Mavenjakarta.ws.rs:jakarta.ws.rs-api3.1.0pom.xml
Mavenjakarta.servlet:jakarta.servlet-api6.1.0pom.xml
Mavenorg.glassfish.jersey.containers:jersey-container-servlet${v.jersey}pom.xml
Mavenorg.glassfish.jersey.core:jersey-server${v.jersey}pom.xml
Mavenorg.glassfish.jersey.core:jersey-common${v.jersey}pom.xml
Mavenorg.glassfish.jersey.inject:jersey-hk2${v.jersey}pom.xml
Mavencom.fasterxml.jackson:jackson-bom${v.jackson}pom.xml
Mavenorg.apache.commons:commons-lang33.20.0pom.xml
Mavenorg.junit:junit-bom6.1.2pom.xml
Mavenorg.assertj:assertj-core3.27.7pom.xml
Mavencommons-codec:commons-codec1.22.0pom.xml
Mavennet.oauth.core:oauth-consumer20100527pom.xml
Mavencommons-io:commons-io2.22.0pom.xml
Mavennet.oauth.core:oauth20100527server/pom.xml
Mavennet.oauth.core:oauth-consumer20100527server/pom.xml
Mavennet.oauth.core:oauth-provider20100527server/pom.xml
Mavennet.oauth.core:oauth-httpclient420090913server/pom.xml
Mavenorg.apache.wink:wink-server1.4server/pom.xml
Mavenorg.apache.wink:wink-json4j1.4server/pom.xml
Mavenstax:stax-api1.0.1server/pom.xml
Mavenorg.apache.jena:jena-querybuilder${v.jena}store/pom.xml
Mavenorg.slf4j:jcl-over-slf4j${v.slf4j}store/pom.xml
Mavenorg.apache.jena:jena-core${v.jena}validation/pom.xml
Mavenorg.apache.jena:jena-arq${v.jena}validation/pom.xml
Mavenorg.apache.jena:jena-shacl${v.jena}validation/pom.xml
Mavenorg.eclipse.lyo.oslc4j.core:oslc4j-core${v.lyo}validation/pom.xml
Mavenorg.eclipse.lyo.oslc4j.core:oslc4j-jena-provider${v.lyo}validation/pom.xml
Mavenorg.eclipse.lyo:shacl${v.lyo}validation/pom.xml
All dependencies 171

Full resolved dependency set from the GitHub dependency graph: 60 direct and 111 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
Mavencom.fasterxml.jackson:jackson-bomdirect
Mavencom.fasterxml.jackson:jackson-bom2.19.2direct
Mavencommons-codec:commons-codecdirect
Mavencommons-codec:commons-codec1.22.0direct
Mavencommons-io:commons-io2.22.0direct
Mavenjakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-apidirect
Mavenjakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api3.0.2direct
Mavenjakarta.servlet:jakarta.servlet-apidirect
Mavenjakarta.servlet:jakarta.servlet-api6.1.0direct
Mavenjakarta.ws.rs:jakarta.ws.rs-apidirect
Mavenjakarta.ws.rs:jakarta.ws.rs-api3.1.0direct
Mavenjakarta.xml.bind:jakarta.xml.bind-apidirect
Mavenjakarta.xml.bind:jakarta.xml.bind-api4.0.2direct
Mavennet.oauth.core:oauthdirect
Mavennet.oauth.core:oauth20100527direct
Mavennet.oauth.core:oauth-consumerdirect
Mavennet.oauth.core:oauth-consumer20100527direct
Mavennet.oauth.core:oauth-httpclient4direct
Mavennet.oauth.core:oauth-httpclient420090913direct
Mavennet.oauth.core:oauth-providerdirect
Mavennet.oauth.core:oauth-provider20100527direct
Mavenorg.apache.commons:commons-lang3direct
Mavenorg.apache.commons:commons-lang33.20.0direct
Mavenorg.apache.httpcomponents:httpclientdirect
Mavenorg.apache.httpcomponents:httpclient4.5.14direct
Mavenorg.apache.jena:apache-jena-libsdirect
Mavenorg.apache.jena:apache-jena-libs6.1.0direct
Mavenorg.apache.jena:jena-arqdirect
Mavenorg.apache.jena:jena-coredirect
Mavenorg.apache.jena:jena-core6.1.0direct
Mavenorg.apache.jena:jena-querybuilderdirect
Mavenorg.apache.jena:jena-shacldirect
Mavenorg.apache.wink:wink-json4jdirect
Mavenorg.apache.wink:wink-json4j1.4direct
Mavenorg.apache.wink:wink-server1.4direct
Mavenorg.assertj:assertj-coredirect
Mavenorg.assertj:assertj-core3.27.7direct
Mavenorg.eclipse.lyo.oslc4j.core:oslc4j-coredirect
Mavenorg.eclipse.lyo.oslc4j.core:oslc4j-jena-providerdirect
Mavenorg.eclipse.lyo.oslc4j.core:oslc4j-json4j-providerdirect
Mavenorg.eclipse.lyo:shacldirect
Mavenorg.glassfish.jaxb:jaxb-runtime4.0.5direct
Mavenorg.glassfish.jersey.containers:jersey-container-servletdirect
Mavenorg.glassfish.jersey.containers:jersey-container-servlet3.1.11direct
Mavenorg.glassfish.jersey.core:jersey-clientdirect
Mavenorg.glassfish.jersey.core:jersey-client3.1.11direct
Mavenorg.glassfish.jersey.core:jersey-commondirect
Mavenorg.glassfish.jersey.core:jersey-common3.1.11direct
Mavenorg.glassfish.jersey.core:jersey-serverdirect
Mavenorg.glassfish.jersey.core:jersey-server3.1.11direct
Mavenorg.glassfish.jersey.inject:jersey-hk2direct
Mavenorg.glassfish.jersey.inject:jersey-hk23.1.11direct
Mavenorg.junit:junit-bom6.1.2direct
Mavenorg.slf4j:jcl-over-slf4jdirect
Mavenorg.slf4j:jcl-over-slf4j2.0.18direct
Mavenorg.slf4j:slf4j-apidirect
Mavenorg.slf4j:slf4j-api2.0.18direct
Mavenorg.slf4j:slf4j-simpledirect
Mavenorg.slf4j:slf4j-simple2.0.18direct
Mavenstax:stax-api1.0.1direct
Mavencom.diffplug.spotless:spotless-maven-plugin3.8.0indirect
Mavencom.fasterxml.jackson.core:jackson-annotationsindirect
Mavencom.fasterxml.jackson.core:jackson-coreindirect
Mavencom.fasterxml.jackson.core:jackson-databindindirect
Mavencom.fasterxml.jackson.dataformat:jackson-dataformat-yamlindirect
Mavencom.fasterxml.jackson.datatype:jackson-datatype-jsr310indirect
Mavencom.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-baseindirect
Mavencom.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-providerindirect
Mavencom.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotationsindirect
Mavencom.github.spotbugs:spotbugs-maven-pluginindirect
Mavencom.github.spotbugs:spotbugs-maven-plugin4.10.2.0indirect
Mavenio.github.classgraph:classgraph4.8.184indirect
Mavenio.swagger.core.v3:swagger-jaxrs2-jakarta2.2.42indirect
Mavenio.swagger.core.v3:swagger-jaxrs2-servlet-initializer-v2-jakarta2.2.42indirect
Mavenjakarta.activation:jakarta.activation-apiindirect
Mavenjakarta.activation:jakarta.activation-api2.1.3indirect
Mavenjakarta.annotation:jakarta.annotation-apiindirect
Mavenjakarta.annotation:jakarta.annotation-api3.0.0indirect
Mavenjakarta.inject:jakarta.inject-api2.0.1indirect
Mavenjakarta.validation:jakarta.validation-api3.1.1indirect
Mavenjunit:junitindirect
Mavenjunit:junit4.13.2indirect
Mavenorg.antlr:antlr-runtime3.5.3indirect
Mavenorg.antlr:antlr3-maven-plugin3.5.3indirect
Mavenorg.apache.httpcomponents:httpcoreindirect
Mavenorg.apache.jena:jena-bomindirect
Mavenorg.apache.jena:jena-tdb1indirect
Mavenorg.apache.maven.plugins:maven-clean-pluginindirect
Mavenorg.apache.maven.plugins:maven-clean-plugin3.5.0indirect
Mavenorg.apache.maven.plugins:maven-compiler-pluginindirect
Mavenorg.apache.maven.plugins:maven-compiler-plugin3.15.0indirect
Mavenorg.apache.maven.plugins:maven-dependency-plugin3.8.1indirect
Mavenorg.apache.maven.plugins:maven-deploy-pluginindirect
Mavenorg.apache.maven.plugins:maven-deploy-plugin3.1.4indirect
Mavenorg.apache.maven.plugins:maven-eclipse-plugin2.10indirect
Mavenorg.apache.maven.plugins:maven-enforcer-pluginindirect
Mavenorg.apache.maven.plugins:maven-enforcer-plugin3.6.0indirect
Mavenorg.apache.maven.plugins:maven-enforcer-plugin3.6.3indirect
Mavenorg.apache.maven.plugins:maven-failsafe-plugin3.5.6indirect
Mavenorg.apache.maven.plugins:maven-gpg-plugin3.2.8indirect
Mavenorg.apache.maven.plugins:maven-install-pluginindirect
Mavenorg.apache.maven.plugins:maven-install-plugin3.1.4indirect
Mavenorg.apache.maven.plugins:maven-jar-pluginindirect
Mavenorg.apache.maven.plugins:maven-jar-plugin3.5.0indirect
Mavenorg.apache.maven.plugins:maven-javadoc-pluginindirect
Mavenorg.apache.maven.plugins:maven-javadoc-plugin3.12.0indirect
Mavenorg.apache.maven.plugins:maven-project-info-reports-pluginindirect
Mavenorg.apache.maven.plugins:maven-project-info-reports-plugin3.9.0indirect
Mavenorg.apache.maven.plugins:maven-resources-pluginindirect
Mavenorg.apache.maven.plugins:maven-resources-plugin3.5.0indirect
Mavenorg.apache.maven.plugins:maven-site-pluginindirect
Mavenorg.apache.maven.plugins:maven-site-plugin3.22.0indirect
Mavenorg.apache.maven.plugins:maven-source-pluginindirect
Mavenorg.apache.maven.plugins:maven-source-plugin3.4.0indirect
Mavenorg.apache.maven.plugins:maven-surefire-pluginindirect
Mavenorg.apache.maven.plugins:maven-surefire-plugin3.5.6indirect
Mavenorg.apache.maven.plugins:maven-war-pluginindirect
Mavenorg.apache.maven.plugins:maven-war-plugin3.5.1indirect
Mavenorg.codehaus.mojo:build-helper-maven-plugin3.6.1indirect
Mavenorg.codehaus.mojo:versions-maven-plugin2.21.0indirect
Mavenorg.commonjava.maven.plugins:directory-maven-plugin1.0indirect
Mavenorg.cyclonedx:cyclonedx-maven-plugin2.9.2indirect
Mavenorg.eclipse.lyo.clients:oslc-clientindirect
Mavenorg.eclipse.lyo.clients:oslc-client-baseindirect
Mavenorg.eclipse.lyo.clients:oslc-java-client-resourcesindirect
Mavenorg.eclipse.lyo.core.query:oslc-queryindirect
Mavenorg.eclipse.lyo.oslc4j.core:lyo-core-modelindirect
Mavenorg.eclipse.lyo.oslc4j.core:lyo-core-settingsindirect
Mavenorg.eclipse.lyo.oslc4j.core:oslc4j-core-winkindirect
Mavenorg.eclipse.lyo.oslc4j.core:oslc4j-utilsindirect
Mavenorg.eclipse.lyo.server:net.oauth.core-oauth-consumer-jakartaindirect
Mavenorg.eclipse.lyo.server:net.oauth.core-oauth-httpclient4-jakartaindirect
Mavenorg.eclipse.lyo.server:net.oauth.core-oauth-jakartaindirect
Mavenorg.eclipse.lyo.server:net.oauth.core-oauth-provider-jakartaindirect
Mavenorg.eclipse.lyo.server:oauth-consumer-storeindirect
Mavenorg.eclipse.lyo.server:oauth-coreindirect
Mavenorg.eclipse.lyo.server:oauth-webappindirect
Mavenorg.eclipse.lyo.server:oslc-ui-modelindirect
Mavenorg.eclipse.lyo.store:store-coreindirect
Mavenorg.eclipse.lyo.trs:client-source-mqttindirect
Mavenorg.eclipse.lyo.trs:trs-clientindirect
Mavenorg.eclipse.lyo.trs:trs-serverindirect
Mavenorg.eclipse.lyo:lyo-bomindirect
Mavenorg.eclipse.lyo:lyo-validationindirect
Mavenorg.eclipse.lyo:oslc-domainsindirect
Mavenorg.eclipse.lyo:oslc-trsindirect
Mavenorg.eclipse.m2e:lifecycle-mapping1.0.0indirect
Mavenorg.eclipse.paho:org.eclipse.paho.client.mqttv31.2.5indirect
Mavenorg.eclipse.transformer:transformer-maven-plugin1.0.0indirect
Mavenorg.glassfish.jersey.connectors:jersey-apache-connectorindirect
Mavenorg.glassfish.jersey.connectors:jersey-apache5-connectorindirect
Mavenorg.glassfish.jersey.media:jersey-media-multipartindirect
Mavenorg.glassfish.jersey.test-framework.providers:jersey-test-framework-provider-grizzly2indirect
Mavenorg.glassfish.jersey.test-framework.providers:jersey-test-framework-provider-jettyindirect
Mavenorg.glassfish.jersey.test-framework:jersey-test-framework-coreindirect
Mavenorg.glassfish.web:jakarta.servlet.jsp.jstl3.0.1indirect
Mavenorg.jacoco:jacoco-maven-plugin0.8.15indirect
Mavenorg.jetbrains.dokka:dokka-maven-pluginindirect
Mavenorg.jetbrains.kotlin:kotlin-maven-pluginindirect
Mavenorg.jetbrains.kotlin:kotlin-stdlibindirect
Mavenorg.junit.jupiter:junit-jupiterindirect
Mavenorg.junit.jupiter:junit-jupiter-apiindirect
Mavenorg.junit.jupiter:junit-jupiter-engineindirect
Mavenorg.junit.jupiter:junit-jupiter-paramsindirect
Mavenorg.junit.platform:junit-platform-suiteindirect
Mavenorg.junit.vintage:junit-vintage-engineindirect
Mavenorg.mockito:mockito-coreindirect
Mavenorg.mockito:mockito-core5.23.0indirect
Mavenorg.slf4j:slf4j-bomindirect
Mavenorg.sonatype.central:central-publishing-maven-plugin0.11.0indirect
Mavenorg.tendiwa:git-version-insert-maven-plugin0.1indirect
Dependency advisories 1

Installing maven:org.eclipse.lyo:lyo-validation@7.0.0.Alpha12 pulls in 51 packages, direct and transitive: 1 carry known advisories, of which 0 are direct dependencies.

PackageVersionRelationSeverityAdvisoriesFixed in
org.apache.thrift:libthrift0.22.0indirecthigh10.23.0

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "integration",
        "oslc",
        "rdf"
      ],
      "is_fork": false,
      "size_kb": 8299,
      "has_wiki": true,
      "homepage": "https://oslc.github.io/developing-oslc-applications/eclipse_lyo/eclipse-lyo.html",
      "languages": {
        "CSS": 1219,
        "GAP": 15618,
        "HTML": 244729,
        "Java": 3200652,
        "Ruby": 8204,
        "Shell": 6567,
        "Kotlin": 5880,
        "Python": 2293,
        "FreeMarker": 954,
        "JavaScript": 10219
      },
      "pushed_at": "2026-07-23T12:35:10Z",
      "created_at": "2018-06-05T20:06:58Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-21T22:29:45Z",
      "description": "Eclipse Lyo, a Java SDK for OSLC-based tool integration",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "EPL-2.0",
      "default_branch": "master",
      "license_spdx_raw": "EPL-2.0",
      "primary_language": "Java",
      "significant_languages": [
        "Java"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Eclipse Lyo",
      "type": "Organization",
      "login": "eclipse-lyo",
      "company": null,
      "location": null,
      "followers": 4,
      "avatar_url": "https://avatars.githubusercontent.com/u/183411302?v=4",
      "created_at": "2024-09-30T16:45:18Z",
      "is_verified": null,
      "public_repos": 19,
      "account_age_days": 662
    },
    "license": {
      "state": "standard",
      "spdx_id": "EPL-2.0",
      "raw_spdx": "EPL-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v7.0.0-Alpha.10",
          "kind": "prerelease",
          "published_at": "2026-07-04T20:54:19Z"
        },
        {
          "tag": "v7.0.0.Alpha9",
          "kind": "other",
          "published_at": "2026-02-06T18:55:09Z"
        },
        {
          "tag": "7.0.0.Alpha8",
          "kind": "other",
          "published_at": "2025-12-01T19:34:05Z"
        },
        {
          "tag": "v7.0.0.Alpha7",
          "kind": "other",
          "published_at": "2025-11-22T21:32:03Z"
        },
        {
          "tag": "v7.0.0.Alpha6",
          "kind": "other",
          "published_at": "2025-11-22T16:00:07Z"
        },
        {
          "tag": "v7.0.0.Alpha5",
          "kind": "other",
          "published_at": "2025-11-22T14:25:12Z"
        },
        {
          "tag": "v7.0.0.Alpha4",
          "kind": "other",
          "published_at": "2025-11-22T13:26:14Z"
        },
        {
          "tag": "v7.0.0.Alpha3",
          "kind": "other",
          "published_at": "2025-05-17T14:16:41Z"
        },
        {
          "tag": "v7.0.0.Alpha2",
          "kind": "other",
          "published_at": "2024-11-15T19:56:04Z"
        },
        {
          "tag": "v7.0.0.Alpha1",
          "kind": "other",
          "published_at": "2024-11-15T19:00:04Z"
        },
        {
          "tag": "v6.0.0.Final",
          "kind": "other",
          "published_at": "2024-09-29T16:54:24Z"
        },
        {
          "tag": "v6.0.0.CR",
          "kind": "other",
          "published_at": "2024-09-17T20:58:11Z"
        },
        {
          "tag": "v6.0.0.Alpha1",
          "kind": "other",
          "published_at": "2024-09-29T16:54:33Z"
        },
        {
          "tag": "v5.1.1.Final",
          "kind": "other",
          "published_at": "2023-06-29T19:33:42Z"
        },
        {
          "tag": "v5.1.0",
          "kind": "minor",
          "published_at": "2023-06-29T10:56:39Z"
        },
        {
          "tag": "v5.0.0",
          "kind": "major",
          "published_at": "2022-05-10T21:05:47Z"
        },
        {
          "tag": "v5.0.0.CR",
          "kind": "other",
          "published_at": "2022-05-06T15:34:28Z"
        },
        {
          "tag": "v5.0.0.alpha4",
          "kind": "other",
          "published_at": "2022-02-12T14:45:35Z"
        },
        {
          "tag": "v5.0.0.alpha3",
          "kind": "other",
          "published_at": "2022-02-12T14:45:07Z"
        },
        {
          "tag": "v5.0.0.alpha2",
          "kind": "other",
          "published_at": "2022-02-12T14:44:16Z"
        },
        {
          "tag": "v5.0.0.alpha1",
          "kind": "other",
          "published_at": "2022-02-12T14:43:07Z"
        },
        {
          "tag": "v4.1.0",
          "kind": "minor",
          "published_at": "2021-12-23T18:30:02Z"
        },
        {
          "tag": "v4.1.0.RC",
          "kind": "other",
          "published_at": "2021-11-29T22:28:15Z"
        },
        {
          "tag": "v4.1.0.M1",
          "kind": "other",
          "published_at": "2021-10-13T16:32:31Z"
        },
        {
          "tag": "v4.0.0",
          "kind": "major",
          "published_at": "2020-12-18T00:12:30Z"
        },
        {
          "tag": "v4.0.0.RC",
          "kind": "other",
          "published_at": "2020-12-08T12:27:16Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "befa3984f967428f4b220ccb6de1b0c01f11214b",
          "body": null,
          "is_bot": false,
          "headline": "Add jersey-apache5-connector to BOM (#970)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-21T22:29:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c10f5d3fdd15ea3a9a839e802abdbe7d933eb456",
          "body": null,
          "is_bot": false,
          "headline": "client: refactor RmUtil into a general shape client (#961)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-19T14:42:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ebbd4108b823dc9f785a2c8df4da97d96e9932a",
          "body": null,
          "is_bot": false,
          "headline": "build: continue SNAPSHOT",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-15T01:13:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c0688d1194942fce4bb148cd65fb81aeec4ec22",
          "body": null,
          "is_bot": false,
          "headline": "release: 7.0.0.Alpha12",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-15T00:20:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5b0d4a700d1873bfd13a272ebd4705bcc3ec3529",
          "body": null,
          "is_bot": false,
          "headline": "bom: fix Jena BOM (#969)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-15T00:19:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ed1ce9f27b84a934fb43126b303f78615c0feaf",
          "body": null,
          "is_bot": false,
          "headline": "build: continue SNAPSHOT",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-15T00:07:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82b0e81fa1ab19e4f17395739c956f4d1fd831c1",
          "body": null,
          "is_bot": false,
          "headline": "release: 7.0.0.Alpha11 (#968)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-14T20:55:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ffde21acaac0dfc07af75660ad929812654e53ca",
          "body": "Signed-off-by: Andrew Berezovskyi <andriib@kth.se>",
          "is_bot": false,
          "headline": "bom: fix groupId for oslc-query, oslc-trs, shacl, lyo-validation (#966)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-14T20:36:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c366b69b296cf106d2c8308812f44917aaa5c5eb",
          "body": "Signed-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.junit:junit-bom from 6.1.1 to 6.1.2 (#962)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T20:09:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b97b8fc55dbaf96b666c8c8a28bfaa86c4c693ea",
          "body": null,
          "is_bot": false,
          "headline": "Cleanup rdf4j-repository-sparql dependency management (#959)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-07T13:11:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8a20286365d42a673b3e1aec24bdd05dbd453eb",
          "body": null,
          "is_bot": false,
          "headline": "continue SNAPSHOT development",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-04T20:56:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "811e3930a3efdc682a0487cc4b241ebbfff4a02f",
          "body": null,
          "is_bot": false,
          "headline": "build: 7.0.0-Alpha.10 (#957)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-07-04T20:36:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed33c70e304c9c9b0b394da4675ff3b2aaab04f9",
          "body": "….3.2 (#956)\n\n* chore: Bump org.eclipse.rdf4j:rdf4j-repository-sparql\n\nBumps org.eclipse.rdf4j:rdf4j-repository-sparql from 5.2.2 to 6.0.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.eclipse.rdf4j:rdf4j-repository-sparql\n  dependency-version: 6.0.0\n  dependency-type: direct:production\n  updat\n[…]\n\n\n---------\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Andrew Berezovskyi <andriib@kth.se>",
          "is_bot": true,
          "headline": "chore: Bump org.eclipse.rdf4j:rdf4j-repository-sparql from 5.2.2 to 5…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-04T15:35:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b61cf4b041080c7ba5ce56035756b945a3b04c05",
          "body": "Signed-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.junit:junit-bom from 6.1.0 to 6.1.1 (#954)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-03T18:08:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8c04fe31c0144bd0a57d8ec60a45cdfd172a229",
          "body": "Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.7.0 to 3.8.0.\n- [Release notes](https://github.com/diffplug/spotless/releases)\n- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)\n- [Commits](https://github.com/diffplug/spotless/co\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump com.diffplug.spotless:spotless-maven-plugin (#955)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-30T19:36:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "903eabf58269d065f38027daad8a230181a2b277",
          "body": "…(#951)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T20:28:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "991758a9871f094c45d92625be1a37d264826628",
          "body": "… 4.10.2.0 (#944)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.3 to…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-20T20:20:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "699cb78c51e139c9fae7842b191fd51bc0eedde2",
          "body": "… 0.10.0 to 0.11.0 (#947)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.sonatype.central:central-publishing-maven-plugin from…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-20T20:18:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9362f4debbf4f489b0d780d5605ac799396e438a",
          "body": "… 3.7.0 (#948)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump com.diffplug.spotless:spotless-maven-plugin from 3.6.0 to…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-20T20:14:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b989408878d39a6b4442d8d1d52d7a6872bdcc3",
          "body": "Signed-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump actions/checkout from 6 to 7 (#949)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-20T20:11:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7d72d267b1b6ed19be93d2d6733107b8dd496cb",
          "body": "Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.14 to 0.8.15.\n- [Release notes](https://github.com/jacoco/jacoco/releases)\n- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.14...v0.8.15)\n\n---\nupdated-dependencies:\n- dependency-name: org.jacoco:jacoco-maven-p\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15 (#942)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-08T21:53:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "326fe61f7d4933e0872f5c19860c7c3352fb7293",
          "body": "… to 3.5.6 (#937)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T18:59:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e98b3f3e03d355f1ff3317c2e4a1ea8bbec9a0a2",
          "body": "… to 3.5.6 (#936)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T18:59:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "212578239756e912dc7e4ec57e140d60f2b7eb89",
          "body": "… 3.6.0 (#935)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump com.diffplug.spotless:spotless-maven-plugin from 3.5.0 to…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T18:59:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b3badd258467e61592480b8d3029f195ac67f26",
          "body": "… 3.22.0 (#934)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-site-plugin from 3.20.0 to…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T18:59:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3ba262155a5ff509651588eb5f80e543b61e887",
          "body": "Signed-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.junit:junit-bom from 6.0.3 to 6.1.0 (#933)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T18:58:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7858eec8fb1e31746776abc21aecc123c2316fb4",
          "body": "… to 3.6.3 (#931)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T18:58:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ed508380607c4dbbb352ab0079193558c0b3b32",
          "body": "Signed-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump v.jena from 6.0.0 to 6.1.0 (#926)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-17T13:44:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ded91bd8b804e73bf3b8e69d1b696f07a89f1462",
          "body": "Signed-off-by: Andrew Berezovskyi <andriib@kth.se>",
          "is_bot": false,
          "headline": "docs: changelog",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-05-16T20:22:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d54b9ebabef91dbe500de23472a6b70bb423409c",
          "body": "…use (#741)",
          "is_bot": false,
          "headline": "Fix: Handle comparison operators < and <= correctly in OSLC Where cla…",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-05-16T20:20:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cfb52c92c12dde3698c3bf76d7c2acf711ab2851",
          "body": "… 3.5.0 (#929)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump com.diffplug.spotless:spotless-maven-plugin from 3.4.0 to…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-16T20:17:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35286232ad39040b0ea3f947b5c92c8000add42f",
          "body": "Signed-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore: Bump v.slf4j from 2.0.17 to 2.0.18 (#928)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-16T20:17:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86ed0e46393bccb405cb2177580576c3dd04d5ef",
          "body": "Bumps [commons-codec:commons-codec](https://github.com/apache/commons-codec) from 1.21.0 to 1.22.0.\n- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)\n- [Commits](https://github.com/apache/commons-codec/compare/rel/commons-codec-1.21.0...rel/commons-codec-1.22.0)\n\n-\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#923)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-06T19:50:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c6104f1453c244b5c0d7a1202a28e9afe1396969",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump v.kotlin from 2.3.20 to 2.3.21 (#920)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-25T12:39:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aabadead6e9b3cfd80b7adddccf26834158c2d01",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#922)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-25T12:17:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "184227c1879be663486a9659074ba2159cf564f8",
          "body": "…0 (#914)\n\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Andrew Berezovskyi <andrew@berezovskyi.me>",
          "is_bot": true,
          "headline": "chore: Bump org.jetbrains.dokka:dokka-maven-plugin from 2.1.0 to 2.2.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-19T10:49:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "313258581f2503a0c997081071963d1a77343113",
          "body": "… 4.9.8.3 (#915)\n\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.2 to…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-10T18:26:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23e3fd154792cc37f88f34842df6c8e45b2d15ef",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump v.kotlin from 2.3.10 to 2.3.20 (#912)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-28T15:54:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b247289ce506584d2f125a1389154d9e055d4beb",
          "body": "… 3.4.0 (#913)\n\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump com.diffplug.spotless:spotless-maven-plugin from 3.3.0 to…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-28T15:54:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43ed54e7f7240c82c7762a6dc9578cdd35cae197",
          "body": "… 3.3.0 (#907)\n\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump com.diffplug.spotless:spotless-maven-plugin from 3.2.1 to…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-14T14:43:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca29865cda12ee47cf462e29dffbdc077e612a56",
          "body": "…0 to 3.5.0 (#908)\n\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-14T14:43:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1677f304a0e10f4db1fe9aa42913e2161af41656",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.mockito:mockito-core from 5.21.0 to 5.23.0 (#910)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-14T14:34:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef98a9ddc5a6cb7900b885fe3f5cc8a8dd726b02",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Andrew Berezovskyi <andrew@berezovskyi.me>\nCo-authored-by: Andrew Berezovskyi <andriib@kth.se>",
          "is_bot": true,
          "headline": "chore: Bump v.kotlin from 2.2.21 to 2.3.10 (#892)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-14T14:34:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12b32a62cce062b091b69d19f095f0ed1e3a0018",
          "body": "…r keys (#905)",
          "is_bot": false,
          "headline": "More stable construction of return urls when approving Oauth1 consume…",
          "author_name": "Jad El-khoury",
          "author_login": "Jad-el-khoury",
          "committed_at": "2026-03-01T06:53:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2eee565cdf35caa48a1c74b7347e64f1db581e88",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.0.2...r6.0.3)\n\n---\nupdated-dependencies:\n- dependency-name: o\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.junit:junit-bom from 6.0.2 to 6.0.3 (#898)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-25T11:43:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "95371e3cf7c1d9b5f3b01d24dce22aa9a49a1341",
          "body": "Bumps [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) from 3.5.4 to 3.5.5.\n- [Release notes](https://github.com/apache/maven-surefire/releases)\n- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.4...surefire-3.5.5)\n\n---\nupdated-depend\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-failsafe-plugin (#903)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-25T11:43:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a92c3f12e8353e48cca3e1f87698af73932c1578",
          "body": "Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.4 to 3.5.5.\n- [Release notes](https://github.com/apache/maven-surefire/releases)\n- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.4...surefire-3.5.5)\n\n---\nupdated-depend\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-surefire-plugin (#902)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-25T11:42:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5fd34252f1e40cc6ecc5bfc50ea2bc1a85778bba",
          "body": null,
          "is_bot": false,
          "headline": "Fix link case sensitivity for CONTRIBUTING.md (#900)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-02-17T07:29:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77d0c77239ae9da67de13af32cb377de81a38b71",
          "body": "* Remove legacy Eclipse repository profile\n* docs: update changelog",
          "is_bot": false,
          "headline": "Remove legacy lyo-releases/lyo-snapshots repo profile (#895)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-02-14T15:33:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13c64088655c555f8fa7efd5874fef0d007e690b",
          "body": "* feat: use Lyo Store in TRS Client\n* docs: fix CHANGELOG",
          "is_bot": false,
          "headline": "Remove RDF4J from TRS Client and use Lyo Store instead  (#388)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-02-14T14:57:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7be4d085d114f406904bc60fe10510240f389b84",
          "body": "* When marshaling the RDF model, introduce a fallback mechanism to try to\nidentify the rdf:type, if no match with the OSLC Annotaions is found.\n\nCo-authored-by: Andrew Berezovskyi <andriib@kth.se>",
          "is_bot": false,
          "headline": "When marshaling the RDF model, introduce a fallback mechanism (#889)",
          "author_name": "Jad El-khoury",
          "author_login": "Jad-el-khoury",
          "committed_at": "2026-02-08T09:46:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a1fd3a25dd838bb45fcdf356d694047fdeb0d37",
          "body": null,
          "is_bot": false,
          "headline": "build: continue with 7.0.0-SNAPSHOT development",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-02-06T19:14:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a9e06fd7b50717ce094544607c0d9c75b8a949a",
          "body": null,
          "is_bot": false,
          "headline": "build: prep 7.0.0.Alpha9 (#893)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-02-06T18:32:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0e648e01e57ff3fcd3b5ce3648ce6afddd65811",
          "body": "Signed-off-by: Andrew Berezovskyi <andriib@kth.se>",
          "is_bot": false,
          "headline": "docs: Jena 6 migration",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-02-06T18:26:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d875cb3e012d05ea9922e1336401e1daeda4e639",
          "body": "* chore: Bump v.jena from 5.6.0 to 6.0.0\n* refactor: use RDF.dtXMLLiteral\n* refactor: TDB1 deprecation\n* build: disable spotless & openrewrite",
          "is_bot": true,
          "headline": "chore: Bump v.jena from 5.6.0 to 6.0.0 (#891)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-06T15:41:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1e9c23c69c064347ac92adb70b55a072b18d166",
          "body": "Bumps [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.14.1 to 3.15.0.\n- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)\n- [Commits](https://github.com/apache/maven-compiler-plugin/compare/maven-compiler-plugin-3.14.1.\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-compiler-plugin (#890)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-03T22:09:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "32a3622c3dea6a283ab313bc1c5b08566d3f232b",
          "body": "… to try to\"\n\nThis reverts commit 09f78f558d1c69c46b47771528e910f4a97e0b60.",
          "is_bot": false,
          "headline": "Revert \"When marshaling the RDF model, introduce a fallback mechanism…",
          "author_name": "Jad El-khoury",
          "author_login": "Jad-el-khoury",
          "committed_at": "2026-02-01T07:19:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09f78f558d1c69c46b47771528e910f4a97e0b60",
          "body": "identify the rdf:type, if no match with the OSLC Annotaions is found.",
          "is_bot": false,
          "headline": "When marshaling the RDF model, introduce a fallback mechanism to try to",
          "author_name": "Jad El-khoury",
          "author_login": "Jad-el-khoury",
          "committed_at": "2026-02-01T07:12:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1688524f9e71992168895040eb98d51f2fa5fcaa",
          "body": null,
          "is_bot": false,
          "headline": "test: improve net.oauth build phases",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-01-31T13:59:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08f6803e66bae00038cbb197567b680dfd7bc6b3",
          "body": null,
          "is_bot": false,
          "headline": "Deserialize Lyo Client responses into raw Jena models (#872)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-01-31T13:34:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "882b538cd4fb371deea7de6ddc24f0ad17493864",
          "body": "Added instructions for Copilot agent regarding safety, build workflow, merge conflict handling, and communication.",
          "is_bot": false,
          "headline": "Add Copilot agent instructions",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-01-31T13:31:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2475b03dc36c32f2ac9f1ce233818d509b06bd19",
          "body": "Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "docs: update the code docs in line with the oslc-specs & oslc4net (#878)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-01-31T11:33:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "63a3d939eda136ceef2087ad82c34305d7b47d64",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump swagger.version from 2.2.41 to 2.2.42 (#877)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-31T11:07:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f1911028c6cc0532e7086daedad13731444b9c3",
          "body": "…ty (#880)\n\n* JenaModelHelper to unmarshal reified statements of an extended Property\n* either create a Link (single dcterms:title) /or a MultiStatementLink\n(multiple/other predicates)\n* Update CHANGELOG.md\n* Harden MultiStatementLink against NPE and encapsulation violations (#882)\n* Document MultiStatementLink as unmarshalling-only container (#886)\n* optimise handling of reified statements",
          "is_bot": false,
          "headline": "JenaModelHelper to unmarshal reified statements of an extended Proper…",
          "author_name": "Jad El-khoury",
          "author_login": "Jad-el-khoury",
          "committed_at": "2026-01-31T09:53:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c05ece31f930b8cc8502b13c0a5fdcf71faad418",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump commons-codec:commons-codec from 1.20.0 to 1.21.0 (#888)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-30T21:32:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21e39219a1728d62ecfc4ccb4e76336ada6aa341",
          "body": "Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.1.0 to 3.2.1.\n- [Release notes](https://github.com/diffplug/spotless/releases)\n- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)\n- [Commits](https://github.com/diffplug/spotless/co\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump com.diffplug.spotless:spotless-maven-plugin (#885)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-30T16:20:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "099d3e3b581c68fd2e43fcb5babb2829952e36f7",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (#881)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-26T21:37:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2db708295a00cd29e0aacfa11085e284e3ee93b1",
          "body": null,
          "is_bot": false,
          "headline": "chore: fix typos (#869)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2026-01-26T11:04:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d2c1b3e6a86f7d7953a64f46c79f3a6ee95cef5",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.codehaus.mojo:versions-maven-plugin (#876)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-25T22:49:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3dea888e7f1a4c4b220c01350c6af3c1fa2484a5",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.junit:junit-bom from 6.0.1 to 6.0.2 (#868)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-09T00:12:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a20ec0d1b072c84b1dd45fa9ac9c033dcb9ee70d",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.sonatype.central:central-publishing-maven-plugin (#870)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-09T00:12:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44c3ff6161363cb11f49bf86f8cfe4af42fbf605",
          "body": "Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Support arrays and any iterables on extended properties (#867)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-12-29T22:20:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "85c42cf1b0b2d9e9a4b3d3b0d4f441f2c02c13ea",
          "body": null,
          "is_bot": false,
          "headline": "Replace commons-lang with commons-lang3 dependency (#865)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-12-23T12:00:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b8a86a9703271bfeca5424c46b4eae7069465a8e",
          "body": "Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Migrate lyo-validation from shaclex to jena-shacl (#857)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-12-20T17:10:06Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bd5f9fa26e4d67c9f324f1a8fef04d6f7aa13273",
          "body": "This reverts commit ecf057f482afb34461c8a056de6e708223f0202b.",
          "is_bot": false,
          "headline": "Revert \"chore: Bump v.kotlin from 2.2.21 to 2.3.0 (#861)\"",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-12-20T16:07:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4bfb5f0e0bac72c7ca80449bcea665f67ef94411",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.eclipse.rdf4j:rdf4j-repository-sparql (#860)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-20T16:01:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ecf057f482afb34461c8a056de6e708223f0202b",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump v.kotlin from 2.2.21 to 2.3.0 (#861)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-20T16:01:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40f49243648a4b7200938ffce34f318a6262a39a",
          "body": null,
          "is_bot": false,
          "headline": "B readme matrix (#863)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-12-20T12:33:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af9eb266d9112eca633f4c4b17e59e6bd1c4a809",
          "body": null,
          "is_bot": false,
          "headline": "docs: update Lyo versions used in the downstream project matrix (#862)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-12-20T11:38:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39629fdf0de5ccd6b3b4f3a73d163e270a61fe0b",
          "body": "… (#850)\n\nCo-authored-by: berezovskyi <64734+berezovskyi@users.noreply.github.com>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: Andrew Berezovskyi <andriib@kth.se>",
          "is_bot": false,
          "headline": "Make Error implement IExtendedResource to support extended properties…",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2025-12-13T22:19:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ba6a7963e4f0d2b60c09719cbd687dbf36decd51",
          "body": "Co-authored-by: Andrew Berezovskyi <andriib@kth.se>",
          "is_bot": false,
          "headline": "InMemPagedTRS handles concurrency. (#855)",
          "author_name": "Jad El-khoury",
          "author_login": "Jad-el-khoury",
          "committed_at": "2025-12-13T21:59:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77045ab353f531b514412f0d3dad7d55dac470a9",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-resources-plugin (#854)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-13T16:59:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea62993dcb2763acf659a895a0d91adebd153be1",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.eclipse.rdf4j:rdf4j-repository-sparql (#856)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-13T16:59:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2cf88d37d9a42ebdfa53e5f6692370d3919621d",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-source-plugin (#852)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-13T16:58:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85b784d3b8d5b37562970fbb2d3302caac2a876b",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump com.github.spotbugs:spotbugs-maven-plugin (#853)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-13T16:58:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f68e56f71c4ece32d7544a59cc95b3adc5a545c",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.mockito:mockito-core from 5.20.0 to 5.21.0 (#858)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-13T16:58:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e01fa59b1d7c7ad64f4c188ed80de35cb825378",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump actions/cache from 4 to 5 (#859)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-13T16:49:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6dec07b8f50d3ca876197cd7a5deeb5885d9ab9c",
          "body": null,
          "is_bot": false,
          "headline": "build: don't stagger any builds",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-12-01T19:28:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9400ba15fa9eebc7c41a4c15cb8a34916bf105f",
          "body": "This reverts commit a9119641793ddb56b3c726164f9e6a8b4675aab1.",
          "is_bot": false,
          "headline": "Revert \"build: 7.0.0.Alpha8 2nd try (#851)\"",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-12-01T19:27:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9119641793ddb56b3c726164f9e6a8b4675aab1",
          "body": null,
          "is_bot": false,
          "headline": "build: 7.0.0.Alpha8 2nd try (#851)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-12-01T19:18:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "69c85d04f8e1d73743fcd0171fbab8124d618ee1",
          "body": "This reverts commit 6abaacbe9a9ccf577e3e01992fb0c270cf761214.",
          "is_bot": false,
          "headline": "Revert \"build: prep for 7.0.0.Alpha8 (#841)\"",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-11-29T15:36:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6abaacbe9a9ccf577e3e01992fb0c270cf761214",
          "body": null,
          "is_bot": false,
          "headline": "build: prep for 7.0.0.Alpha8 (#841)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-11-29T15:29:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95914794057af165248f1867780f4cd9ccf265e5",
          "body": "Co-authored-by: berezovskyi <64734+berezovskyi@users.noreply.github.com>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Add trace log messages for redirect handling (#846)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2025-11-29T12:45:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8a56258334a2de82f331af97acc9cd1be1325dcb",
          "body": "…ep (#845)\n\nCo-authored-by: berezovskyi <64734+berezovskyi@users.noreply.github.com>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Enable SpotBugs static analysis with default profile and GitHub CI st…",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2025-11-29T12:14:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "929255a604100f847a9a68b3450f1595d40955f1",
          "body": null,
          "is_bot": false,
          "headline": "build: JDK 21 for codeql",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-11-28T21:33:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9167936eb8f24cf93e16fee03d73d7439d49217a",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.junit:junit-bom from 5.13.4 to 6.0.1 (#822)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-28T20:59:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e046cdde3aed05f6964b4c44049c3e1a2ef43da5",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.codehaus.mojo:versions-maven-plugin (#843)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-28T20:59:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2be6f0e29270a332bcf83fb8742a3dc8b7bd159",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump org.apache.maven.plugins:maven-war-plugin (#844)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-28T20:59:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7cbaa00f3ba487cb17e83d1fa6a3084c5e69470",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: Bump swagger.version from 2.2.35 to 2.2.41 (#842)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-28T20:52:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6ff3c256a0588a6e08fee53de103c8f0990e5cd",
          "body": null,
          "is_bot": false,
          "headline": "Update Jersey version to 3.1.11 (#837)",
          "author_name": "Andrew Berezovskyi",
          "author_login": "berezovskyi",
          "committed_at": "2025-11-22T22:24:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 26,
      "commits_last_year": 162,
      "latest_release_at": "2026-07-04T20:54:19Z",
      "latest_release_tag": "v7.0.0-Alpha.10",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 36,
      "days_since_latest_release": 20,
      "mean_days_between_releases": 66.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "org.eclipse.lyo:lyo-validation",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/org.eclipse.lyo/lyo-validation",
          "is_deprecated": false,
          "latest_version": "7.0.0.Alpha12",
          "repository_url": null,
          "versions_count": 19,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T00:33:20Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 10
        }
      ]
    },
    "popularity": {
      "forks": 20,
      "stars": 25,
      "watchers": 5,
      "fork_history": {
        "days": [
          {
            "date": "2020-06-24",
            "count": 1
          },
          {
            "date": "2021-02-15",
            "count": 1
          },
          {
            "date": "2021-02-20",
            "count": 3
          },
          {
            "date": "2021-04-16",
            "count": 1
          },
          {
            "date": "2021-10-07",
            "count": 1
          },
          {
            "date": "2021-11-10",
            "count": 1
          },
          {
            "date": "2021-12-14",
            "count": 1
          },
          {
            "date": "2022-12-06",
            "count": 1
          },
          {
            "date": "2023-02-17",
            "count": 1
          },
          {
            "date": "2023-06-14",
            "count": 1
          },
          {
            "date": "2023-10-18",
            "count": 1
          },
          {
            "date": "2023-10-26",
            "count": 1
          },
          {
            "date": "2024-08-12",
            "count": 1
          },
          {
            "date": "2024-11-05",
            "count": 1
          },
          {
            "date": "2025-06-18",
            "count": 1
          },
          {
            "date": "2025-11-10",
            "count": 1
          },
          {
            "date": "2026-05-17",
            "count": 1
          },
          {
            "date": "2026-07-24",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 20,
        "total_forks": 20
      },
      "star_history": null,
      "open_issues_and_prs": 117
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "bom/lyo-bom-consumer-test/pom.xml",
        "bom/lyo-bom/pom.xml",
        "client/oslc-client-base/pom.xml",
        "client/oslc-client/pom.xml",
        "client/oslc-java-client-resources/pom.xml",
        "client/pom.xml",
        "core/lyo-core-model/pom.xml",
        "core/lyo-core-settings/pom.xml",
        "core/oslc-query/pom.xml",
        "core/oslc-trs/pom.xml",
        "core/oslc4j-core-build/pom.xml",
        "core/oslc4j-core-wink/pom.xml",
        "core/oslc4j-core/pom.xml",
        "core/oslc4j-jena-provider/pom.xml",
        "core/oslc4j-json4j-provider/pom.xml",
        "core/oslc4j-utils/pom.xml",
        "core/shacl/pom.xml",
        "domains/oslc-domains/pom.xml",
        "pom.xml",
        "server/net.oauth.core-oauth-consumer-jakarta/pom.xml",
        "server/net.oauth.core-oauth-httpclient4-jakarta/pom.xml",
        "server/net.oauth.core-oauth-jakarta/pom.xml",
        "server/net.oauth.core-oauth-provider-jakarta/pom.xml",
        "server/oauth-consumer-store/pom.xml",
        "server/oauth-core/pom.xml",
        "server/oauth-webapp/pom.xml",
        "server/oslc-ui-model/pom.xml",
        "server/pom.xml",
        "store/pom.xml",
        "store/store-core/pom.xml",
        "trs/client/client-source-mqtt/pom.xml",
        "trs/client/pom.xml",
        "trs/client/trs-client/pom.xml",
        "trs/server/pom.xml",
        "validation/pom.xml"
      ],
      "largest_source_bytes": 88178,
      "source_files_sampled": 634,
      "oversized_source_files": 2,
      "agent_instruction_files": [
        ".github/copilot-instructions.md"
      ],
      "agent_instruction_max_bytes": 1530
    },
    "dependencies": {
      "manifests": [
        "client/pom.xml",
        "pom.xml",
        "server/pom.xml",
        "store/pom.xml",
        "validation/pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "org.apache.thrift:libthrift",
            "direct": false,
            "version": "0.22.0",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.3,
            "advisory_ids": [
              "GHSA-7pwc-h2j2-rjgj"
            ],
            "fixed_version": "0.23.0",
            "advisory_count": 1,
            "oldest_advisory_days": 81
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 51,
        "malicious_count": 0,
        "assessed_package": "maven:org.eclipse.lyo:lyo-validation@7.0.0.Alpha12",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "org.apache.httpcomponents:httpclient",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.httpclient}"
        },
        {
          "name": "jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.0.2"
        },
        {
          "name": "org.eclipse.lyo.oslc4j.core:oslc4j-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.lyo}"
        },
        {
          "name": "org.eclipse.lyo.oslc4j.core:oslc4j-jena-provider",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.lyo}"
        },
        {
          "name": "org.eclipse.lyo.oslc4j.core:oslc4j-json4j-provider",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.lyo}"
        },
        {
          "name": "jakarta.xml.bind:jakarta.xml.bind-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.0.2"
        },
        {
          "name": "org.glassfish.jaxb:jaxb-runtime",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.0.5"
        },
        {
          "name": "org.slf4j:slf4j-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.slf4j}"
        },
        {
          "name": "org.slf4j:slf4j-simple",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.slf4j}"
        },
        {
          "name": "org.slf4j:jcl-over-slf4j",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.slf4j}"
        },
        {
          "name": "stax:stax-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.0.1"
        },
        {
          "name": "org.apache.jena:jena-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jena}"
        },
        {
          "name": "org.apache.jena:apache-jena-libs",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jena}"
        },
        {
          "name": "org.glassfish.jersey.core:jersey-client",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jersey}"
        },
        {
          "name": "jakarta.ws.rs:jakarta.ws.rs-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.1.0"
        },
        {
          "name": "jakarta.servlet:jakarta.servlet-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "6.1.0"
        },
        {
          "name": "org.glassfish.jersey.containers:jersey-container-servlet",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jersey}"
        },
        {
          "name": "org.glassfish.jersey.core:jersey-server",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jersey}"
        },
        {
          "name": "org.glassfish.jersey.core:jersey-common",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jersey}"
        },
        {
          "name": "org.glassfish.jersey.inject:jersey-hk2",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jersey}"
        },
        {
          "name": "com.fasterxml.jackson:jackson-bom",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jackson}"
        },
        {
          "name": "org.apache.commons:commons-lang3",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.20.0"
        },
        {
          "name": "org.junit:junit-bom",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "6.1.2"
        },
        {
          "name": "org.assertj:assertj-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.27.7"
        },
        {
          "name": "commons-codec:commons-codec",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.22.0"
        },
        {
          "name": "net.oauth.core:oauth-consumer",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "20100527"
        },
        {
          "name": "commons-io:commons-io",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.22.0"
        },
        {
          "name": "net.oauth.core:oauth",
          "manifest": "server/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "20100527"
        },
        {
          "name": "net.oauth.core:oauth-consumer",
          "manifest": "server/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "20100527"
        },
        {
          "name": "net.oauth.core:oauth-provider",
          "manifest": "server/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "20100527"
        },
        {
          "name": "net.oauth.core:oauth-httpclient4",
          "manifest": "server/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "20090913"
        },
        {
          "name": "org.apache.wink:wink-server",
          "manifest": "server/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.4"
        },
        {
          "name": "org.apache.wink:wink-json4j",
          "manifest": "server/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.4"
        },
        {
          "name": "stax:stax-api",
          "manifest": "server/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.0.1"
        },
        {
          "name": "org.apache.jena:jena-querybuilder",
          "manifest": "store/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jena}"
        },
        {
          "name": "org.slf4j:jcl-over-slf4j",
          "manifest": "store/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.slf4j}"
        },
        {
          "name": "org.apache.jena:jena-core",
          "manifest": "validation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jena}"
        },
        {
          "name": "org.apache.jena:jena-arq",
          "manifest": "validation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jena}"
        },
        {
          "name": "org.apache.jena:jena-shacl",
          "manifest": "validation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.jena}"
        },
        {
          "name": "org.eclipse.lyo.oslc4j.core:oslc4j-core",
          "manifest": "validation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.lyo}"
        },
        {
          "name": "org.eclipse.lyo.oslc4j.core:oslc4j-jena-provider",
          "manifest": "validation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.lyo}"
        },
        {
          "name": "org.eclipse.lyo:shacl",
          "manifest": "validation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${v.lyo}"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "com.fasterxml.jackson:jackson-bom",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson:jackson-bom",
            "direct": true,
            "version": "2.19.2",
            "ecosystem": "maven"
          },
          {
            "name": "commons-codec:commons-codec",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "commons-codec:commons-codec",
            "direct": true,
            "version": "1.22.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": true,
            "version": "2.22.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.servlet.jsp.jstl:jakarta.servlet.jsp.jstl-api",
            "direct": true,
            "version": "3.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.servlet:jakarta.servlet-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.servlet:jakarta.servlet-api",
            "direct": true,
            "version": "6.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.ws.rs:jakarta.ws.rs-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.ws.rs:jakarta.ws.rs-api",
            "direct": true,
            "version": "3.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.xml.bind:jakarta.xml.bind-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.xml.bind:jakarta.xml.bind-api",
            "direct": true,
            "version": "4.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "net.oauth.core:oauth",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "net.oauth.core:oauth",
            "direct": true,
            "version": "20100527",
            "ecosystem": "maven"
          },
          {
            "name": "net.oauth.core:oauth-consumer",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "net.oauth.core:oauth-consumer",
            "direct": true,
            "version": "20100527",
            "ecosystem": "maven"
          },
          {
            "name": "net.oauth.core:oauth-httpclient4",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "net.oauth.core:oauth-httpclient4",
            "direct": true,
            "version": "20090913",
            "ecosystem": "maven"
          },
          {
            "name": "net.oauth.core:oauth-provider",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "net.oauth.core:oauth-provider",
            "direct": true,
            "version": "20100527",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": true,
            "version": "3.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpclient",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpclient",
            "direct": true,
            "version": "4.5.14",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.jena:apache-jena-libs",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.jena:apache-jena-libs",
            "direct": true,
            "version": "6.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.jena:jena-arq",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.jena:jena-core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.jena:jena-core",
            "direct": true,
            "version": "6.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.jena:jena-querybuilder",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.jena:jena-shacl",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.wink:wink-json4j",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.wink:wink-json4j",
            "direct": true,
            "version": "1.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.wink:wink-server",
            "direct": true,
            "version": "1.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.assertj:assertj-core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.assertj:assertj-core",
            "direct": true,
            "version": "3.27.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.oslc4j.core:oslc4j-core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.oslc4j.core:oslc4j-jena-provider",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.oslc4j.core:oslc4j-json4j-provider",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo:shacl",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jaxb:jaxb-runtime",
            "direct": true,
            "version": "4.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.containers:jersey-container-servlet",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.containers:jersey-container-servlet",
            "direct": true,
            "version": "3.1.11",
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.core:jersey-client",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.core:jersey-client",
            "direct": true,
            "version": "3.1.11",
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.core:jersey-common",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.core:jersey-common",
            "direct": true,
            "version": "3.1.11",
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.core:jersey-server",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.core:jersey-server",
            "direct": true,
            "version": "3.1.11",
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.inject:jersey-hk2",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.inject:jersey-hk2",
            "direct": true,
            "version": "3.1.11",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit:junit-bom",
            "direct": true,
            "version": "6.1.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:jcl-over-slf4j",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:jcl-over-slf4j",
            "direct": true,
            "version": "2.0.18",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": true,
            "version": "2.0.18",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-simple",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-simple",
            "direct": true,
            "version": "2.0.18",
            "ecosystem": "maven"
          },
          {
            "name": "stax:stax-api",
            "direct": true,
            "version": "1.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.diffplug.spotless:spotless-maven-plugin",
            "direct": false,
            "version": "3.8.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-annotations",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-core",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.datatype:jackson-datatype-jsr310",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-base",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.module:jackson-module-jakarta-xmlbind-annotations",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs-maven-plugin",
            "direct": false,
            "version": "4.10.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.classgraph:classgraph",
            "direct": false,
            "version": "4.8.184",
            "ecosystem": "maven"
          },
          {
            "name": "io.swagger.core.v3:swagger-jaxrs2-jakarta",
            "direct": false,
            "version": "2.2.42",
            "ecosystem": "maven"
          },
          {
            "name": "io.swagger.core.v3:swagger-jaxrs2-servlet-initializer-v2-jakarta",
            "direct": false,
            "version": "2.2.42",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.activation:jakarta.activation-api",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.activation:jakarta.activation-api",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.annotation:jakarta.annotation-api",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.annotation:jakarta.annotation-api",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.inject:jakarta.inject-api",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.validation:jakarta.validation-api",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": false,
            "version": "4.13.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.antlr:antlr-runtime",
            "direct": false,
            "version": "3.5.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.antlr:antlr3-maven-plugin",
            "direct": false,
            "version": "3.5.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpcore",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.jena:jena-bom",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.jena:jena-tdb1",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-clean-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-clean-plugin",
            "direct": false,
            "version": "3.5.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": "3.15.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-dependency-plugin",
            "direct": false,
            "version": "3.8.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-deploy-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-deploy-plugin",
            "direct": false,
            "version": "3.1.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-eclipse-plugin",
            "direct": false,
            "version": "2.10",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": "3.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": "3.6.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-failsafe-plugin",
            "direct": false,
            "version": "3.5.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-gpg-plugin",
            "direct": false,
            "version": "3.2.8",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-install-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-install-plugin",
            "direct": false,
            "version": "3.1.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": "3.5.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": "3.12.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-project-info-reports-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-project-info-reports-plugin",
            "direct": false,
            "version": "3.9.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-resources-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-resources-plugin",
            "direct": false,
            "version": "3.5.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-site-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-site-plugin",
            "direct": false,
            "version": "3.22.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": "3.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": "3.5.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-war-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-war-plugin",
            "direct": false,
            "version": "3.5.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:build-helper-maven-plugin",
            "direct": false,
            "version": "3.6.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:versions-maven-plugin",
            "direct": false,
            "version": "2.21.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.commonjava.maven.plugins:directory-maven-plugin",
            "direct": false,
            "version": "1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.cyclonedx:cyclonedx-maven-plugin",
            "direct": false,
            "version": "2.9.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.clients:oslc-client",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.clients:oslc-client-base",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.clients:oslc-java-client-resources",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.core.query:oslc-query",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.oslc4j.core:lyo-core-model",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.oslc4j.core:lyo-core-settings",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.oslc4j.core:oslc4j-core-wink",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.oslc4j.core:oslc4j-utils",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.server:net.oauth.core-oauth-consumer-jakarta",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.server:net.oauth.core-oauth-httpclient4-jakarta",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.server:net.oauth.core-oauth-jakarta",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.server:net.oauth.core-oauth-provider-jakarta",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.server:oauth-consumer-store",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.server:oauth-core",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.server:oauth-webapp",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.server:oslc-ui-model",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.store:store-core",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.trs:client-source-mqtt",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.trs:trs-client",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo.trs:trs-server",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo:lyo-bom",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo:lyo-validation",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo:oslc-domains",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.lyo:oslc-trs",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.m2e:lifecycle-mapping",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.paho:org.eclipse.paho.client.mqttv3",
            "direct": false,
            "version": "1.2.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.transformer:transformer-maven-plugin",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.connectors:jersey-apache-connector",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.connectors:jersey-apache5-connector",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.media:jersey-media-multipart",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.test-framework.providers:jersey-test-framework-provider-grizzly2",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.test-framework.providers:jersey-test-framework-provider-jetty",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.jersey.test-framework:jersey-test-framework-core",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.web:jakarta.servlet.jsp.jstl",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.jacoco:jacoco-maven-plugin",
            "direct": false,
            "version": "0.8.15",
            "ecosystem": "maven"
          },
          {
            "name": "org.jetbrains.dokka:dokka-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.jetbrains.kotlin:kotlin-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.jetbrains.kotlin:kotlin-stdlib",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-api",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-engine",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-params",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.platform:junit-platform-suite",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.vintage:junit-vintage-engine",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-core",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-core",
            "direct": false,
            "version": "5.23.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-bom",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.sonatype.central:central-publishing-maven-plugin",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.tendiwa:git-version-insert-maven-plugin",
            "direct": false,
            "version": "0.1",
            "ecosystem": "maven"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 171,
        "direct_count": 60,
        "indirect_count": 111
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 14,
        "merged_prs": 467,
        "open_issues": 103,
        "closed_ratio": 0.532,
        "closed_issues": 117,
        "closed_unmerged_prs": 270
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "berezovskyi",
          "commits": 885,
          "avatar_url": "https://avatars.githubusercontent.com/u/64734?v=4"
        },
        {
          "type": "User",
          "login": "mffiedler",
          "commits": 162,
          "avatar_url": "https://avatars.githubusercontent.com/u/1133529?v=4"
        },
        {
          "type": "User",
          "login": "jadelkhoury",
          "commits": 145,
          "avatar_url": "https://avatars.githubusercontent.com/u/7108694?v=4"
        },
        {
          "type": "User",
          "login": "Jad-el-khoury",
          "commits": 31,
          "avatar_url": "https://avatars.githubusercontent.com/u/121724599?v=4"
        },
        {
          "type": "User",
          "login": "yashkhatri",
          "commits": 15,
          "avatar_url": "https://avatars.githubusercontent.com/u/6545186?v=4"
        },
        {
          "type": "User",
          "login": "neormx",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/13894065?v=4"
        },
        {
          "type": "User",
          "login": "snyk-bot",
          "commits": 13,
          "avatar_url": "https://avatars.githubusercontent.com/u/19733683?v=4"
        },
        {
          "type": "User",
          "login": "dgterry",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/18354398?v=4"
        },
        {
          "type": "User",
          "login": "jad-elkhoury",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/93978874?v=4"
        },
        {
          "type": "User",
          "login": "benjaminr-ps",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/16348067?v=4"
        }
      ],
      "contributors_sampled": 27,
      "top_contributor_share": 0.671
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "codeql-analysis.yml",
        "maven.yml",
        "readme-gen.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": true,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/13 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 12 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 7,
            "reason": "SAST tool detected but not run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "befa3984f967428f4b220ccb6de1b0c01f11214b",
        "ran_at": "2026-07-25T11:27:16Z",
        "aggregate_score": 6.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T19:12:41Z",
      "oldest_open_prs": [
        {
          "number": 220,
          "created_at": "2021-12-11T18:03:56Z",
          "last_comment_at": "2025-12-22T11:27:35Z",
          "last_comment_author": "oslc-bot"
        },
        {
          "number": 847,
          "created_at": "2025-11-29T11:21:26Z",
          "last_comment_at": "2026-02-14T21:52:25Z",
          "last_comment_author": "oslc-bot"
        },
        {
          "number": 848,
          "created_at": "2025-11-29T12:38:57Z",
          "last_comment_at": "2026-04-10T18:29:16Z",
          "last_comment_author": "oslc-bot"
        },
        {
          "number": 866,
          "created_at": "2025-12-28T01:49:15Z",
          "last_comment_at": "2025-12-28T15:42:33Z",
          "last_comment_author": "oslc-bot"
        },
        {
          "number": 873,
          "created_at": "2026-01-16T22:30:16Z",
          "last_comment_at": "2026-02-14T21:52:47Z",
          "last_comment_author": "oslc-bot"
        },
        {
          "number": 896,
          "created_at": "2026-02-14T12:49:53Z",
          "last_comment_at": "2026-05-16T20:08:22Z",
          "last_comment_author": "oslc-bot"
        },
        {
          "number": 897,
          "created_at": "2026-02-14T15:02:49Z",
          "last_comment_at": "2026-02-14T15:23:13Z",
          "last_comment_author": "berezovskyi"
        },
        {
          "number": 945,
          "created_at": "2026-06-11T19:13:56Z",
          "last_comment_at": "2026-06-12T16:05:25Z",
          "last_comment_author": "oslc-bot"
        },
        {
          "number": 950,
          "created_at": "2026-06-22T19:13:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 952,
          "created_at": "2026-06-23T19:12:50Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 960,
          "created_at": "2026-07-07T14:50:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 963,
          "created_at": "2026-07-13T19:15:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 965,
          "created_at": "2026-07-14T19:17:23Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 971,
          "created_at": "2026-07-22T19:14:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-21T22:29:41Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 121,
          "created_at": "2017-07-20T19:58:25Z",
          "last_comment_at": "2017-07-20T22:23:26Z",
          "last_comment_author": "berezovskyi"
        },
        {
          "number": 125,
          "created_at": "2017-09-26T13:02:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 146,
          "created_at": "2018-05-28T21:32:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 144,
          "created_at": "2018-05-28T21:34:19Z",
          "last_comment_at": "2019-02-19T14:30:39Z",
          "last_comment_author": "jamsden"
        },
        {
          "number": 164,
          "created_at": "2018-06-19T15:38:04Z",
          "last_comment_at": "2022-02-12T14:00:11Z",
          "last_comment_author": "berezovskyi"
        },
        {
          "number": 155,
          "created_at": "2018-08-15T09:53:15Z",
          "last_comment_at": "2018-08-15T09:53:35Z",
          "last_comment_author": "berezovskyi"
        },
        {
          "number": 188,
          "created_at": "2018-11-11T01:07:55Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 167,
          "created_at": "2018-11-12T23:06:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 158,
          "created_at": "2018-11-25T19:24:46Z",
          "last_comment_at": "2019-01-16T14:44:20Z",
          "last_comment_author": "berezovskyi"
        },
        {
          "number": 163,
          "created_at": "2018-11-25T19:28:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 33,
          "created_at": "2019-01-29T21:15:09Z",
          "last_comment_at": "2020-12-04T23:14:54Z",
          "last_comment_author": "jadelkhoury"
        },
        {
          "number": 148,
          "created_at": "2019-02-01T16:33:55Z",
          "last_comment_at": "2022-02-12T13:56:06Z",
          "last_comment_author": "berezovskyi"
        },
        {
          "number": 123,
          "created_at": "2019-02-14T22:35:54Z",
          "last_comment_at": "2019-02-14T23:21:33Z",
          "last_comment_author": "jadelkhoury"
        },
        {
          "number": 149,
          "created_at": "2019-02-15T01:26:54Z",
          "last_comment_at": "2019-02-15T01:27:22Z",
          "last_comment_author": "berezovskyi"
        },
        {
          "number": 150,
          "created_at": "2019-02-15T01:45:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 151,
          "created_at": "2019-02-15T01:57:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 187,
          "created_at": "2019-02-15T15:58:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 132,
          "created_at": "2019-02-15T20:07:29Z",
          "last_comment_at": "2020-11-10T22:19:31Z",
          "last_comment_author": "berezovskyi"
        },
        {
          "number": 154,
          "created_at": "2019-02-15T21:21:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 157,
          "created_at": "2019-02-17T20:15:08Z",
          "last_comment_at": "2019-07-18T17:37:07Z",
          "last_comment_author": "berezovskyi"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/eclipse-lyo/lyo",
    "host": "github.com",
    "name": "lyo",
    "owner": "eclipse-lyo"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 72,
      "inputs": {
        "security": 66,
        "vitality": 90,
        "community": 62,
        "governance": 56,
        "engineering": 84
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 90,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "commits_last_year": 162,
              "human_commit_share": 0.46,
              "days_since_last_push": 1,
              "active_weeks_last_year": 36
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "36/52 weeks with commits",
                "points": 24.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 36
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "162 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 162
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "releases_count": 26,
              "latest_release_tag": "v7.0.0-Alpha.10",
              "releases_from_tags": false,
              "days_since_latest_release": 20,
              "mean_days_between_releases": 66.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "26 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 26
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 20 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 20
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~66.2 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 66.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 3,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 3 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 62,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 36,
            "inputs": {
              "forks": 20,
              "stars": 25,
              "watchers": 5,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "25 stars",
                "points": 22.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 25
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "20 forks",
                "points": 10.7,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "5 watchers",
                "points": 3.3,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (EPL-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "EPL-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 56,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 27,
              "top_contributor_share": 0.671
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 67% of commits",
                "points": 7.4,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 67
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "27 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 27
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 12 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 49,
            "inputs": {
              "merged_prs": 467,
              "open_issues": 103,
              "closed_issues": 117,
              "issue_closed_ratio": 0.532,
              "closed_unmerged_prs": 270
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "53% of issues closed",
                "points": 24.9,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 53
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "467/737 decided PRs merged",
                "points": 24.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 467,
                      "decided": 737
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/13 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 48,
            "inputs": {
              "followers": 4,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "eclipse-lyo",
              "public_repos": 19,
              "account_age_days": 662
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "4 followers of eclipse-lyo",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 4,
                      "login": "eclipse-lyo"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "19 public repos, account ~1 yr old",
                "points": 13.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 19
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "org.eclipse.lyo:lyo-validation"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 10
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 10 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 10
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "19 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 19
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 84,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "integration",
                "oslc",
                "rdf"
              ],
              "has_wiki": true,
              "homepage": "https://oslc.github.io/developing-oslc-applications/eclipse_lyo/eclipse-lyo.html",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://oslc.github.io/developing-oslc-applications/eclipse_lyo/eclipse-lyo.html",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "3 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 61,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 6.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/13 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 12 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected but not run on all commits",
                "points": 3.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Matched the maven:org.eclipse.lyo:lyo-validation@7.0.0.Alpha12 runtime dependency closure — what installing the published package pulls in — 51 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:org.eclipse.lyo:lyo-validation@7.0.0.Alpha12",
                  "assessed": 51
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 85,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 51,
              "unassessed_packages": 0,
              "affected_by_severity": "high 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: org.apache.thrift:libthrift 0.22.0 (high 7.3)",
                "points": 10.4,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "org.apache.thrift:libthrift 0.22.0 (high 7.3)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 51,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 6
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 78,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.891,
              "agent_instruction_files": [
                ".github/copilot-instructions.md"
              ],
              "agent_instruction_max_bytes": 1530
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".github/copilot-instructions.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".github/copilot-instructions.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "41 of 46 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 41,
                      "sampled": 46
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.06,
              "toolchain_manifests": [
                "bom/lyo-bom-consumer-test/pom.xml",
                "bom/lyo-bom/pom.xml",
                "client/oslc-client-base/pom.xml",
                "client/oslc-client/pom.xml",
                "client/oslc-java-client-resources/pom.xml",
                "client/pom.xml",
                "core/lyo-core-model/pom.xml",
                "core/lyo-core-settings/pom.xml",
                "core/oslc-query/pom.xml",
                "core/oslc-trs/pom.xml",
                "core/oslc4j-core-build/pom.xml",
                "core/oslc4j-core-wink/pom.xml",
                "core/oslc4j-core/pom.xml",
                "core/oslc4j-jena-provider/pom.xml",
                "core/oslc4j-json4j-provider/pom.xml",
                "core/oslc4j-utils/pom.xml",
                "core/shacl/pom.xml",
                "domains/oslc-domains/pom.xml",
                "pom.xml",
                "server/net.oauth.core-oauth-consumer-jakarta/pom.xml",
                "server/net.oauth.core-oauth-httpclient4-jakarta/pom.xml",
                "server/net.oauth.core-oauth-jakarta/pom.xml",
                "server/net.oauth.core-oauth-provider-jakarta/pom.xml",
                "server/oauth-consumer-store/pom.xml",
                "server/oauth-core/pom.xml",
                "server/oauth-webapp/pom.xml",
                "server/oslc-ui-model/pom.xml",
                "server/pom.xml",
                "store/pom.xml",
                "store/store-core/pom.xml",
                "trs/client/client-source-mqtt/pom.xml",
                "trs/client/pom.xml",
                "trs/client/trs-client/pom.xml",
                "trs/server/pom.xml",
                "validation/pom.xml"
              ],
              "dependency_bot_commit_share": 0.54
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "bom/lyo-bom-consumer-test/pom.xml, bom/lyo-bom/pom.xml, client/oslc-client-base/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "bom/lyo-bom-consumer-test/pom.xml, bom/lyo-bom/pom.xml, client/oslc-client-base/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "6 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "54 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 54,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 88178,
              "source_files_sampled": 634,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/634 source files over 60KB",
                "points": 54.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 634,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T11:27:39.702178Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/eclipse-lyo/lyo.svg",
  "full_name": "eclipse-lyo/lyo",
  "license_state": "standard",
  "license_spdx": "EPL-2.0"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsMaven.