Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 00:44 UTC
frfrisby / frisby-core
Type-safe validation and async pipeline building blocks for Java 17. No annotation processors. No reflection. No heavyweight dependencies.
frfrisby/frisby-core holds a health index of 54 out of 100, placing it in the Moderate band. It scores highest on Vitality (74/100) and lowest on Community & Adoption (24/100). It was last updated 3 days ago. A single contributor accounts for most of its recent work.
54
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
54
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Frank FrisbyPersonal account
0 followers2 public repossince Dec 2022
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Maven | software.frisby.core:util | 1.3.0 | - | 14 | 9 days ago |
| Maven | software.frisby.core:validation | 1.3.0 | - | 14 | 9 days ago |
| Maven | software.frisby.core:concurrency | 1.3.0 | - | 14 | 9 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
74
Development activity
56Moderate
How it's scored
| 36/36 | Push recency — last push 3 days ago |
| 3.5/36 | Commit cadence — 5/52 weeks with commits |
| 16.9/18 | Commit volume — 75 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 75 |
| human_commit_share | 0.947 |
| days_since_last_push | 3 |
| active_weeks_last_year | 5 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 16 releases published |
| 36/36 | Release recency — latest release 9 days ago |
| 27/27 | Release cadence — a release every ~6.9 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 16 |
| latest_release_tag | v1.3.0 |
| releases_from_tags | no |
| days_since_latest_release | 9 |
| mean_days_between_releases | 6.9 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
24
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
48
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 38.2/38.3 | PR acceptance — 70/70 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 70 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship
26Critical
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 0/25 | Owner reach — 0 followers of frfrisby |
| 10.8/25 | Track record — 2 public repos, account ~3 yr old |
Inputs used
| followers | 0 |
| owner_type | User |
| is_verified | — |
| owner_login | frfrisby |
| public_repos | 2 |
| account_age_days | 1,329 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 3 package(s) on maven |
| 35/35 | Publish recency — latest publish 9 days ago |
| 20/20 | Version history — 14 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | software.frisby.core:util, software.frisby.core:validation, software.frisby.core:concurrency |
| ecosystems | maven |
| any_deprecated | no |
| min_days_since_publish | 9 |
Engineering Quality
Are baseline engineering and documentation practices in place?
67
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 5 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
65Moderate
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
55
Security posture
44At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 2.5/2.5 | CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4.4 |
Excluded from scoring (no data or not applicable): branch_protection, signed_releases. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 1 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:software.frisby.core:util@1.3.0 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
53
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 69 of 71 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.972 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 12.6/18 | One-command bootstrap — bom/pom.xml, concurrency/pom.xml, pom.xml (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Java (statically typed) |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 75 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | bom/pom.xml, concurrency/pom.xml, pom.xml, util/pom.xml, validation/pom.xml |
| dependency_bot_commit_share | 0 |
Code legibility for models
97Excellent
How it's scored
| 45/45 | Type-checkable code — Java (statically typed) |
| 52.1/55 | Manageable file sizes — 13/245 source files over 60KB |
Inputs used
| primary_language | Java |
| largest_source_bytes | 231,065 |
| source_files_sampled | 245 |
| oversized_source_files | 13 |
Key facts
0GitHub stars
1contributors
75commits, last 12 months
3days since last push
16releases
1bus factor
0open issues
Mavenpackage ecosystems
More detail
OpenSSF Scorecard 4.4 / 10
4.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 6
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Maven | software.frisby.core:concurrency | ${project.version} | bom/pom.xml |
| Maven | software.frisby.core:util | ${project.version} | bom/pom.xml |
| Maven | software.frisby.core:validation | ${project.version} | bom/pom.xml |
| Maven | software.frisby.core:validation | — | concurrency/pom.xml |
| Maven | software.frisby.core:validation | ${project.version} | pom.xml |
| Maven | software.frisby.core:validation | — | util/pom.xml |
All dependencies 41
Full resolved dependency set from the GitHub dependency graph: 4 direct and 37 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Maven | software.frisby.core:concurrency | 1.3.1-SNAPSHOT | direct |
| Maven | software.frisby.core:util | 1.3.1-SNAPSHOT | direct |
| Maven | software.frisby.core:validation | — | direct |
| Maven | software.frisby.core:validation | 1.3.1-SNAPSHOT | direct |
| Maven | kr.motd.maven:os-maven-plugin | 1.7.1 | indirect |
| Maven | org.apache.maven.plugins:maven-clean-plugin | 3.3.2 | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | 3.12.1 | indirect |
| Maven | org.apache.maven.plugins:maven-dependency-plugin | 3.6.1 | indirect |
| Maven | org.apache.maven.plugins:maven-deploy-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-deploy-plugin | 3.1.1 | indirect |
| Maven | org.apache.maven.plugins:maven-enforcer-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-enforcer-plugin | 3.4.1 | indirect |
| Maven | org.apache.maven.plugins:maven-failsafe-plugin | 3.2.3 | indirect |
| Maven | org.apache.maven.plugins:maven-gpg-plugin | 3.2.7 | indirect |
| Maven | org.apache.maven.plugins:maven-install-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-install-plugin | 3.1.1 | indirect |
| Maven | org.apache.maven.plugins:maven-jar-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-jar-plugin | 3.3.0 | indirect |
| Maven | org.apache.maven.plugins:maven-javadoc-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-javadoc-plugin | 3.6.3 | indirect |
| Maven | org.apache.maven.plugins:maven-resources-plugin | 3.3.1 | indirect |
| Maven | org.apache.maven.plugins:maven-source-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-source-plugin | 3.3.0 | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-plugin | 3.2.3 | indirect |
| Maven | org.apache.maven.plugins:maven-surefire-report-plugin | 3.2.3 | indirect |
| Maven | org.codehaus.mojo:build-helper-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:build-helper-maven-plugin | 3.5.0 | indirect |
| Maven | org.codehaus.mojo:exec-maven-plugin | 3.1.1 | indirect |
| Maven | org.codehaus.mojo:flatten-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:flatten-maven-plugin | 1.5.0 | indirect |
| Maven | org.codehaus.mojo:versions-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:versions-maven-plugin | 2.16.2 | indirect |
| Maven | org.jacoco:jacoco-maven-plugin | — | indirect |
| Maven | org.jacoco:jacoco-maven-plugin | 0.8.11 | indirect |
| Maven | org.junit.jupiter:junit-jupiter | — | indirect |
| Maven | org.junit.jupiter:junit-jupiter | 5.14.3 | indirect |
| Maven | org.junit:junit-bom | 5.14.3 | indirect |
| Maven | org.sonarsource.scanner.maven:sonar-maven-plugin | — | indirect |
| Maven | org.sonarsource.scanner.maven:sonar-maven-plugin | 3.10.0.2594 | indirect |
Dependency advisories 0
Installing maven:software.frisby.core:util@1.3.0 pulls in 1 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 589,
"has_wiki": false,
"homepage": null,
"languages": {
"Java": 3501309
},
"pushed_at": "2026-07-22T13:12:54Z",
"created_at": "2026-05-13T17:23:15Z",
"owner_type": "User",
"updated_at": "2026-07-22T13:12:06Z",
"description": "Type-safe validation and async pipeline building blocks for Java 17. No annotation processors. No reflection. No heavyweight dependencies.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Java",
"significant_languages": [
"Java"
]
},
"owner": {
"blog": null,
"name": "Frank Frisby",
"type": "User",
"login": "frfrisby",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/119800623?v=4",
"created_at": "2022-12-04T14:50:17Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 1329
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-07-16T13:46:03Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-06-26T16:13:30Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2026-05-21T13:57:35Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-05-18T17:17:07Z"
},
{
"tag": "v1.0.11",
"kind": "patch",
"published_at": "2026-05-15T20:09:58Z"
},
{
"tag": "v1.0.10",
"kind": "patch",
"published_at": "2026-05-15T19:34:13Z"
},
{
"tag": "v1.0.9",
"kind": "patch",
"published_at": "2026-05-15T19:13:17Z"
},
{
"tag": "v1.0.8",
"kind": "patch",
"published_at": "2026-05-15T18:58:34Z"
},
{
"tag": "v1.0.7",
"kind": "patch",
"published_at": "2026-05-15T18:43:07Z"
},
{
"tag": "v1.0.6",
"kind": "patch",
"published_at": "2026-05-15T18:22:43Z"
},
{
"tag": "v1.0.5",
"kind": "patch",
"published_at": "2026-05-15T18:05:54Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2026-05-15T17:06:06Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-05-15T16:43:09Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-05-15T16:02:54Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-05-14T21:33:13Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-05-14T15:43:36Z"
}
],
"recent_commits": [
{
"oid": "8f1127b1bbe7e99f5ba0b8543d9e941304e08ddb",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.3.1-SNAPSHOT (#70)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-07-22T13:10:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a701b19129974812680bd22dc260e2e7c71cc8a",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.3.0](https://github.com/frfrisby/frisby-core/compare/v1.2.0...v1.3.0)\n(2026-07-16)\n\n\n### Features\n\n* **validation:** add Sequences.noNullElements and\noptionalNoNullElements\n([#66](https://github.com/frfrisby/frisby-core/issues/66))\n([8173adf\n[…]\n4d06e31321e3df1d3881))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.3.0 (#67)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-07-16T13:43:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bec1cd8d520550b538264d06e31321e3df1d3881",
"body": "…ents (#69)\n\nFills the gap between the existing notEmpty/notBlank families (empty\ncontainer rejected) and a missing \"allow empty container\" variant.\n\nNew methods — Collection<String> and String[] overloads for each:\n - noEmptyElements(name, value)\n - optionalNoEmptyElements(name, value)\n - noBlan\n[…]\nlankElements,\nOptionalNoEmptyElements, and OptionalNoBlankElements test classes\n - docs/validation-guide.md — dedicated StringSequences section\n - docs/ai/validation.md — code block and throws table",
"is_bot": false,
"headline": "feat(validation): add StringSequences.noEmptyElements and noBlankElem…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-07-16T13:38:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5ec373ea155cc87cbcb4a66783862ec9e908e3f8",
"body": "SonarCloud is dropping Java 17 scanner support in July 2026. The library\nbytecode target remains Java 17 — only the JRE used to run the analysis\nstep is affected.",
"is_bot": false,
"headline": "ci: upgrade Sonar scanner JRE from Java 17 to Java 21 (#68)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-07-16T13:07:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8173adf157c79b7612658b8ded0bc656eaa77210",
"body": "…ents (#66)\n\nFills the gap between notNull (empty and null elements allowed) and\nnotEmpty (empty and null elements rejected) with a new constraint family\nthat rejects null containers and null elements but accepts empty\ncollections and arrays.\n\nNew methods — Collection<T> and T[] overloads for each:\n\n[…]\nnt families)\n- SequencesTest — NoNullElements and OptionalNoNullElements nested\nclasses\n - docs/validation-guide.md — Sequences section\n - docs/ai/validation.md — code block, prose, and throws table",
"is_bot": false,
"headline": "feat(validation): add Sequences.noNullElements and optionalNoNullElem…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-07-16T12:46:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a37d4f7cb944eca60aceef4826f06ac33c3f1de6",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.2.1-SNAPSHOT (#65)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-07-16T12:12:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6133d314d5f120a073b01ecc2aa8ce0409887a03",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.2.0](https://github.com/frfrisby/frisby-core/compare/v1.1.1...v1.2.0)\n(2026-06-26)\n\n\n### Features\n\n* **util:** add Uris and HttpUris URI utility classes\n([#63](https://github.com/frfrisby/frisby-core/issues/63))\n([d3cab6a](https://github.com\n[…]\n79bbbb613acbc7f3782b))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.2.0 (#62)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-06-26T16:11:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "44bdb4ee49dd87e04cb479bbbb613acbc7f3782b",
"body": "- docs/util-guide.md - new developer guide covering StopWatch, Decimals,\nUris, and HttpUris with usage patterns and anti-patterns\n- docs/ai/util.md - extended AI context reference to cover Uris and\nHttpUris\n- README.md - modules table updated to list Uris and HttpUris;\nutil-guide.md added to the documentation table; Util section added to\nthe AI-Assisted Development section with persistent instructions snippet",
"is_bot": false,
"headline": "docs(util): add util-guide and update AI reference and README (#64)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-06-26T16:00:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3cab6ac5464a86ba9ef61246e17059a33d636c3",
"body": "feat(util): add Uris and HttpUris utility classes\n\nIntroduce two new static utility classes in the util module.\n\nUris — scheme-agnostic structural URI manipulation:\n- withoutPath(URI) — strips path, query, and fragment\n- withPath(URI, String) — replaces the path component\n- appendPath(URI, Str\n[…]\n-standard exceptions. Schemes are compared case-insensitively via\nLocale.ROOT to handle non-normalised input. Registry-based authorities\n(null host) are rejected with a clear IllegalArgumentException.",
"is_bot": false,
"headline": "feat(util): add Uris and HttpUris URI utility classes (#63)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-06-26T15:18:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d35de80482f3cca9b6012c2300df5eef6b21a37a",
"body": null,
"is_bot": false,
"headline": "fix: Removed an IDE specific suppression. (#61)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-21T18:24:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59d5b066f3e3ad34c7285137cbff110c40495b00",
"body": "…kage the exception types are in. (#60)",
"is_bot": false,
"headline": "documentation: Updated the validation guide to make it clear what pac…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-21T14:36:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "388bbe7979d4c7106ac77d226ef6f7c7412c26b9",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.1.2-SNAPSHOT (#59)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-21T14:29:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48aae02ef4c9cc5ed2800e49cb4deaf41c9580d7",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.1](https://github.com/frfrisby/frisby-core/compare/v1.1.0...v1.1.1)\n(2026-05-21)\n\n\n### Bug Fixes\n\n* Missing null guard in several of(GenericType) methods and add\nnull-safety tests for all fluent GenericType overloads.\n([d84b426](https://gi\n[…]\n84001470ec708ade6c4c))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.1.1 (#57)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-21T13:55:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d84b426862067cc2fa37b923e856ab647b89d7d6",
"body": "…ll-safety tests for all fluent GenericType overloads.",
"is_bot": false,
"headline": "fix: Missing null guard in several of(GenericType) methods and add nu…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-21T13:50:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7dc8e23ca4c8cec6d92e84001470ec708ade6c4c",
"body": "… util.md. (#56)",
"is_bot": false,
"headline": "docs: Add per-method throws documentation to validation.md and create…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-20T21:59:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8f7c6edddd4a3e521091d43368495e06c3f88f0",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.1.1-SNAPSHOT (#55)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-20T20:08:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0392d942fbf819b86dec88a181f45afba99a1781",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.0](https://github.com/frfrisby/frisby-core/compare/v1.0.11...v1.1.0)\n(2026-05-18)\n\n\n### Features\n\n* Add Automatic-Module-Name to support JPMS automatic modules.\n([#53](https://github.com/frfrisby/frisby-core/issues/53))\n([1fd199b](https://\n[…]\nd82c8ed9c9b55288bc84))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.1.0 (#52)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-18T17:14:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "904ca51a784a16f2ab257dfedc528da0fb3fb78f",
"body": null,
"is_bot": false,
"headline": "fix: Remove unused K type parameter from GroupBlock interface. (#54)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-18T17:09:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fd199bccfd437a06f528cf7fe28bbc96e808c3a",
"body": null,
"is_bot": false,
"headline": "feat: Add Automatic-Module-Name to support JPMS automatic modules. (#53)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-18T16:16:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3b52bffff6e7fdb5287d82c8ed9c9b55288bc84",
"body": null,
"is_bot": false,
"headline": "fix: Resolved several code analysis warnings. (#51)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-18T15:47:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d18f4f5d95e7cf8d84f621cb4f8d949e5efec13e",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.12-SNAPSHOT (#50)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T20:21:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7875a73d71ad13b0226e38375e621ca6799a2dcd",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.11](https://github.com/frfrisby/frisby-core/compare/v1.0.10...v1.0.11)\n(2026-05-15)\n\n\n### Bug Fixes\n\n* Require CI, SonarCloud, and CodeQL to pass before creating a release.\n([#48](https://github.com/frfrisby/frisby-core/issues/48))\n([b1c7e\n[…]\nee02e3729bd1e4cb03bc))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.11 (#49)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T20:07:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b1c7e0089a292cade818ee02e3729bd1e4cb03bc",
"body": "…ease. (#48)",
"is_bot": false,
"headline": "fix: Require CI, SonarCloud, and CodeQL to pass before creating a rel…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T20:00:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1d07789b0f33535274ab88066526e89b9dd36ac",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.11-SNAPSHOT (#47)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T19:46:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f15b708817fbee56c127f2f182bd8aed0023b9cc",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.10](https://github.com/frfrisby/frisby-core/compare/v1.0.9...v1.0.10)\n(2026-05-15)\n\n\n### Bug Fixes\n\n* Remove status polling — exit on 201 upload confirmation.\n([#45](https://github.com/frfrisby/frisby-core/issues/45))\n([a2fb7a8](https://gi\n[…]\nd592f73a353811b084b3))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.10 (#46)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T19:34:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a2fb7a8cb4cd013ac691d592f73a353811b084b3",
"body": null,
"is_bot": false,
"headline": "fix: Remove status polling — exit on 201 upload confirmation. (#45)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T19:31:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6ab45e1dcdc785ac6ea86093ddf72af90893379",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.10-SNAPSHOT (#44)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T19:25:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d468c63ec0f294870836e59d335ec279699d430",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.9](https://github.com/frfrisby/frisby-core/compare/v1.0.8...v1.0.9)\n(2026-05-15)\n\n\n### Bug Fixes\n\n* Exit 0 after confirmed upload when status API is unavailable.\n([#42](https://github.com/frfrisby/frisby-core/issues/42))\n([3614cd6](https:/\n[…]\n63cb983317188cb2ca75))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.9 (#43)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T19:13:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3614cd69bfea5202e31763cb983317188cb2ca75",
"body": null,
"is_bot": false,
"headline": "fix: Exit 0 after confirmed upload when status API is unavailable. (#42)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T19:10:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7618bce0cb7e679b245d498ad58330d2d30906f9",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.9-SNAPSHOT (#41)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T19:05:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "526942c5dc0aad028347120d2cc8e9efc40b0dac",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.8](https://github.com/frfrisby/frisby-core/compare/v1.0.7...v1.0.8)\n(2026-05-15)\n\n\n### Bug Fixes\n\n* Strip whitespace from deployment ID to prevent malformed status API\nURL. ([#39](https://github.com/frfrisby/frisby-core/issues/39))\n([dec47\n[…]\n4f7db6dbe5ed3c5ec3b9))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.8 (#40)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:58:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dec47c293f6283b980594f7db6dbe5ed3c5ec3b9",
"body": "…API URL. (#39)",
"is_bot": false,
"headline": "fix: Strip whitespace from deployment ID to prevent malformed status …",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:54:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "216774271e61e29e706effa09d29b815ef1c5cb5",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.8-SNAPSHOT (#38)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:50:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d130901e1f06965046b6c7c669c8821f2d631802",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.7](https://github.com/frfrisby/frisby-core/compare/v1.0.6...v1.0.7)\n(2026-05-15)\n\n\n### Bug Fixes\n\n* Improve Central Portal upload error logging to expose API response\nbody. ([#36](https://github.com/frfrisby/frisby-core/issues/36))\n([3a2a6\n[…]\n1f624a3b1092cdfdd1bf))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.7 (#37)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:42:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3a2a66529ae7d9b3612b1f624a3b1092cdfdd1bf",
"body": "…se body. (#36)",
"is_bot": false,
"headline": "fix: Improve Central Portal upload error logging to expose API respon…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:38:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "787231f29a55932f1ec3ce4c1dfdf78947ebb7fc",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.7-SNAPSHOT (#35)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:28:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "731354e9d54a868e4039700e5db351db1d9ef09a",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.6](https://github.com/frfrisby/frisby-core/compare/v1.0.5...v1.0.6)\n(2026-05-15)\n\n\n### Bug Fixes\n\n* Remove duplicate release trigger that fired publish twice when using\nPAT. ([#33](https://github.com/frfrisby/frisby-core/issues/33))\n([b5ff\n[…]\n75636d098d0f42d68154))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.6 (#34)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:22:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b5ff7056b00d17f96ca975636d098d0f42d68154",
"body": "…sing PAT. (#33)",
"is_bot": false,
"headline": "fix: Remove duplicate release trigger that fired publish twice when u…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:19:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e461a98b9f1b6b6f9e4c4c9c70164271a20a71cf",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.6-SNAPSHOT (#32)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:15:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3169f7a8a2107e0d9bd7b65b0d1eaecb7069908e",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.5](https://github.com/frfrisby/frisby-core/compare/v1.0.4...v1.0.5)\n(2026-05-15)\n\n\n### Bug Fixes\n\n* Replace central-publishing-maven-plugin with direct REST API upload to\navoid multi-module deployment conflicts.\n([#29](https://github.com/f\n[…]\nb5474367bffa4d7c0697))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.5 (#30)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:05:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f8e6f944132d6f443f482ffe481be7675fb184f",
"body": "…n Central. (#31)",
"is_bot": false,
"headline": "chore: Updated the README to modify the badge links to Sonar and Mave…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T18:00:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09847c63f30126e35339b5474367bffa4d7c0697",
"body": "…oad to avoid multi-module deployment conflicts. (#29)",
"is_bot": false,
"headline": "fix: Replace central-publishing-maven-plugin with direct REST API upl…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T17:53:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "372c279cd1dbcc892d7a2ede6bf27a71c8d81bfe",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.5-SNAPSHOT (#28)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T17:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11b76e7d22dd95d9809d12e946f02fbf5827d905",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.4](https://github.com/frfrisby/frisby-core/compare/v1.0.3...v1.0.4)\n(2026-05-15)\n\n\n### Bug Fixes\n\n* Publish all modules as a single Central Portal deployment bundle.\n([#26](https://github.com/frfrisby/frisby-core/issues/26))\n([950ebdd](htt\n[…]\n644e490dd55081135888))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.4 (#27)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T17:05:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e8c6ce21bbffb4e526e1b6d55a1d3f189d130950",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.4-SNAPSHOT (#25)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T17:00:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "950ebddea780742386f1644e490dd55081135888",
"body": "…. (#26)",
"is_bot": false,
"headline": "fix: Publish all modules as a single Central Portal deployment bundle…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T16:58:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4b55aa479ff0b841a492e941e202786086838ad",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.3](https://github.com/frfrisby/frisby-core/compare/v1.0.2...v1.0.3)\n(2026-05-15)\n\n\n### Bug Fixes\n\n* Upgrade central-publishing-maven-plugin to 0.10.0 to resolve\nmulti-module deployment conflict.\n([#23](https://github.com/frfrisby/frisby-co\n[…]\nbf29d694271460955792))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.3 (#24)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T16:42:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d6e2f8e5007066cdae6dbf29d694271460955792",
"body": "…ti-module deployment conflict. (#23)",
"is_bot": false,
"headline": "fix: Upgrade central-publishing-maven-plugin to 0.10.0 to resolve mul…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T16:40:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7963a19e3d63c38730c2b009cb94b8b8ce1265b1",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 1.0.3-SNAPSHOT (#22)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T16:20:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d99fd9d2dcd66432a6dc4622d508cb1e1cf3590c",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.2](https://github.com/frfrisby/frisby-core/compare/v1.0.1...v1.0.2)\n(2026-05-15)\n\n\n### Bug Fixes\n\n* Resolved java:S1066 code analysis warnings across the concurrence\nmodule. ([#21](https://github.com/frfrisby/frisby-core/issues/21))\n([68ba\n[…]\ns://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: Frank Frisby <119800623+frfrisby@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 1.0.2 (#16)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-15T16:02:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "68ba3e0404a5d7ab126ef2980d79f8da1ee62352",
"body": "…e module. (#21)",
"is_bot": false,
"headline": "fix: Resolved java:S1066 code analysis warnings across the concurrenc…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T15:46:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "374649fba86569bef03c8eb0cc20ab077cb5076d",
"body": "…ers. (#20)",
"is_bot": false,
"headline": "refactor: Suppress S1172 on inference-only parameters in fluent build…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T14:28:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6011107bcf8d488e386e8e8aa6dc3c20884458ff",
"body": "…obs prior to allowing the PR to be merged. (#19)",
"is_bot": false,
"headline": "chore: Updated the release-please action to automate calling the CI j…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T13:12:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80b6dcca0e1262058c4fab470f2883effffa098e",
"body": "…anually executed during releases. (#18)",
"is_bot": false,
"headline": "chore: Updated the ci, codeql and sonar actions to allow them to be m…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T12:46:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87b2e739bbd11a8a8576acbaf25f82c3d722a607",
"body": null,
"is_bot": false,
"headline": "fix: Resolving minor code analysis warnings. (#17)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-15T12:29:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8572dc02750a35ecd59c8e9137f6852cb12bff1",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\n---------\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Frank Frisby <119800623+frfrisby@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 1.0.2-SNAPSHOT (#13)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-14T22:30:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5de8d417926d4495f9e2769711d62b753ee139bd",
"body": "…aceholder. (#15)",
"is_bot": false,
"headline": "chore: Replace hardcoded BOM version in README with LATEST_VERSION pl…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T22:17:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24eafc7d4a7962a34dacf5a6c395d105a9f7b1f2",
"body": "…#14)",
"is_bot": false,
"headline": "fix: Restore publish workflow trigger and fix README version regex. (…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T21:49:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fc1311db344952fe39214801473dce5725b756b",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.1](https://github.com/frfrisby/frisby-core/compare/v1.0.0...v1.0.1)\n(2026-05-14)\n\n\n### Bug Fixes\n\n* Add explicit url to child module POMs to prevent ossrh flatten mode\nappending module name.\n([47620a5](https://github.com/frfrisby/frisby-co\n[…]\n/release-please#release-please).\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Frank Frisby <119800623+frfrisby@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 1.0.1 (#6)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-14T21:32:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3a3fe1b53cd16fd59712218f6c8103a5eeeea953",
"body": "…validation modules. (#12)",
"is_bot": false,
"headline": "chore: Resolving some minor code analysis issues across the util and …",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T21:27:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e53e7fd2b7ab2efb03b73750aa2ea6efa098614",
"body": null,
"is_bot": false,
"headline": "chore: Minor change to refresh the release-please branch. (#11)",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T19:55:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82de0404073273882a6c8646e17bd0c6fd8f0dfa",
"body": "…test version in the README. (#10)",
"is_bot": false,
"headline": "chore: Updated the release to use a REGEX pattern for updating the la…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T19:41:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b32c26b3832b3301f4e0255ccbdc3019ff3b39bc",
"body": "…inute propagation timeout.",
"is_bot": false,
"headline": "fix: Use validated wait state for Maven Central publish to avoid 30-m…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T18:34:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03530cdb4c0ebfb5f71df20eab824d92c3572a6c",
"body": null,
"is_bot": false,
"headline": "chore: Automate README BOM version via release-please annotation.",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T18:29:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ff2f5e37116c2046d786d0cb254d2d7349f40c7",
"body": null,
"is_bot": false,
"headline": "chore: Remove extra blank line in bom pom.",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T18:09:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2801f87ac1ba4df0862f183334523dfb8675f719",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n### Updating meta-information for bleeding-edge SNAPSHOT release.\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\n---------\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Frank Frisby <119800623+frfrisby@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 1.0.1-SNAPSHOT",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-14T17:46:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47620a57d472c30c42bff516f6ff76aafcdeea90",
"body": "…ode appending module name.",
"is_bot": false,
"headline": "fix: Add explicit url to child module POMs to prevent ossrh flatten m…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T17:24:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7ec5a140e6e0710b30310298114b264d9f6bc7e",
"body": "…ven Central metadata.",
"is_bot": false,
"headline": "fix: Apply ossrh flattenMode so child module POMs include required Ma…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T15:37:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d6b128d845b823b9c7202ece3fdc087c3ec7976",
"body": "…er and DefaultDelayBlock.",
"is_bot": false,
"headline": "fix: Replace volatile object refs with AtomicReference in TargetManag…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T14:18:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9536a501ca6dc914f66d6059ff272940dccf8bb0",
"body": "…ti-module Sonar analysis. Fixed failing unit tests. Added missing docs.",
"is_bot": false,
"headline": "fix: Add sonar.moduleKey to resolve duplicate module key error in mul…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-14T13:50:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "719d4aa4f30528e6d8492c2144d8a5c44bc6bfca",
"body": null,
"is_bot": false,
"headline": "fix: Corrected the original release date.",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-13T19:00:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da9dc1b9ec002ea7c1cabaa25a6ab07057f02352",
"body": "…entral.",
"is_bot": false,
"headline": "fix: Strip -SNAPSHOT suffix from pom.xml before publishing to Maven C…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-13T18:46:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8aca2d308fd35db9b156ee076484fe4d6fa8e57c",
"body": "…lled before the worker thread starts.",
"is_bot": false,
"headline": "fix: Resolved a DelayBlock drain race condition when complete() is ca…",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-13T18:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "675faf7a5c24e3c78d02e83918225d40f7f85f3b",
"body": null,
"is_bot": false,
"headline": "Bootstrapping frisby-core.",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-13T17:46:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c0646c9cbd342444a7b8d345c480417cee68503",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Frank Frisby",
"author_login": "frfrisby",
"committed_at": "2026-05-13T17:23:16Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 16,
"commits_last_year": 75,
"latest_release_at": "2026-07-16T13:46:03Z",
"latest_release_tag": "v1.3.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 5,
"days_since_latest_release": 9,
"mean_days_between_releases": 6.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "software.frisby.core:util",
"exists": true,
"license": "MIT License",
"keywords": [],
"ecosystem": "maven",
"matches_repo": true,
"registry_url": "https://central.sonatype.com/artifact/software.frisby.core/util",
"is_deprecated": false,
"latest_version": "1.3.0",
"repository_url": "https://github.com/frfrisby/frisby-core/tree/main/util",
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-16T13:51:18Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
},
{
"name": "software.frisby.core:validation",
"exists": true,
"license": "MIT License",
"keywords": [],
"ecosystem": "maven",
"matches_repo": true,
"registry_url": "https://central.sonatype.com/artifact/software.frisby.core/validation",
"is_deprecated": false,
"latest_version": "1.3.0",
"repository_url": "https://github.com/frfrisby/frisby-core/tree/main/validation",
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-16T13:51:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
},
{
"name": "software.frisby.core:concurrency",
"exists": true,
"license": "MIT License",
"keywords": [],
"ecosystem": "maven",
"matches_repo": true,
"registry_url": "https://central.sonatype.com/artifact/software.frisby.core/concurrency",
"is_deprecated": false,
"latest_version": "1.3.0",
"repository_url": "https://github.com/frfrisby/frisby-core/tree/main/concurrency",
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-16T13:51:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"bom/pom.xml",
"concurrency/pom.xml",
"pom.xml",
"util/pom.xml",
"validation/pom.xml"
],
"largest_source_bytes": 231065,
"source_files_sampled": 245,
"oversized_source_files": 13,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"bom/pom.xml",
"concurrency/pom.xml",
"pom.xml",
"util/pom.xml",
"validation/pom.xml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 1,
"malicious_count": 0,
"assessed_package": "maven:software.frisby.core:util@1.3.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [
{
"name": "software.frisby.core:concurrency",
"manifest": "bom/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "software.frisby.core:util",
"manifest": "bom/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "software.frisby.core:validation",
"manifest": "bom/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "software.frisby.core:validation",
"manifest": "concurrency/pom.xml",
"ecosystem": "maven",
"version_constraint": null
},
{
"name": "software.frisby.core:validation",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "software.frisby.core:validation",
"manifest": "util/pom.xml",
"ecosystem": "maven",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "software.frisby.core:concurrency",
"direct": true,
"version": "1.3.1-SNAPSHOT",
"ecosystem": "maven"
},
{
"name": "software.frisby.core:util",
"direct": true,
"version": "1.3.1-SNAPSHOT",
"ecosystem": "maven"
},
{
"name": "software.frisby.core:validation",
"direct": true,
"version": null,
"ecosystem": "maven"
},
{
"name": "software.frisby.core:validation",
"direct": true,
"version": "1.3.1-SNAPSHOT",
"ecosystem": "maven"
},
{
"name": "kr.motd.maven:os-maven-plugin",
"direct": false,
"version": "1.7.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-clean-plugin",
"direct": false,
"version": "3.3.2",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-compiler-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-compiler-plugin",
"direct": false,
"version": "3.12.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-dependency-plugin",
"direct": false,
"version": "3.6.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-deploy-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-deploy-plugin",
"direct": false,
"version": "3.1.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-enforcer-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-enforcer-plugin",
"direct": false,
"version": "3.4.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-failsafe-plugin",
"direct": false,
"version": "3.2.3",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-gpg-plugin",
"direct": false,
"version": "3.2.7",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-install-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-install-plugin",
"direct": false,
"version": "3.1.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-jar-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-jar-plugin",
"direct": false,
"version": "3.3.0",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-javadoc-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-javadoc-plugin",
"direct": false,
"version": "3.6.3",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-resources-plugin",
"direct": false,
"version": "3.3.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-source-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-source-plugin",
"direct": false,
"version": "3.3.0",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-surefire-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-surefire-plugin",
"direct": false,
"version": "3.2.3",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-surefire-report-plugin",
"direct": false,
"version": "3.2.3",
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:build-helper-maven-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:build-helper-maven-plugin",
"direct": false,
"version": "3.5.0",
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:exec-maven-plugin",
"direct": false,
"version": "3.1.1",
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:flatten-maven-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:flatten-maven-plugin",
"direct": false,
"version": "1.5.0",
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:versions-maven-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:versions-maven-plugin",
"direct": false,
"version": "2.16.2",
"ecosystem": "maven"
},
{
"name": "org.jacoco:jacoco-maven-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.jacoco:jacoco-maven-plugin",
"direct": false,
"version": "0.8.11",
"ecosystem": "maven"
},
{
"name": "org.junit.jupiter:junit-jupiter",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.junit.jupiter:junit-jupiter",
"direct": false,
"version": "5.14.3",
"ecosystem": "maven"
},
{
"name": "org.junit:junit-bom",
"direct": false,
"version": "5.14.3",
"ecosystem": "maven"
},
{
"name": "org.sonarsource.scanner.maven:sonar-maven-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.sonarsource.scanner.maven:sonar-maven-plugin",
"direct": false,
"version": "3.10.0.2594",
"ecosystem": "maven"
}
],
"collected": true,
"truncated": false,
"total_count": 41,
"direct_count": 4,
"indirect_count": 37
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 70,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "frfrisby",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/119800623?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"codeql.yml",
"publish.yml",
"release-please.yml",
"sonar.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "8f1127b1bbe7e99f5ba0b8543d9e941304e08ddb",
"ran_at": "2026-07-26T00:43:53Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T13:13:02Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-22T13:10:39Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/frfrisby/frisby-core",
"host": "github.com",
"name": "frisby-core",
"owner": "frfrisby"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"security": 55,
"vitality": 74,
"community": 24,
"governance": 48,
"engineering": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 74,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"commits_last_year": 75,
"human_commit_share": 0.947,
"days_since_last_push": 3,
"active_weeks_last_year": 5
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "5/52 weeks with commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 5
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "75 commits in the last year",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 75
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 16,
"latest_release_tag": "v1.3.0",
"releases_from_tags": false,
"days_since_latest_release": 9,
"mean_days_between_releases": 6.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "16 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 16
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~6.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 6.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 48,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 70,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "70/70 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 70,
"decided": 70
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "critical",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 26,
"inputs": {
"followers": 0,
"owner_type": "User",
"is_verified": null,
"owner_login": "frfrisby",
"public_repos": 2,
"account_age_days": 1329
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of frfrisby",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "frfrisby"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~3 yr old",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 3
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"software.frisby.core:util",
"software.frisby.core:validation",
"software.frisby.core:concurrency"
],
"ecosystems": "maven",
"any_deprecated": false,
"min_days_since_publish": 9
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "3 package(s) on maven",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 3,
"ecosystems": "maven"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 9 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 9
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "14 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 14
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 67,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 55,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:software.frisby.core:util@1.3.0 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "maven:software.frisby.core:util@1.3.0",
"assessed": 1
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 1,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 1,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 53,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.972,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "69 of 71 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 69,
"sampled": 71
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"bom/pom.xml",
"concurrency/pom.xml",
"pom.xml",
"util/pom.xml",
"validation/pom.xml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "bom/pom.xml, concurrency/pom.xml, pom.xml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "bom/pom.xml, concurrency/pom.xml, pom.xml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Java (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 75",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 75
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 97,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 231065,
"source_files_sampled": 245,
"oversized_source_files": 13
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "13/245 source files over 60KB",
"points": 52.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 245,
"oversized": 13
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-26T00:44:10.169889Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/f/frfrisby/frisby-core.svg",
"full_name": "frfrisby/frisby-core",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Maven.