Public record
Software health reportschema 0.27.0 · metrics 2.2.0 · 2026-07-30 23:22 UTC

mathieucarbou / license-maven-plugin

Manage license headers in your source files

JavaApache-2.0★ 257 stars⑂ 91 forkssince Jul 2013View on GitHub ↗

mathieucarbou/license-maven-plugin holds a health index of 89 out of 100, placing it in the Excellent band. It scores highest on Vitality (92/100) and lowest on AI Readiness (63/100). It was last updated 3 days ago. 2 contributors account for most of its recent work.

89
overall / 100
Excellent

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.

89
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

The weighted overall 75 is calibrated to 89 on the published index scale (record calibration 2026-08-02).

Ownership

Mathieu CarbouPersonal account
213 followers71 public repossince Mar 2009@IBM @Terracotta-OSS @Ehcache

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Mavencom.mycila:license-maven-plugin5.1.1-288 days ago
Mavencom.mycila:license-maven-plugin-fs5.1.1-78 days ago
Mavencom.mycila:license-maven-plugin-git5.1.1-208 days ago
Mavencom.mycila:license-maven-plugin-svn5.1.1-188 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

92Excellent · 21% of overall
How it's scored
36/36Push recency — last push 3 days ago
33.2/36Commit cadence — 48/52 weeks with commits
18/18Commit volume — 232 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year232
human_commit_share0.64
days_since_last_push3
active_weeks_last_year48
How it's scored
27/27Ships releases — 4 releases published
36/36Release recency — latest release 8 days ago
12.6/27Release cadence — a release every ~221.5 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count4
latest_release_tagv5.1.1
releases_from_tagsno
days_since_latest_release8
mean_days_between_releases221.5
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

72Good · 17% of overall
How it's scored
39.1/60Stars — 257 stars
16.3/25Forks — 91 forks
5.8/15Watchers — 12 watchers
Inputs used
forks91
stars257
watchers12
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community health

85Excellent
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (Apache-2.0)
18/18CONTRIBUTING guide
13.5/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
readme_badges
has_contributingyes
has_issue_templateno
has_code_of_conductyes
readme_badge_services
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

73Good · 23% of overall
How it's scored
25.2/54Bus factor — 2 contributor(s) cover half of all commits
11.8/22.5Commit distribution — top contributor authored 48% of commits
13.5/13.5Contributor breadth — 45 contributors
10/10OpenSSF Scorecard: Contributors — project has 33 contributing companies or organizations
Inputs used
bus_factor2
contributors_sampled45
top_contributor_share0.477
How it's scored
38.3/42Issue resolution — 91% of issues closed
26.7/30PR acceptance — 765/861 decided PRs merged
0/13Newcomer PR acceptance — no first-time contributor's PR decided in 30d
0/15OpenSSF Scorecard: Code-Review — Found 0/14 approved changesets -- score normalized to 0
Inputs used
merged_prs765
open_issues18
closed_issues185
prs_merged_7d
prs_decided_7d
prs_merged_30d
prs_decided_30d
issue_closed_ratio0.911
closed_unmerged_prs96
first_time_authors_30d
first_time_prs_merged_30d
first_time_prs_decided_30d
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
16.8/25Owner reach — 213 followers of mathieucarbou
25/25Track record — 71 public repos, account ~17 yr old
Inputs used
followers213
owner_typeUser
is_verified
owner_loginmathieucarbou
public_repos71
account_age_days6,353
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.

Package maintenance

100Exceptional
How it's scored
25/25Published & resolvable — 4 package(s) on maven
35/35Publish recency — latest publish 8 days ago
20/20Version history — 28 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagescom.mycila:license-maven-plugin, com.mycila:license-maven-plugin-fs, com.mycila:license-maven-plugin-git, com.mycila:license-maven-plugin-svn
ecosystemsmaven
any_deprecatedno
min_days_since_publish8

Engineering Quality

Are baseline engineering and documentation practices in place?

70Good · 19% of overall
How it's scored
24/24CI workflows — 2 workflow(s)
24/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
0/6.4.editorconfig
16/20OpenSSF Scorecard: CI-Tests — 8 out of 9 merged PRs checked by a CI test -- score normalized to 8
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configno
has_precommit_configno

Documentation

80Excellent
How it's scored
30/30README
25/25Documentation directory
15/15Documentation / homepage site — https://mathieu.carbou.me/license-maven-plugin/
10/10Repository description
0/10Topics
0/10Wiki
Inputs used
topics
has_wikino
homepagehttps://mathieu.carbou.me/license-maven-plugin/
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

66Good · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — no data
2/2.5CI-Tests — 8 out of 9 merged PRs checked by a CI test -- score normalized to 8
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/14 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 33 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
5/5SAST — SAST tool is run on all commits
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
4.5/7.5Vulnerabilities — 4 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate5.8
Excluded from scoring (no data or not applicable): branch_protection, packaging, signed_releases. Remaining weights renormalized.

Dependency advisories

100Exceptional
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40No advisories left outstanding — no advisory carries a publication date
Inputs used
sourceosv
advisories0
affected_packages0
assessed_packages41
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:com.mycila:license-maven-plugin@5.1.1 runtime dependency closure — what installing the published package pulls in — 41 packages. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.

63Moderate · 4% of overall
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
39.2/40Legible commit history — 47 of 64 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.734
agent_instruction_files
agent_instruction_max_bytes
How it's scored
12.6/18One-command bootstrap — license-maven-plugin-fs/pom.xml, license-maven-plugin-git/pom.xml, license-maven-plugin-svn/pom.xml (toolchain convention, no task runner)
22/22Automated tests
0/11Lint / format config
11/11Static type checking — Java (statically typed)
10/10Reproducible environment — Dockerfile
6/10Demonstrated agent practice — 3 of the last 100 commits agent-authored or agent-credited
8/8Automated maintenance — 36 of the last 100 commits are automated dependency updates
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfiles
has_dockerfileyes
typed_languageyes
bootstrap_files
has_devcontainerno
has_linter_configno
typecheck_configs
agent_commit_share0.03
toolchain_manifestslicense-maven-plugin-fs/pom.xml, license-maven-plugin-git/pom.xml, license-maven-plugin-svn/pom.xml, license-maven-plugin/pom.xml, license-maven-plugin/src/it/legacy-config-and-license-set/pom.xml, license-maven-plugin/src/it/legacy-config/pom.xml, license-maven-plugin/src/it/multi-license/pom.xml, license-maven-plugin/src/it/pom-properties/pom.xml, license-maven-plugin/src/it/single-licence-set/pom.xml, license-maven-plugin/src/it/tri-license-set-with-includes/pom.xml, license-maven-plugin/src/it/tri-license-set/pom.xml, license-maven-plugin/src/test/resources-its/com/mycila/maven/plugin/license/dependencies/MavenProjectLicensesIT/approve/pom.xml, license-maven-plugin/src/test/resources-its/com/mycila/maven/plugin/license/dependencies/MavenProjectLicensesIT/deny/pom.xml, license-maven-plugin/src/test/resources-its/com/mycila/maven/plugin/license/dependencies/MavenProjectLicensesIT/no_dependencies/pom.xml, license-maven-plugin/src/test/resources/check/pom.xml, pom.xml
dependency_bot_commit_share0.36
How it's scored
45/45Type-checkable code — Java (statically typed)
50.4/55Manageable file sizes — 20/240 source files over 60KB
Inputs used
primary_languageJava
largest_source_bytes145,083
source_files_sampled240
oversized_source_files20

Key facts

257GitHub stars
45contributors
232commits, last 12 months
3days since last push
4releases
2bus factor
18open issues
Maven, PyPIpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

More detail

Star and fork history 0 ★ / 91 ⇿
0Stars
91Forks
4Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

0204060801009122013-082020-022026-07
Major 1Minor 1Patch 1

Each point covers 12 days.

OpenSSF Scorecard 5.8 / 10
5.8aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-30 23:22 UTC

10Binary-Artifactsno binaries found in the repo
n/aBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
8CI-Tests8 out of 9 merged PRs checked by a CI test -- score normalized to 8
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/14 approved changesets -- score normalized to 0
10Contributorsproject has 33 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
10SASTSAST tool is run on all commits
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
6Vulnerabilities4 existing vulnerabilities detected
Direct dependencies 32
RegistryPackageVersion constraintManifest
Mavencom.mycila:license-maven-plugin${project.version}license-maven-plugin-fs/pom.xml
Mavencom.mycila:license-maven-plugin${project.version}license-maven-plugin-git/pom.xml
Mavenorg.eclipse.jgit:org.eclipse.jgit6.10.1.202505221210-rlicense-maven-plugin-git/pom.xml
Mavencom.mycila:license-maven-plugin${project.version}license-maven-plugin-svn/pom.xml
Mavenorg.tmatesoft.svnkit:svnkit1.10.11license-maven-plugin-svn/pom.xml
Mavenorg.junit.jupiter:junit-jupiter-engine${junit.version}license-maven-plugin/pom.xml
Mavenorg.mockito:mockito-bom5.23.0license-maven-plugin/pom.xml
Mavenorg.apache.maven.shared:maven-shared-utils3.4.2license-maven-plugin/pom.xml
Mavenorg.apache.maven.shared:maven-common-artifact-filters3.4.0license-maven-plugin/pom.xml
Mavenorg.apache.maven.shared:maven-dependency-tree3.3.0license-maven-plugin/pom.xml
Mavencom.google.code.gson:gson2.14.0license-maven-plugin/pom.xml
Mavenorg.codehaus.plexus:plexus-utils4.0.3license-maven-plugin/pom.xml
Mavenorg.codehaus.plexus:plexus-xml3.0.2license-maven-plugin/pom.xml
Mavencom.mycila:mycila-xmltoollicense-maven-plugin/pom.xml
Mavenorg.apache.maven:maven-plugin-api${maven.version}pom.xml
Mavenorg.apache.maven:maven-core${maven.version}pom.xml
Mavenorg.apache.maven:maven-artifact${maven.version}pom.xml
Mavenorg.apache.maven:maven-model${maven.version}pom.xml
Mavenorg.apache.maven.plugin-tools:maven-plugin-annotations${maven-plugin.version}pom.xml
Mavencom.mycila:mycila-xmltool4.4.gapom.xml
Mavenorg.apache.maven.plugin-testing:maven-plugin-testing-harness3.5.1pom.xml
Mavencommons-io:commons-io2.22.0pom.xml
Mavenorg.apache.commons:commons-pool22.13.1pom.xml
Mavenorg.junit:junit-bom${junit.version}pom.xml
Mavenorg.codehaus.mojo:extra-enforcer-rules1.12.0pom.xml
Mavenorg.apache.groovy:groovy${groovy.version}pom.xml
Mavenorg.apache.groovy:groovy-json${groovy.version}pom.xml
Mavenorg.apache.groovy:groovy-nio${groovy.version}pom.xml
Mavenorg.apache.groovy:groovy-xml${groovy.version}pom.xml
Mavencom.puppycrawl.tools:checkstyle13.8.0pom.xml
Mavenorg.codehaus.groovy:groovy-eclipse-compiler3.7.0pom.xml
Mavenorg.codehaus.groovy:groovy-eclipse-batch3.0.8-01pom.xml
All dependencies 92

Full resolved dependency set from the GitHub dependency graph: 41 direct and 51 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
Mavencom.google.code.gson:gson2.14.0direct
Mavencom.mycila:license-maven-plugindirect
Mavencom.mycila:license-maven-plugin5.0.0direct
Mavencom.mycila:license-maven-plugin5.1.2-SNAPSHOTdirect
Mavencom.mycila:mycila-xmltooldirect
Mavencom.mycila:mycila-xmltool4.4direct
Mavencom.puppycrawl.tools:checkstyle13.8.0direct
Mavencommons-io:commons-io2.22.0direct
Mavenorg.apache.commons:commons-pool22.13.1direct
Mavenorg.apache.groovy:groovy5.0.7direct
Mavenorg.apache.groovy:groovy-json5.0.7direct
Mavenorg.apache.groovy:groovy-nio5.0.7direct
Mavenorg.apache.groovy:groovy-xml5.0.7direct
Mavenorg.apache.maven.plugin-testing:maven-plugin-testing-harnessdirect
Mavenorg.apache.maven.plugin-testing:maven-plugin-testing-harness1.2direct
Mavenorg.apache.maven.plugin-testing:maven-plugin-testing-harness3.5.1direct
Mavenorg.apache.maven.plugin-tools:maven-plugin-annotationsdirect
Mavenorg.apache.maven.plugin-tools:maven-plugin-annotations3.15.2direct
Mavenorg.apache.maven.shared:maven-common-artifact-filters3.4.0direct
Mavenorg.apache.maven.shared:maven-dependency-tree3.3.0direct
Mavenorg.apache.maven.shared:maven-shared-utils3.4.2direct
Mavenorg.apache.maven:maven-artifactdirect
Mavenorg.apache.maven:maven-artifact3.9.16direct
Mavenorg.apache.maven:maven-coredirect
Mavenorg.apache.maven:maven-core3.9.16direct
Mavenorg.apache.maven:maven-modeldirect
Mavenorg.apache.maven:maven-model3.9.16direct
Mavenorg.apache.maven:maven-plugin-apidirect
Mavenorg.apache.maven:maven-plugin-api2.0.9direct
Mavenorg.apache.maven:maven-plugin-api3.9.16direct
Mavenorg.codehaus.groovy:groovy-eclipse-batch3.0.8-01direct
Mavenorg.codehaus.groovy:groovy-eclipse-compiler3.7.0direct
Mavenorg.codehaus.mojo:extra-enforcer-rules1.12.0direct
Mavenorg.codehaus.plexus:plexus-utils4.0.3direct
Mavenorg.codehaus.plexus:plexus-xml3.0.2direct
Mavenorg.eclipse.jgit:org.eclipse.jgit6.10.1.202505221210-rdirect
Mavenorg.junit.jupiter:junit-jupiter-enginedirect
Mavenorg.junit.jupiter:junit-jupiter-engine5.10.2direct
Mavenorg.junit:junit-bom6.1.2direct
Mavenorg.mockito:mockito-bom5.23.0direct
Mavenorg.tmatesoft.svnkit:svnkit1.10.11direct
Mavencom.google.code.maven-license-plugin:maven-license-plugin1.3.1indirect
Mavencom.google.code.xmltool:xmltool1.4indirect
Mavencom.google.guava:guava33.6.0-jreindirect
Mavencom.soebes.itf.jupiter.extension:itf-assertj0.13.1indirect
Mavencom.soebes.itf.jupiter.extension:itf-jupiter-extension0.13.1indirect
Mavencom.soebes.itf.jupiter.extension:itf-maven-plugin0.13.1indirect
Mavenorg.apache.maven.plugins:maven-checkstyle-pluginindirect
Mavenorg.apache.maven.plugins:maven-checkstyle-plugin3.6.0indirect
Mavenorg.apache.maven.plugins:maven-clean-plugin3.5.0indirect
Mavenorg.apache.maven.plugins:maven-compiler-plugin3.15.0indirect
Mavenorg.apache.maven.plugins:maven-deploy-plugin3.1.4indirect
Mavenorg.apache.maven.plugins:maven-enforcer-pluginindirect
Mavenorg.apache.maven.plugins:maven-enforcer-plugin3.6.3indirect
Mavenorg.apache.maven.plugins:maven-failsafe-pluginindirect
Mavenorg.apache.maven.plugins:maven-failsafe-plugin3.5.6indirect
Mavenorg.apache.maven.plugins:maven-gpg-pluginindirect
Mavenorg.apache.maven.plugins:maven-gpg-plugin3.2.8indirect
Mavenorg.apache.maven.plugins:maven-install-plugin3.1.4indirect
Mavenorg.apache.maven.plugins:maven-invoker-pluginindirect
Mavenorg.apache.maven.plugins:maven-invoker-plugin3.10.1indirect
Mavenorg.apache.maven.plugins:maven-jar-plugin3.5.1indirect
Mavenorg.apache.maven.plugins:maven-javadoc-pluginindirect
Mavenorg.apache.maven.plugins:maven-javadoc-plugin3.12.0indirect
Mavenorg.apache.maven.plugins:maven-plugin-pluginindirect
Mavenorg.apache.maven.plugins:maven-plugin-plugin3.15.2indirect
Mavenorg.apache.maven.plugins:maven-plugin-report-plugin3.15.2indirect
Mavenorg.apache.maven.plugins:maven-project-info-reports-plugin3.9.0indirect
Mavenorg.apache.maven.plugins:maven-release-plugin3.3.1indirect
Mavenorg.apache.maven.plugins:maven-resources-plugin3.5.0indirect
Mavenorg.apache.maven.plugins:maven-scm-plugin2.2.1indirect
Mavenorg.apache.maven.plugins:maven-site-plugin3.22.0indirect
Mavenorg.apache.maven.plugins:maven-source-pluginindirect
Mavenorg.apache.maven.plugins:maven-source-plugin3.4.0indirect
Mavenorg.apache.maven.plugins:maven-surefire-plugin3.5.6indirect
Mavenorg.apache.maven.shared:maven-verifier2.0.0-M1indirect
Mavenorg.apache.maven:maven-embedder2.0.4indirect
Mavenorg.apache.maven:maven-project2.0.9indirect
Mavenorg.assertj:assertj-core3.27.7indirect
Mavenorg.codehaus.mojo:cobertura-maven-pluginindirect
Mavenorg.codehaus.mojo:javancss-maven-pluginindirect
Mavenorg.codehaus.mojo:jdepend-maven-pluginindirect
Mavenorg.codehaus.mojo:taglist-maven-pluginindirect
Mavenorg.jacoco:jacoco-maven-pluginindirect
Mavenorg.jacoco:jacoco-maven-plugin0.8.15indirect
Mavenorg.junit.jupiter:junit-jupiter-paramsindirect
Mavenorg.junit.vintage:junit-vintage-engineindirect
Mavenorg.sonatype.central:central-publishing-maven-plugin0.11.0indirect
Mavenorg.testng:testng5.7indirect
PyPImkdocsindirect
PyPImkdocs-materialindirect
PyPIpymdown-extensionsindirect
Dependency advisories 0

Installing maven:com.mycila:license-maven-plugin@5.1.1 pulls in 41 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.

No known advisories affect the assessed dependencies.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 6551,
      "has_wiki": false,
      "homepage": "https://mathieu.carbou.me/license-maven-plugin/",
      "languages": {
        "E": 38,
        "Lua": 1346,
        "PHP": 98,
        "TeX": 1293,
        "VBA": 1319,
        "Hack": 1333,
        "Haml": 1333,
        "Java": 475644,
        "Ruby": 288,
        "Scala": 1365,
        "Shell": 1301,
        "Erlang": 1365,
        "Fluent": 1386,
        "Groovy": 14727,
        "Pascal": 1333,
        "Fortran": 1263,
        "Assembly": 1301,
        "Euphoria": 1295,
        "Mustache": 1340,
        "Batchfile": 1397,
        "ColdFusion": 1352,
        "Dockerfile": 689,
        "Emacs Lisp": 1365,
        "FreeMarker": 1358,
        "JavaScript": 495,
        "TypeScript": 1365,
        "Classic ASP": 1696,
        "Go Template": 755,
        "Filebench WML": 38
      },
      "pushed_at": "2026-07-27T16:42:44Z",
      "created_at": "2013-07-28T12:56:45Z",
      "owner_type": "User",
      "updated_at": "2026-07-30T16:49:39Z",
      "description": "Manage license headers in your source files",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "master",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Java",
      "significant_languages": [
        "Java"
      ]
    },
    "owner": {
      "blog": "https://mathieu.carbou.me",
      "name": "Mathieu Carbou",
      "type": "User",
      "login": "mathieucarbou",
      "company": "@IBM @Terracotta-OSS @Ehcache",
      "location": "France, 64 (remote)",
      "followers": 213,
      "avatar_url": "https://avatars.githubusercontent.com/u/61346?v=4",
      "created_at": "2009-03-08T19:41:47Z",
      "is_verified": null,
      "public_repos": 71,
      "account_age_days": 6353
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v5.1.1",
          "kind": "patch",
          "published_at": "2026-07-21T23:38:25Z"
        },
        {
          "tag": "v5.1.0",
          "kind": "minor",
          "published_at": "2026-07-21T22:31:07Z"
        },
        {
          "tag": "v5.0.0",
          "kind": "major",
          "published_at": "2025-03-20T08:44:27Z"
        },
        {
          "tag": "license-maven-plugin-4.6",
          "kind": "other",
          "published_at": "2024-09-25T09:30:20Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "55cfd6a30c97fac17f785ee85f3c846e8ee32d94",
          "body": "…he.maven.plugins-maven-jar-plugin-3.5.1\n\nBump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1",
          "is_bot": false,
          "headline": "Merge pull request #1079 from mathieucarbou/dependabot/maven/org.apac…",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-22T17:11:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d43ca5c29bbadc899581ff6455f0f527cce36ad",
          "body": "…type.central-central-publishing-maven-plugin-0.11.0\n\nBump org.sonatype.central:central-publishing-maven-plugin from 0.9.0 to 0.11.0",
          "is_bot": false,
          "headline": "Merge pull request #1080 from mathieucarbou/dependabot/maven/org.sona…",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-22T17:10:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14e7f25c3bf676d94d027526907ae1022bde4484",
          "body": "Bumps [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) from 0.9.0 to 0.11.0.\n- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.sonatype.central:central-publishing-maven-plugin\n  dependency-version: 0.11.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.sonatype.central:central-publishing-maven-plugin",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T16:42:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c129c9c4fcbfae6b5e45c4ebead709fd17d46a96",
          "body": "Bumps [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) from 3.5.0 to 3.5.1.\n- [Release notes](https://github.com/apache/maven-jar-plugin/releases)\n- [Commits](https://github.com/apache/maven-jar-plugin/compare/maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1)\n\n-\n[…]\nche.maven.plugins:maven-jar-plugin\n  dependency-version: 3.5.1\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-22T16:42:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c4fb3cff6e1d22dd4336033c6dd5e3fd436de5dc",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T23:37:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "602a083d5fa0e9307a3a87516117af32478bcdc3",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release v5.1.1",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T23:37:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "590c91fe87690ca9747496d8f33c57c3e13e4fb0",
          "body": "Revert \"fix(git): follow renames across merges in copyright creation year (#bug)\"",
          "is_bot": false,
          "headline": "Merge pull request #1078 from mathieucarbou/revert-1077-fix/git",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T23:33:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b485d43f63cc4bdd17829a5b5abda2591e37a390",
          "body": "…year (#bug)\"",
          "is_bot": false,
          "headline": "Revert \"fix(git): follow renames across merges in copyright creation …",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T23:24:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce2cb810bf51f41fc1be7a8ce3aec2797e9164a1",
          "body": null,
          "is_bot": false,
          "headline": "Rolback to 5.0.0 for now",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T22:34:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0e644ee18178d8b0a51d8eab7214fc94fd79b37",
          "body": null,
          "is_bot": false,
          "headline": "Doc update",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T22:29:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f80e1b7315278bfadc4dc3f01d173bf7eb3980d8",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T22:22:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f26d4bd68f156e7cb9f2fcb8f4e58e23d6f33dde",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release v5.1.0",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T22:22:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ca1342382c342eb90f3ac7b2fac9852c771e6fa",
          "body": null,
          "is_bot": false,
          "headline": "Fix release process",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T22:16:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a082fc1e6697659eaf424e6ecb9b7e3766ed5f2a",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] rollback the release of v5.1.0",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T22:14:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7049b92f85b723a3e77cb989dd002a8e510cba3c",
          "body": null,
          "is_bot": false,
          "headline": "Fix release process",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T22:14:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e98816e803fad573591579d3bf298c2ab8d13486",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T22:02:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bfc1be1639fdcfba5244a3627287bf1e38a7ac3b",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release v5.1.0",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T22:02:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e59e58ee005c5c78e09030be55de0e12564fc5b",
          "body": "fix(git): follow renames across merges in copyright creation year (#bug)",
          "is_bot": false,
          "headline": "Merge pull request #1077 from mathieucarbou/fix/git",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T21:52:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75cf6d732ba34d51b19069b8fb6801827aa2488b",
          "body": "The regression test GitLookupCreationYearTest requires the full git history\nto verify that getYearOfCreation follows renames across merges back to 2013.\nWith the default fetch-depth=1 (shallow clone), only the latest commit is\navailable and the test would be skipped (or fail without the shallow-clone\nguard). Setting fetch-depth=0 clones the full history so the test actually\nruns and asserts on CI.",
          "is_bot": false,
          "headline": "ci: use fetch-depth=0 so creation year test runs on CI",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T21:40:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f29b8a68160601b3c7ec09cc44544530c920fa3",
          "body": "The copyright creation year (license.git.copyrightCreationYear and\nlicense.git.copyrightExistenceYears) was incorrect for files that had\nbeen renamed after a merge commit. For example, AbstractLicenseMojo.java\nwas created in 2013, then renamed twice (2013 and 2015), with the 2015\nrename occurring ju\n[…]\nression test GitLookupCreationYearTest that asserts\ngetYearOfCreation returns 2013 for AbstractLicenseMojo.java.\n\nAll existing tests (GitLookupTest, CopyrightRangeProviderTest, etc.)\ncontinue to pass.",
          "is_bot": false,
          "headline": "fix(git): follow renames across merges in copyright creation year (#bug)",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T21:34:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3afdd212cc6e749beb31e02f34f4ccdcc93f5c08",
          "body": "…rator\n\nfeat(provider): Allow to change the year range separator",
          "is_bot": false,
          "headline": "Merge pull request #1076 from mathieucarbou/feature/custom-range-sepa…",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T21:16:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e35811115347f9ec68d39e4b414cd4b8ca71e9f",
          "body": null,
          "is_bot": false,
          "headline": "feat(provider): Allow to change the year range separator",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-21T20:52:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96d3639d36fc5dbb0308f43a43110e56b2e28515",
          "body": "…/actions/setup-python-7\n\nBump actions/setup-python from 6 to 7",
          "is_bot": false,
          "headline": "Merge pull request #1075 from mathieucarbou/dependabot/github_actions…",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-07-20T17:38:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "834ee4121ed463582285f821122f9492dcf1e878",
          "body": "Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-python\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/setup-python from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T16:44:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9cd570db91db859f75c5c271f6816c678c000ee7",
          "body": "…ycrawl.tools-checkstyle-13.8.0\n\nBump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0",
          "is_bot": false,
          "headline": "Merge pull request #1074 from mathieucarbou/dependabot/maven/com.pupp…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-07-18T20:43:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "945ecc34e56607925e22ac6c8ebd5f1d36843fc1",
          "body": "…rsion-6.1.2\n\nBump junit.version from 6.1.1 to 6.1.2",
          "is_bot": false,
          "headline": "Merge pull request #1073 from mathieucarbou/dependabot/maven/junit.ve…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-07-18T20:43:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7076f4aa7702e91068b674f5e9609c231620fef1",
          "body": "Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 13.7.0 to 13.8.0.\n- [Release notes](https://github.com/checkstyle/checkstyle/releases)\n- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-13.7.0...checkstyle-13.8.0)\n\n---\nupdated-dependencies:\n[…]\ne: com.puppycrawl.tools:checkstyle\n  dependency-version: 13.8.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.puppycrawl.tools:checkstyle from 13.7.0 to 13.8.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T16:42:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "466a1abee41f144406409cf945fad8dbb23834ef",
          "body": "Bumps `junit.version` from 6.1.1 to 6.1.2.\n\nUpdates `org.junit:junit-bom` from 6.1.1 to 6.1.2\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2)\n\nUpdates `org.junit.jupiter:junit-jupiter-engine`\n[…]\n.junit.jupiter:junit-jupiter-engine\n  dependency-version: 6.1.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump junit.version from 6.1.1 to 6.1.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-13T16:42:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "126f71ddd7726c57fb0a116fed3b4a3b3efa3e9a",
          "body": "…ersion-5.0.7\n\nBump groovy.version from 5.0.6 to 5.0.7",
          "is_bot": false,
          "headline": "Merge pull request #1072 from mathieucarbou/dependabot/maven/groovy.v…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-07-11T15:12:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2c8bd9dc5b34d22b7c934322f1159baca280341",
          "body": "Bumps `groovy.version` from 5.0.6 to 5.0.7.\n\nUpdates `org.apache.groovy:groovy` from 5.0.6 to 5.0.7\n- [Commits](https://github.com/apache/groovy/commits)\n\nUpdates `org.apache.groovy:groovy-json` from 5.0.6 to 5.0.7\n- [Commits](https://github.com/apache/groovy/commits)\n\nUpdates `org.apache.groovy:gro\n[…]\n-name: org.apache.groovy:groovy-xml\n  dependency-version: 5.0.7\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump groovy.version from 5.0.6 to 5.0.7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T16:42:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "95ef1da7bb75db03ebffb1643e29b214dfbc633d",
          "body": "…ycrawl.tools-checkstyle-13.7.0\n\nBump com.puppycrawl.tools:checkstyle from 13.6.0 to 13.7.0",
          "is_bot": false,
          "headline": "Merge pull request #1071 from mathieucarbou/dependabot/maven/com.pupp…",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-06-29T18:52:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e39d04d4d000262faa4c9b27047ba2b84d0202aa",
          "body": "Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 13.6.0 to 13.7.0.\n- [Release notes](https://github.com/checkstyle/checkstyle/releases)\n- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-13.6.0...checkstyle-13.7.0)\n\n---\nupdated-dependencies:\n[…]\ne: com.puppycrawl.tools:checkstyle\n  dependency-version: 13.7.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.puppycrawl.tools:checkstyle from 13.6.0 to 13.7.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T17:48:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6ef54f41c36e20da1492c6dcc0bc565aa5ca715a",
          "body": "…rsion-6.1.1\n\nBump junit.version from 6.1.0 to 6.1.1",
          "is_bot": false,
          "headline": "Merge pull request #1070 from mathieucarbou/dependabot/maven/junit.ve…",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-06-29T17:45:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de4506fa117771dbd5fe492420ffdd706424985f",
          "body": "Bumps `junit.version` from 6.1.0 to 6.1.1.\n\nUpdates `org.junit:junit-bom` from 6.1.0 to 6.1.1\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1)\n\nUpdates `org.junit.jupiter:junit-jupiter-engine`\n[…]\n.junit.jupiter:junit-jupiter-engine\n  dependency-version: 6.1.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump junit.version from 6.1.0 to 6.1.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T16:42:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2ecdb13efd72b30be825110fb1534672a010dd85",
          "body": "…ycrawl.tools-checkstyle-13.6.0\n\nBump com.puppycrawl.tools:checkstyle from 13.5.0 to 13.6.0",
          "is_bot": false,
          "headline": "Merge pull request #1068 from mathieucarbou/dependabot/maven/com.pupp…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-06-20T18:59:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ae727b23364b5f5aac79118658aea933f9e41b5",
          "body": "…/actions/checkout-7\n\nBump actions/checkout from 6 to 7",
          "is_bot": false,
          "headline": "Merge pull request #1069 from mathieucarbou/dependabot/github_actions…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-06-20T18:58:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5607e14a8e0ae75580f4e190e549be509af3e19",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/checkout from 6 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-18T16:43:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ecd4d0f78c78f228404d0af6367d84722b49b521",
          "body": "Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 13.5.0 to 13.6.0.\n- [Release notes](https://github.com/checkstyle/checkstyle/releases)\n- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-13.5.0...checkstyle-13.6.0)\n\n---\nupdated-dependencies:\n[…]\ne: com.puppycrawl.tools:checkstyle\n  dependency-version: 13.6.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.puppycrawl.tools:checkstyle from 13.5.0 to 13.6.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-15T16:42:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "38dc9e5d22cb8afbbb051be36004059d9a60d10f",
          "body": "…co-jacoco-maven-plugin-0.8.15\n\nBump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15",
          "is_bot": false,
          "headline": "Merge pull request #1067 from mathieucarbou/dependabot/maven/org.jaco…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-06-09T21:17:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52f105f9642862afb00b63889cb5e060ff4a6d4c",
          "body": "Bumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.14 to 0.8.15.\n- [Release notes](https://github.com/jacoco/jacoco/releases)\n- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.14...v0.8.15)\n\n---\nupdated-dependencies:\n- dependency-name: org.jacoco:jacoco-maven-plugin\n  dependency-version: 0.8.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-08T16:42:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "582dbb51f8603bc63d722ce6522f1690b7415e2f",
          "body": "…ycrawl.tools-checkstyle-13.5.0\n\nBump com.puppycrawl.tools:checkstyle from 13.4.2 to 13.5.0",
          "is_bot": false,
          "headline": "Merge pull request #1066 from mathieucarbou/dependabot/maven/com.pupp…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-06-08T01:58:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4dc9e43f16b013bf3a05c96a63e0e1d113b241c",
          "body": "Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 13.4.2 to 13.5.0.\n- [Release notes](https://github.com/checkstyle/checkstyle/releases)\n- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-13.4.2...checkstyle-13.5.0)\n\n---\nupdated-dependencies:\n[…]\ne: com.puppycrawl.tools:checkstyle\n  dependency-version: 13.5.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.puppycrawl.tools:checkstyle from 13.4.2 to 13.5.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-04T02:21:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2ddeb2f0e745799fe1d6bb467a1850c86ea0c1cc",
          "body": "….version-3.5.6\n\nBump surefire.version from 3.5.5 to 3.5.6",
          "is_bot": false,
          "headline": "Merge pull request #1065 from mathieucarbou/dependabot/maven/surefire…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-05-31T15:43:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e847edb1bc10d830fe56886ee9e4797729025afc",
          "body": "…he.maven.plugins-maven-site-plugin-3.22.0\n\nBump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0",
          "is_bot": false,
          "headline": "Merge pull request #1064 from mathieucarbou/dependabot/maven/org.apac…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-05-31T15:43:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7cfed0fb05de6bfb7346edca8ed2023a9046440",
          "body": "Bumps `surefire.version` from 3.5.5 to 3.5.6.\n\nUpdates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.5 to 3.5.6\n- [Release notes](https://github.com/apache/maven-surefire/releases)\n- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.5...surefire-3.5.6)\n\nUpdates `org\n[…]\nmaven.plugins:maven-failsafe-plugin\n  dependency-version: 3.5.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump surefire.version from 3.5.5 to 3.5.6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-28T18:50:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f8a67f8eec67787f1385778c81e8d427446bdb01",
          "body": "Bumps [org.apache.maven.plugins:maven-site-plugin](https://github.com/apache/maven-site-plugin) from 3.21.0 to 3.22.0.\n- [Release notes](https://github.com/apache/maven-site-plugin/releases)\n- [Commits](https://github.com/apache/maven-site-plugin/compare/maven-site-plugin-3.21.0...maven-site-plugin-\n[…]\ne.maven.plugins:maven-site-plugin\n  dependency-version: 3.22.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-25T22:42:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a23972d7a9bb2a2c758422f5d162d7c77ba8785",
          "body": "…rsion-3.9.16\n\nBump maven.version from 3.9.15 to 3.9.16",
          "is_bot": false,
          "headline": "Merge pull request #1062 from mathieucarbou/dependabot/maven/maven.ve…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-05-21T12:54:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e3a6440b66d483de4bd963bc18b599493ed9f49",
          "body": "Bumps `maven.version` from 3.9.15 to 3.9.16.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.15 to 3.9.16\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16)\n\nUpdates `org.apache.maven:maven-core` from 3.9\n[…]\n org.apache.maven:maven-plugin-api\n  dependency-version: 3.9.16\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump maven.version from 3.9.15 to 3.9.16",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-21T12:53:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e39fc14e097e05a61b7b5b5d2512f7b31aea2428",
          "body": "…he.maven.plugins-maven-enforcer-plugin-3.6.3\n\nBump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3",
          "is_bot": false,
          "headline": "Merge pull request #1061 from mathieucarbou/dependabot/maven/org.apac…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-05-21T12:52:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2b97c896876f7b842fb73e164de7136cb8a31a5",
          "body": "…rsion-6.1.0\n\nBump junit.version from 6.0.3 to 6.1.0",
          "is_bot": false,
          "headline": "Merge pull request #1063 from mathieucarbou/dependabot/maven/junit.ve…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-05-21T12:52:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2d81656dcc767aedbae1613a0f408a85de3b8f6",
          "body": "Bumps `junit.version` from 6.0.3 to 6.1.0.\n\nUpdates `org.junit:junit-bom` from 6.0.3 to 6.1.0\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.0.3...r6.1.0)\n\nUpdates `org.junit.jupiter:junit-jupiter-engine`\n[…]\n.junit.jupiter:junit-jupiter-engine\n  dependency-version: 6.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump junit.version from 6.0.3 to 6.1.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-20T01:34:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b013e042ca9fc3e4feb6c428cb91ad7ba0caaf5d",
          "body": "Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.2 to 3.6.3.\n- [Release notes](https://github.com/apache/maven-enforcer/releases)\n- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.2...enforcer-3.6.3)\n\n---\nupdated-depend\n[…]\nmaven.plugins:maven-enforcer-plugin\n  dependency-version: 3.6.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T02:20:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "101bd3d5fdc77a15146cad64984cc9d8f508e853",
          "body": "…he.maven.plugins-maven-invoker-plugin-3.10.1\n\nBump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1",
          "is_bot": false,
          "headline": "Merge pull request #1058 from mathieucarbou/dependabot/maven/org.apac…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-05-10T15:44:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d10369938f5fbced4ecdcfdd4bdbcedb027af4e",
          "body": "…ycrawl.tools-checkstyle-13.4.2\n\nBump com.puppycrawl.tools:checkstyle from 13.4.0 to 13.4.2",
          "is_bot": false,
          "headline": "Merge pull request #1057 from mathieucarbou/dependabot/maven/com.pupp…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-05-10T15:44:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63460239ee77c8281450a3410e3734e7f8e22144",
          "body": "…ersion-5.0.6\n\nBump groovy.version from 5.0.5 to 5.0.6",
          "is_bot": false,
          "headline": "Merge pull request #1059 from mathieucarbou/dependabot/maven/groovy.v…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-05-10T15:43:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1aa397a79b814a563b287fe49de98815c6e20ba1",
          "body": "Bumps `groovy.version` from 5.0.5 to 5.0.6.\n\nUpdates `org.apache.groovy:groovy` from 5.0.5 to 5.0.6\n- [Commits](https://github.com/apache/groovy/commits)\n\nUpdates `org.apache.groovy:groovy-json` from 5.0.5 to 5.0.6\n- [Commits](https://github.com/apache/groovy/commits)\n\nUpdates `org.apache.groovy:gro\n[…]\n-name: org.apache.groovy:groovy-xml\n  dependency-version: 5.0.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump groovy.version from 5.0.5 to 5.0.6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-07T16:51:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "49dd66e058967eeee50b7e3165afc4763e14a373",
          "body": "Bumps [org.apache.maven.plugins:maven-invoker-plugin](https://github.com/apache/maven-invoker-plugin) from 3.9.1 to 3.10.1.\n- [Release notes](https://github.com/apache/maven-invoker-plugin/releases)\n- [Commits](https://github.com/apache/maven-invoker-plugin/compare/maven-invoker-plugin-3.9.1...maven\n[…]\nmaven.plugins:maven-invoker-plugin\n  dependency-version: 3.10.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-06T16:43:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "31cb9dad3663f830cc2d2282f0329075a7eeba4b",
          "body": "Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 13.4.0 to 13.4.2.\n- [Release notes](https://github.com/checkstyle/checkstyle/releases)\n- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-13.4.0...checkstyle-13.4.2)\n\n---\nupdated-dependencies:\n[…]\ne: com.puppycrawl.tools:checkstyle\n  dependency-version: 13.4.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.puppycrawl.tools:checkstyle from 13.4.0 to 13.4.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-04T21:13:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6ba01a009ef1cab10c83813cd9987778a866db38",
          "body": "…rsion-3.9.15\n\nBump maven.version from 3.9.14 to 3.9.15",
          "is_bot": false,
          "headline": "Merge pull request #1052 from mathieucarbou/dependabot/maven/maven.ve…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-04-26T18:31:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "326c358ac3d6dc24b81a6db4ba360bdb139ad376",
          "body": "…io-commons-io-2.22.0\n\nBump commons-io:commons-io from 2.21.0 to 2.22.0",
          "is_bot": false,
          "headline": "Merge pull request #1053 from mathieucarbou/dependabot/maven/commons-…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-04-26T18:30:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33969ee30b491db456804316946a8376b16541af",
          "body": "…le.code.gson-gson-2.14.0\n\nBump com.google.code.gson:gson from 2.13.2 to 2.14.0",
          "is_bot": false,
          "headline": "Merge pull request #1054 from mathieucarbou/dependabot/maven/com.goog…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-04-26T18:30:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d4216f4328f7f50123ece17cb1e628f92a27feb",
          "body": "Bumps [com.google.code.gson:gson](https://github.com/google/gson) from 2.13.2 to 2.14.0.\n- [Release notes](https://github.com/google/gson/releases)\n- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/google/gson/compare/gson-parent-2.13.2...gson-parent\n[…]\ncy-name: com.google.code.gson:gson\n  dependency-version: 2.14.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.google.code.gson:gson from 2.13.2 to 2.14.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-24T16:42:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5902829be78d7b9984f29c288171d740aaaeb37",
          "body": "Bumps commons-io:commons-io from 2.21.0 to 2.22.0.\n\n---\nupdated-dependencies:\n- dependency-name: commons-io:commons-io\n  dependency-version: 2.22.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump commons-io:commons-io from 2.21.0 to 2.22.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-23T16:42:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e263b355dab4393f4d71388918e7bedab025efd3",
          "body": "Bumps `maven.version` from 3.9.14 to 3.9.15.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.14 to 3.9.15\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.14...maven-3.9.15)\n\nUpdates `org.apache.maven:maven-core` from 3.9\n[…]\nname: org.apache.maven:maven-model\n  dependency-version: 3.9.15\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump maven.version from 3.9.14 to 3.9.15",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-17T16:42:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d839ba7d11901b6744643bbd13f88dda71bae6bc",
          "body": "…le.guava-guava-33.6.0-jre\n\nBump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre",
          "is_bot": false,
          "headline": "Merge pull request #1051 from mathieucarbou/dependabot/maven/com.goog…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-04-16T00:32:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7052e2d16cb4e42b8dd3657abc069d1d62f0261b",
          "body": "…/actions/upload-pages-artifact-5\n\nBump actions/upload-pages-artifact from 4 to 5",
          "is_bot": false,
          "headline": "Merge pull request #1050 from mathieucarbou/dependabot/github_actions…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-04-16T00:31:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f86fe20dfcb9f6d4248673f9e9eabf9e33a4bcf",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.5.0-jre to 33.6.0-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-version: 33.6.0-jre\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-15T16:42:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f732163baec4a67831ef95f89be51cbcc5a3d46",
          "body": "Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 4 to 5.\n- [Release notes](https://github.com/actions/upload-pages-artifact/releases)\n- [Commits](https://github.com/actions/upload-pages-artifact/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-pages-artifact\n  dependency-version: '5'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/upload-pages-artifact from 4 to 5",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-14T16:46:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71332b7cdbe123e4d93f699aed7253320c7ef12a",
          "body": "…/actions/upload-pages-artifact-4\n\nBump actions/upload-pages-artifact from 3 to 4",
          "is_bot": false,
          "headline": "Merge pull request #1047 from mathieucarbou/dependabot/github_actions…",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-04-02T19:05:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2a15468c648f6ec1747f1236c70738667fb64ac",
          "body": "Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 3 to 4.\n- [Release notes](https://github.com/actions/upload-pages-artifact/releases)\n- [Commits](https://github.com/actions/upload-pages-artifact/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-pages-artifact\n  dependency-version: '4'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/upload-pages-artifact from 3 to 4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-02T19:05:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec7e92cc4407e40fe837d88e05c40f32ce05fb22",
          "body": "…/actions/configure-pages-6\n\nBump actions/configure-pages from 5 to 6",
          "is_bot": false,
          "headline": "Merge pull request #1048 from mathieucarbou/dependabot/github_actions…",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-04-02T19:05:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99f244f90d562924120af4abad275e0d529ea557",
          "body": "Bumps [actions/configure-pages](https://github.com/actions/configure-pages) from 5 to 6.\n- [Release notes](https://github.com/actions/configure-pages/releases)\n- [Commits](https://github.com/actions/configure-pages/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/configure-pages\n  dependency-version: '6'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/configure-pages from 5 to 6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-02T19:05:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36a07d7c223ceb290ac4c670942aaeea19faf09d",
          "body": "…/actions/deploy-pages-5\n\nBump actions/deploy-pages from 4 to 5",
          "is_bot": false,
          "headline": "Merge pull request #1049 from mathieucarbou/dependabot/github_actions…",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-04-02T19:04:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7bad5fef10a5a7cfa7a01760d3f8327b777620f",
          "body": "Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4 to 5.\n- [Release notes](https://github.com/actions/deploy-pages/releases)\n- [Commits](https://github.com/actions/deploy-pages/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: actions/deploy-pages\n  dependency-version: '5'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/deploy-pages from 4 to 5",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-02T16:46:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "766de7e169fc844bc94c3071b455f78a436ab2fc",
          "body": "new website",
          "is_bot": false,
          "headline": "Merge pull request #1046 from mathieucarbou/mkdocs-website",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-04-02T14:32:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "921130c6ca8c6f6519a452fe36749aa29aae3ec6",
          "body": null,
          "is_bot": false,
          "headline": "new website",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-04-02T14:30:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a468812b7407fbe0d15d8b0b25e9770de544607",
          "body": null,
          "is_bot": false,
          "headline": "Cleanup CI",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-04-02T12:56:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b4d1101e8d19980a1e8bb4c6240395ab93b8b1c",
          "body": null,
          "is_bot": false,
          "headline": "update file",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-04-02T12:54:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b10104517364d4fdb03c8fdfb91318a41bf69ad",
          "body": "This reverts commit b1ecbc746337a04e82e15983422b3fc6a61faf3e.",
          "is_bot": false,
          "headline": "Revert \"Prepare new website\"",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-04-02T12:53:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b1ecbc746337a04e82e15983422b3fc6a61faf3e",
          "body": null,
          "is_bot": false,
          "headline": "Prepare new website",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-04-02T12:52:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "610c9ab47cad75337152786fe8050784c3855e9a",
          "body": "…ycrawl.tools-checkstyle-13.4.0\n\nBump com.puppycrawl.tools:checkstyle from 13.3.0 to 13.4.0",
          "is_bot": false,
          "headline": "Merge pull request #1045 from mathieucarbou/dependabot/maven/com.pupp…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-03-30T18:15:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b95fd8a95a88d1323766d1d6caa3ef983c18118a",
          "body": "…ersion-5.0.5\n\nBump groovy.version from 5.0.4 to 5.0.5",
          "is_bot": false,
          "headline": "Merge pull request #1044 from mathieucarbou/dependabot/maven/groovy.v…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-03-30T18:14:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9481c2c90272b49716535aa5202c17c5baaed665",
          "body": "Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 13.3.0 to 13.4.0.\n- [Release notes](https://github.com/checkstyle/checkstyle/releases)\n- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-13.3.0...checkstyle-13.4.0)\n\n---\nupdated-dependencies:\n[…]\ne: com.puppycrawl.tools:checkstyle\n  dependency-version: 13.4.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.puppycrawl.tools:checkstyle from 13.3.0 to 13.4.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-30T18:11:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ab8aaeb1f3874ed2e12c1830a9d56963c88d7998",
          "body": "Bumps `groovy.version` from 5.0.4 to 5.0.5.\n\nUpdates `org.apache.groovy:groovy` from 5.0.4 to 5.0.5\n- [Commits](https://github.com/apache/groovy/commits)\n\nUpdates `org.apache.groovy:groovy-json` from 5.0.4 to 5.0.5\n- [Commits](https://github.com/apache/groovy/commits)\n\nUpdates `org.apache.groovy:gro\n[…]\n-name: org.apache.groovy:groovy-xml\n  dependency-version: 5.0.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump groovy.version from 5.0.4 to 5.0.5",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-30T18:10:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0717b8ba1cd84b6e41d7d67037b3b108a3301d86",
          "body": "…maven-plugin/maven-8eae5bb264\n\nBump the maven group across 2 directories with 1 update",
          "is_bot": false,
          "headline": "Merge pull request #1042 from mathieucarbou/dependabot/maven/license-…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-03-28T01:04:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb6a81312046971775b397be74738f51effbe534",
          "body": "Bumps the maven group with 1 update in the /license-maven-plugin directory: [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils).\nBumps the maven group with 1 update in the /license-maven-plugin/src/test/resources/check directory: [org.codehaus.plexus:plexus-utils](htt\n[…]\n\n- dependency-name: org.codehaus.plexus:plexus-utils\n  dependency-version: 4.0.3\n  dependency-type: direct:production\n  dependency-group: maven\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump the maven group across 2 directories with 1 update",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-27T23:15:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eb8254395b032bef37b93fdb914f0d45ab34d7ad",
          "body": "This reverts commit 2fb3c421897f19195a89b1e93e5688acfb69f60b.",
          "is_bot": false,
          "headline": "Revert \"Fix #775: Remove maven-dependency-tree\"",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-03-25T13:31:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fb3c421897f19195a89b1e93e5688acfb69f60b",
          "body": null,
          "is_bot": false,
          "headline": "Fix #775: Remove maven-dependency-tree",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-03-25T13:21:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b168d0b3e0fda58e2cdc0831c22694989da6ba9e",
          "body": "…haus.mojo-extra-enforcer-rules-1.12.0\n\nBump org.codehaus.mojo:extra-enforcer-rules from 1.11.0 to 1.12.0",
          "is_bot": false,
          "headline": "Merge pull request #1035 from mathieucarbou/dependabot/maven/org.code…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-03-20T03:20:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ef7bd371e452b82d3f2f86b8b78cf54ce49f15e",
          "body": "Bumps [org.codehaus.mojo:extra-enforcer-rules](https://github.com/mojohaus/extra-enforcer-rules) from 1.11.0 to 1.12.0.\n- [Release notes](https://github.com/mojohaus/extra-enforcer-rules/releases)\n- [Commits](https://github.com/mojohaus/extra-enforcer-rules/compare/1.11.0...1.12.0)\n\n---\nupdated-depe\n[…]\ncodehaus.mojo:extra-enforcer-rules\n  dependency-version: 1.12.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.mojo:extra-enforcer-rules from 1.11.0 to 1.12.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-16T17:28:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "56963d9367e49fce8e78b4dfbc5f46cca9cb2dc9",
          "body": "Move maven wrapper to 3.9.14",
          "is_bot": false,
          "headline": "Merge pull request #1034 from hazendaz/master",
          "author_name": "Mathieu Carbou",
          "author_login": "mathieucarbou",
          "committed_at": "2026-03-14T17:14:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56bf072edb7c5eedc20cc3ce3765d1e1c5b5f3f5",
          "body": null,
          "is_bot": true,
          "headline": "Update dependency maven to v3.9.14",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-14T15:37:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f44fffdc6e9fae0b74f4b9015b25bcab7c4dd281",
          "body": null,
          "is_bot": true,
          "headline": "Update dependency maven to v3.9.12",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-03-14T15:35:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05d988cba242b07c05de7244e9eaa105ca25aed9",
          "body": "…tory detection (#1030)\n\n* Initial plan\n\n* Add failOnShallow parameter to fail build on shallow/sparse repositories\n\nCo-authored-by: hazendaz <975267+hazendaz@users.noreply.github.com>\n\n* Add skipOnShallow parameter to skip plugin execution on shallow/sparse repositories\n\nCo-authored-by: hazendaz <9\n[…]\narbou <mathieu.carbou@gmail.com>\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\nCo-authored-by: mathieucarbou <61346+mathieucarbou@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Add skipOnShallow and failOnShallow options for shallow/sparse reposi…",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-03-13T09:36:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d3525895e52b7d3e422f1f1254727da942bfb716",
          "body": "…ic 2.0, CC0 1.0 (#1029)\n\n* Initial plan\n\n* Add missing OSS license templates: EUPL 1.1/1.2, ISC, CDDL 1.0, Artistic 2.0, CC0 1.0\n\nCo-authored-by: hazendaz <975267+hazendaz@users.noreply.github.com>\n\n* Remove accidentally committed SNAPSHOT report files and add to gitignore\n\nCo-authored-by: hazendaz\n[…]\n-authored-by: hazendaz <975267+hazendaz@users.noreply.github.com>\nCo-authored-by: Mathieu Carbou <mathieu.carbou@gmail.com>\nCo-authored-by: mathieucarbou <61346+mathieucarbou@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Add common OSS license templates: EUPL 1.1/1.2, ISC, CDDL 1.0, Artist…",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-03-13T08:55:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bb27b2d9fa18c96dad1f9165145b28cbb45d459c",
          "body": "* Initial plan\n\n* Add execution summary counters to license plugin (fixes #905)\n\nCo-authored-by: hazendaz <975267+hazendaz@users.noreply.github.com>\n\n* Remove accidentally committed generated report file\n\nCo-authored-by: hazendaz <975267+hazendaz@users.noreply.github.com>\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: hazendaz <975267+hazendaz@users.noreply.github.com>\nCo-authored-by: Mathieu Carbou <mathieu.carbou@gmail.com>",
          "is_bot": false,
          "headline": "Add execution summary counters to license plugin runs (#1031)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-03-13T08:32:33Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "81bafefb42088861ac14218da2aa374a22537894",
          "body": "…rsion-3.9.14\n\nBump maven.version from 3.9.13 to 3.9.14",
          "is_bot": false,
          "headline": "Merge pull request #1032 from mathieucarbou/dependabot/maven/maven.ve…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-03-13T03:03:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc84e2b59eef371018ac35f2393ddf8615ff86c4",
          "body": "…ito-mockito-bom-5.23.0\n\nBump org.mockito:mockito-bom from 5.22.0 to 5.23.0",
          "is_bot": false,
          "headline": "Merge pull request #1033 from mathieucarbou/dependabot/maven/org.mock…",
          "author_name": "Jeremy Landis",
          "author_login": "hazendaz",
          "committed_at": "2026-03-13T03:03:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b713ad9e390780e5ad5809b48509dde5704def03",
          "body": "Bumps [org.mockito:mockito-bom](https://github.com/mockito/mockito) from 5.22.0 to 5.23.0.\n- [Release notes](https://github.com/mockito/mockito/releases)\n- [Commits](https://github.com/mockito/mockito/compare/v5.22.0...v5.23.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.mockito:mockito-bom\n  dependency-version: 5.23.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.mockito:mockito-bom from 5.22.0 to 5.23.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-12T16:43:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fdc000afef3456fef98bba441dc57c7eab13c1a",
          "body": "Bumps `maven.version` from 3.9.13 to 3.9.14.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.13 to 3.9.14\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.13...maven-3.9.14)\n\nUpdates `org.apache.maven:maven-core` from 3.9\n[…]\nname: org.apache.maven:maven-model\n  dependency-version: 3.9.14\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump maven.version from 3.9.13 to 3.9.14",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-12T16:42:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 4,
      "commits_last_year": 232,
      "latest_release_at": "2026-07-21T23:38:25Z",
      "latest_release_tag": "v5.1.1",
      "releases_from_tags": false,
      "days_since_last_push": 3,
      "active_weeks_last_year": 48,
      "days_since_latest_release": 8,
      "mean_days_between_releases": 221.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 85,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "com.mycila:license-maven-plugin",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": true,
          "registry_url": "https://central.sonatype.com/artifact/com.mycila/license-maven-plugin",
          "is_deprecated": false,
          "latest_version": "5.1.1",
          "repository_url": "https://github.com/mathieucarbou/license-maven-plugin",
          "versions_count": 28,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-21T23:47:14Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        },
        {
          "name": "com.mycila:license-maven-plugin-fs",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": true,
          "registry_url": "https://central.sonatype.com/artifact/com.mycila/license-maven-plugin-fs",
          "is_deprecated": false,
          "latest_version": "5.1.1",
          "repository_url": "https://github.com/mathieucarbou/license-maven-plugin",
          "versions_count": 7,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-21T23:47:19Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        },
        {
          "name": "com.mycila:license-maven-plugin-git",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": true,
          "registry_url": "https://central.sonatype.com/artifact/com.mycila/license-maven-plugin-git",
          "is_deprecated": false,
          "latest_version": "5.1.1",
          "repository_url": "https://github.com/mathieucarbou/license-maven-plugin",
          "versions_count": 20,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-21T23:47:16Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        },
        {
          "name": "com.mycila:license-maven-plugin-svn",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": true,
          "registry_url": "https://central.sonatype.com/artifact/com.mycila/license-maven-plugin-svn",
          "is_deprecated": false,
          "latest_version": "5.1.1",
          "repository_url": "https://github.com/mathieucarbou/license-maven-plugin",
          "versions_count": 18,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-21T23:47:16Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        }
      ]
    },
    "popularity": {
      "forks": 91,
      "stars": 257,
      "watchers": 12,
      "fork_history": {
        "days": [
          {
            "date": "2013-08-12",
            "count": 1
          },
          {
            "date": "2013-08-26",
            "count": 1
          },
          {
            "date": "2013-09-09",
            "count": 1
          },
          {
            "date": "2013-11-22",
            "count": 1
          },
          {
            "date": "2013-12-14",
            "count": 1
          },
          {
            "date": "2014-01-14",
            "count": 1
          },
          {
            "date": "2014-01-26",
            "count": 1
          },
          {
            "date": "2014-04-28",
            "count": 1
          },
          {
            "date": "2014-07-09",
            "count": 1
          },
          {
            "date": "2014-07-10",
            "count": 1
          },
          {
            "date": "2014-09-07",
            "count": 1
          },
          {
            "date": "2014-10-17",
            "count": 2
          },
          {
            "date": "2014-12-18",
            "count": 1
          },
          {
            "date": "2014-12-20",
            "count": 1
          },
          {
            "date": "2015-01-27",
            "count": 1
          },
          {
            "date": "2015-03-17",
            "count": 1
          },
          {
            "date": "2015-03-26",
            "count": 1
          },
          {
            "date": "2015-04-13",
            "count": 1
          },
          {
            "date": "2015-06-23",
            "count": 1
          },
          {
            "date": "2015-08-04",
            "count": 1
          },
          {
            "date": "2015-09-07",
            "count": 1
          },
          {
            "date": "2015-10-13",
            "count": 1
          },
          {
            "date": "2015-10-25",
            "count": 1
          },
          {
            "date": "2015-11-10",
            "count": 2
          },
          {
            "date": "2015-11-19",
            "count": 1
          },
          {
            "date": "2015-12-09",
            "count": 1
          },
          {
            "date": "2016-02-04",
            "count": 1
          },
          {
            "date": "2016-05-19",
            "count": 1
          },
          {
            "date": "2016-07-27",
            "count": 1
          },
          {
            "date": "2016-08-12",
            "count": 1
          },
          {
            "date": "2016-08-31",
            "count": 1
          },
          {
            "date": "2016-09-23",
            "count": 1
          },
          {
            "date": "2017-02-20",
            "count": 1
          },
          {
            "date": "2017-02-25",
            "count": 1
          },
          {
            "date": "2017-03-15",
            "count": 2
          },
          {
            "date": "2017-03-29",
            "count": 1
          },
          {
            "date": "2017-05-30",
            "count": 1
          },
          {
            "date": "2017-08-31",
            "count": 1
          },
          {
            "date": "2017-10-16",
            "count": 1
          },
          {
            "date": "2017-11-03",
            "count": 1
          },
          {
            "date": "2017-11-25",
            "count": 1
          },
          {
            "date": "2017-12-04",
            "count": 1
          },
          {
            "date": "2018-03-07",
            "count": 1
          },
          {
            "date": "2018-04-09",
            "count": 1
          },
          {
            "date": "2018-08-09",
            "count": 1
          },
          {
            "date": "2018-12-13",
            "count": 1
          },
          {
            "date": "2018-12-21",
            "count": 1
          },
          {
            "date": "2019-01-27",
            "count": 1
          },
          {
            "date": "2019-02-01",
            "count": 1
          },
          {
            "date": "2019-04-06",
            "count": 1
          },
          {
            "date": "2019-09-21",
            "count": 1
          },
          {
            "date": "2019-12-22",
            "count": 1
          },
          {
            "date": "2020-01-14",
            "count": 1
          },
          {
            "date": "2020-04-20",
            "count": 1
          },
          {
            "date": "2020-06-09",
            "count": 1
          },
          {
            "date": "2020-06-25",
            "count": 1
          },
          {
            "date": "2020-06-30",
            "count": 1
          },
          {
            "date": "2020-07-28",
            "count": 2
          },
          {
            "date": "2020-08-27",
            "count": 1
          },
          {
            "date": "2021-01-01",
            "count": 1
          },
          {
            "date": "2021-03-15",
            "count": 1
          },
          {
            "date": "2021-03-29",
            "count": 1
          },
          {
            "date": "2021-05-21",
            "count": 1
          },
          {
            "date": "2021-06-28",
            "count": 1
          },
          {
            "date": "2021-07-05",
            "count": 1
          },
          {
            "date": "2021-07-20",
            "count": 1
          },
          {
            "date": "2021-08-10",
            "count": 1
          },
          {
            "date": "2021-08-20",
            "count": 1
          },
          {
            "date": "2021-10-20",
            "count": 1
          },
          {
            "date": "2021-11-19",
            "count": 1
          },
          {
            "date": "2022-01-15",
            "count": 1
          },
          {
            "date": "2023-01-01",
            "count": 1
          },
          {
            "date": "2023-02-13",
            "count": 1
          },
          {
            "date": "2023-03-04",
            "count": 1
          },
          {
            "date": "2023-03-24",
            "count": 1
          },
          {
            "date": "2023-04-20",
            "count": 1
          },
          {
            "date": "2023-08-04",
            "count": 1
          },
          {
            "date": "2023-09-18",
            "count": 1
          },
          {
            "date": "2023-11-21",
            "count": 1
          },
          {
            "date": "2024-03-21",
            "count": 1
          },
          {
            "date": "2024-05-10",
            "count": 1
          },
          {
            "date": "2025-01-07",
            "count": 1
          },
          {
            "date": "2025-02-18",
            "count": 1
          },
          {
            "date": "2025-03-22",
            "count": 1
          },
          {
            "date": "2025-09-18",
            "count": 1
          },
          {
            "date": "2026-04-18",
            "count": 1
          },
          {
            "date": "2026-07-23",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 91,
        "total_forks": 91
      },
      "star_history": null,
      "open_issues_and_prs": 23
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "license-maven-plugin-fs/pom.xml",
        "license-maven-plugin-git/pom.xml",
        "license-maven-plugin-svn/pom.xml",
        "license-maven-plugin/pom.xml",
        "license-maven-plugin/src/it/legacy-config-and-license-set/pom.xml",
        "license-maven-plugin/src/it/legacy-config/pom.xml",
        "license-maven-plugin/src/it/multi-license/pom.xml",
        "license-maven-plugin/src/it/pom-properties/pom.xml",
        "license-maven-plugin/src/it/single-licence-set/pom.xml",
        "license-maven-plugin/src/it/tri-license-set-with-includes/pom.xml",
        "license-maven-plugin/src/it/tri-license-set/pom.xml",
        "license-maven-plugin/src/test/resources-its/com/mycila/maven/plugin/license/dependencies/MavenProjectLicensesIT/approve/pom.xml",
        "license-maven-plugin/src/test/resources-its/com/mycila/maven/plugin/license/dependencies/MavenProjectLicensesIT/deny/pom.xml",
        "license-maven-plugin/src/test/resources-its/com/mycila/maven/plugin/license/dependencies/MavenProjectLicensesIT/no_dependencies/pom.xml",
        "license-maven-plugin/src/test/resources/check/pom.xml",
        "pom.xml"
      ],
      "largest_source_bytes": 145083,
      "source_files_sampled": 240,
      "oversized_source_files": 20,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "license-maven-plugin-fs/pom.xml",
        "license-maven-plugin-git/pom.xml",
        "license-maven-plugin-svn/pom.xml",
        "license-maven-plugin/pom.xml",
        "pom.xml",
        "requirements.txt"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 41,
        "malicious_count": 0,
        "assessed_package": "maven:com.mycila:license-maven-plugin@5.1.1",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "maven",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "com.mycila:license-maven-plugin",
          "manifest": "license-maven-plugin-fs/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "com.mycila:license-maven-plugin",
          "manifest": "license-maven-plugin-git/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.eclipse.jgit:org.eclipse.jgit",
          "manifest": "license-maven-plugin-git/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "6.10.1.202505221210-r"
        },
        {
          "name": "com.mycila:license-maven-plugin",
          "manifest": "license-maven-plugin-svn/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.tmatesoft.svnkit:svnkit",
          "manifest": "license-maven-plugin-svn/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.10.11"
        },
        {
          "name": "org.junit.jupiter:junit-jupiter-engine",
          "manifest": "license-maven-plugin/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${junit.version}"
        },
        {
          "name": "org.mockito:mockito-bom",
          "manifest": "license-maven-plugin/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "5.23.0"
        },
        {
          "name": "org.apache.maven.shared:maven-shared-utils",
          "manifest": "license-maven-plugin/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.4.2"
        },
        {
          "name": "org.apache.maven.shared:maven-common-artifact-filters",
          "manifest": "license-maven-plugin/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.4.0"
        },
        {
          "name": "org.apache.maven.shared:maven-dependency-tree",
          "manifest": "license-maven-plugin/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.3.0"
        },
        {
          "name": "com.google.code.gson:gson",
          "manifest": "license-maven-plugin/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.14.0"
        },
        {
          "name": "org.codehaus.plexus:plexus-utils",
          "manifest": "license-maven-plugin/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.0.3"
        },
        {
          "name": "org.codehaus.plexus:plexus-xml",
          "manifest": "license-maven-plugin/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.0.2"
        },
        {
          "name": "com.mycila:mycila-xmltool",
          "manifest": "license-maven-plugin/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.maven:maven-plugin-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${maven.version}"
        },
        {
          "name": "org.apache.maven:maven-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${maven.version}"
        },
        {
          "name": "org.apache.maven:maven-artifact",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${maven.version}"
        },
        {
          "name": "org.apache.maven:maven-model",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${maven.version}"
        },
        {
          "name": "org.apache.maven.plugin-tools:maven-plugin-annotations",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${maven-plugin.version}"
        },
        {
          "name": "com.mycila:mycila-xmltool",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.4.ga"
        },
        {
          "name": "org.apache.maven.plugin-testing:maven-plugin-testing-harness",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.5.1"
        },
        {
          "name": "commons-io:commons-io",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.22.0"
        },
        {
          "name": "org.apache.commons:commons-pool2",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.13.1"
        },
        {
          "name": "org.junit:junit-bom",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${junit.version}"
        },
        {
          "name": "org.codehaus.mojo:extra-enforcer-rules",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.12.0"
        },
        {
          "name": "org.apache.groovy:groovy",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${groovy.version}"
        },
        {
          "name": "org.apache.groovy:groovy-json",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${groovy.version}"
        },
        {
          "name": "org.apache.groovy:groovy-nio",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${groovy.version}"
        },
        {
          "name": "org.apache.groovy:groovy-xml",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${groovy.version}"
        },
        {
          "name": "com.puppycrawl.tools:checkstyle",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "13.8.0"
        },
        {
          "name": "org.codehaus.groovy:groovy-eclipse-compiler",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.7.0"
        },
        {
          "name": "org.codehaus.groovy:groovy-eclipse-batch",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.0.8-01"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "com.google.code.gson:gson",
            "direct": true,
            "version": "2.14.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.mycila:license-maven-plugin",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.mycila:license-maven-plugin",
            "direct": true,
            "version": "5.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.mycila:license-maven-plugin",
            "direct": true,
            "version": "5.1.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "com.mycila:mycila-xmltool",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.mycila:mycila-xmltool",
            "direct": true,
            "version": "4.4",
            "ecosystem": "maven"
          },
          {
            "name": "com.puppycrawl.tools:checkstyle",
            "direct": true,
            "version": "13.8.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": true,
            "version": "2.22.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-pool2",
            "direct": true,
            "version": "2.13.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.groovy:groovy",
            "direct": true,
            "version": "5.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.groovy:groovy-json",
            "direct": true,
            "version": "5.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.groovy:groovy-nio",
            "direct": true,
            "version": "5.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.groovy:groovy-xml",
            "direct": true,
            "version": "5.0.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugin-testing:maven-plugin-testing-harness",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugin-testing:maven-plugin-testing-harness",
            "direct": true,
            "version": "1.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugin-testing:maven-plugin-testing-harness",
            "direct": true,
            "version": "3.5.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugin-tools:maven-plugin-annotations",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugin-tools:maven-plugin-annotations",
            "direct": true,
            "version": "3.15.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.shared:maven-common-artifact-filters",
            "direct": true,
            "version": "3.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.shared:maven-dependency-tree",
            "direct": true,
            "version": "3.3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.shared:maven-shared-utils",
            "direct": true,
            "version": "3.4.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-artifact",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-artifact",
            "direct": true,
            "version": "3.9.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-core",
            "direct": true,
            "version": "3.9.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-model",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-model",
            "direct": true,
            "version": "3.9.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-plugin-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-plugin-api",
            "direct": true,
            "version": "2.0.9",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-plugin-api",
            "direct": true,
            "version": "3.9.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.groovy:groovy-eclipse-batch",
            "direct": true,
            "version": "3.0.8-01",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.groovy:groovy-eclipse-compiler",
            "direct": true,
            "version": "3.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:extra-enforcer-rules",
            "direct": true,
            "version": "1.12.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-utils",
            "direct": true,
            "version": "4.0.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-xml",
            "direct": true,
            "version": "3.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.jgit:org.eclipse.jgit",
            "direct": true,
            "version": "6.10.1.202505221210-r",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-engine",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-engine",
            "direct": true,
            "version": "5.10.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit:junit-bom",
            "direct": true,
            "version": "6.1.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-bom",
            "direct": true,
            "version": "5.23.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.tmatesoft.svnkit:svnkit",
            "direct": true,
            "version": "1.10.11",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.code.maven-license-plugin:maven-license-plugin",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.code.xmltool:xmltool",
            "direct": false,
            "version": "1.4",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.guava:guava",
            "direct": false,
            "version": "33.6.0-jre",
            "ecosystem": "maven"
          },
          {
            "name": "com.soebes.itf.jupiter.extension:itf-assertj",
            "direct": false,
            "version": "0.13.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.soebes.itf.jupiter.extension:itf-jupiter-extension",
            "direct": false,
            "version": "0.13.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.soebes.itf.jupiter.extension:itf-maven-plugin",
            "direct": false,
            "version": "0.13.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-checkstyle-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-checkstyle-plugin",
            "direct": false,
            "version": "3.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-clean-plugin",
            "direct": false,
            "version": "3.5.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": "3.15.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-deploy-plugin",
            "direct": false,
            "version": "3.1.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": "3.6.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-failsafe-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-failsafe-plugin",
            "direct": false,
            "version": "3.5.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-gpg-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-gpg-plugin",
            "direct": false,
            "version": "3.2.8",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-install-plugin",
            "direct": false,
            "version": "3.1.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-invoker-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-invoker-plugin",
            "direct": false,
            "version": "3.10.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": "3.5.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": "3.12.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-plugin-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-plugin-plugin",
            "direct": false,
            "version": "3.15.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-plugin-report-plugin",
            "direct": false,
            "version": "3.15.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-project-info-reports-plugin",
            "direct": false,
            "version": "3.9.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-release-plugin",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-resources-plugin",
            "direct": false,
            "version": "3.5.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-scm-plugin",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-site-plugin",
            "direct": false,
            "version": "3.22.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": "3.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": "3.5.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.shared:maven-verifier",
            "direct": false,
            "version": "2.0.0-M1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-embedder",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-project",
            "direct": false,
            "version": "2.0.9",
            "ecosystem": "maven"
          },
          {
            "name": "org.assertj:assertj-core",
            "direct": false,
            "version": "3.27.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:cobertura-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:javancss-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:jdepend-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:taglist-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.jacoco:jacoco-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.jacoco:jacoco-maven-plugin",
            "direct": false,
            "version": "0.8.15",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-params",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.vintage:junit-vintage-engine",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.sonatype.central:central-publishing-maven-plugin",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.testng:testng",
            "direct": false,
            "version": "5.7",
            "ecosystem": "maven"
          },
          {
            "name": "mkdocs",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-material",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pymdown-extensions",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 92,
        "direct_count": 41,
        "indirect_count": 51
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 5,
        "merged_prs": 765,
        "open_issues": 18,
        "closed_ratio": 0.911,
        "closed_issues": 185,
        "closed_unmerged_prs": 96
      },
      "bus_factor": 2,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "mathieucarbou",
          "commits": 535,
          "avatar_url": "https://avatars.githubusercontent.com/u/61346?v=4"
        },
        {
          "type": "User",
          "login": "hazendaz",
          "commits": 450,
          "avatar_url": "https://avatars.githubusercontent.com/u/975267?v=4"
        },
        {
          "type": "User",
          "login": "adamretter",
          "commits": 17,
          "avatar_url": "https://avatars.githubusercontent.com/u/1264057?v=4"
        },
        {
          "type": "User",
          "login": "sebhoss",
          "commits": 17,
          "avatar_url": "https://avatars.githubusercontent.com/u/44168?v=4"
        },
        {
          "type": "User",
          "login": "dbwiddis",
          "commits": 16,
          "avatar_url": "https://avatars.githubusercontent.com/u/9291703?v=4"
        },
        {
          "type": "User",
          "login": "ppalaga",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/1826249?v=4"
        },
        {
          "type": "User",
          "login": "McFoggy",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/1119660?v=4"
        },
        {
          "type": "User",
          "login": "mirabilos",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/861078?v=4"
        },
        {
          "type": "User",
          "login": "peterlynch",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/193901?v=4"
        },
        {
          "type": "User",
          "login": "frank-wagner-ibm",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/62110857?v=4"
        }
      ],
      "contributors_sampled": 45,
      "top_contributor_share": 0.477
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yaml",
        "website.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 8,
            "reason": "8 out of 9 merged PRs checked by a CI test -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/14 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 33 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 6,
            "reason": "4 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "55cfd6a30c97fac17f785ee85f3c846e8ee32d94",
        "ran_at": "2026-07-30T23:22:17Z",
        "aggregate_score": 5.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-30T16:43:27Z",
      "oldest_open_prs": [
        {
          "number": 243,
          "created_at": "2021-11-19T14:11:14Z",
          "last_comment_at": "2021-11-26T12:40:46Z",
          "last_comment_author": "cns-solutions-admin"
        },
        {
          "number": 888,
          "created_at": "2025-01-15T10:13:12Z",
          "last_comment_at": "2026-03-13T08:37:55Z",
          "last_comment_author": "mathieucarbou"
        },
        {
          "number": 900,
          "created_at": "2025-01-27T01:01:48Z",
          "last_comment_at": "2025-11-15T23:52:05Z",
          "last_comment_author": "coderabbitai"
        },
        {
          "number": 1081,
          "created_at": "2026-07-27T16:42:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1082,
          "created_at": "2026-07-30T14:20:09Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-22T17:11:11Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 126,
          "created_at": "2017-04-22T11:20:58Z",
          "last_comment_at": "2019-02-06T16:50:38Z",
          "last_comment_author": "mathieucarbou"
        },
        {
          "number": 158,
          "created_at": "2019-11-15T20:05:09Z",
          "last_comment_at": "2021-11-05T03:02:37Z",
          "last_comment_author": "ctubbsii"
        },
        {
          "number": 204,
          "created_at": "2021-05-05T12:26:50Z",
          "last_comment_at": "2021-09-07T15:41:48Z",
          "last_comment_author": "mathieucarbou"
        },
        {
          "number": 241,
          "created_at": "2021-10-28T17:37:48Z",
          "last_comment_at": "2021-11-26T12:49:09Z",
          "last_comment_author": "mathieucarbou"
        },
        {
          "number": 242,
          "created_at": "2021-11-19T13:43:34Z",
          "last_comment_at": "2022-11-06T17:35:32Z",
          "last_comment_author": "AdrienHorgnies"
        },
        {
          "number": 290,
          "created_at": "2022-01-21T14:45:12Z",
          "last_comment_at": "2022-03-26T07:54:24Z",
          "last_comment_author": "mathieucarbou"
        },
        {
          "number": 309,
          "created_at": "2022-03-23T03:21:51Z",
          "last_comment_at": "2022-03-26T14:58:48Z",
          "last_comment_author": "dbwiddis"
        },
        {
          "number": 434,
          "created_at": "2022-12-09T13:55:00Z",
          "last_comment_at": "2023-02-14T14:26:32Z",
          "last_comment_author": "Rots"
        },
        {
          "number": 536,
          "created_at": "2023-04-18T14:36:40Z",
          "last_comment_at": "2023-10-24T04:39:15Z",
          "last_comment_author": "stale"
        },
        {
          "number": 764,
          "created_at": "2024-05-10T20:49:39Z",
          "last_comment_at": "2026-07-28T19:42:42Z",
          "last_comment_author": "mathieucarbou"
        },
        {
          "number": 775,
          "created_at": "2024-05-29T19:45:24Z",
          "last_comment_at": "2026-03-25T13:32:08Z",
          "last_comment_author": "mathieucarbou"
        },
        {
          "number": 834,
          "created_at": "2024-09-25T09:36:14Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 859,
          "created_at": "2024-11-23T19:03:38Z",
          "last_comment_at": "2024-12-26T02:31:48Z",
          "last_comment_author": "hazendaz"
        },
        {
          "number": 882,
          "created_at": "2025-01-13T14:04:26Z",
          "last_comment_at": "2025-01-13T15:46:52Z",
          "last_comment_author": "mathieucarbou"
        },
        {
          "number": 887,
          "created_at": "2025-01-15T09:36:25Z",
          "last_comment_at": "2025-01-15T10:22:55Z",
          "last_comment_author": "mathieucarbou"
        },
        {
          "number": 1036,
          "created_at": "2026-03-25T11:34:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1043,
          "created_at": "2026-03-29T15:28:33Z",
          "last_comment_at": "2026-03-29T17:28:27Z",
          "last_comment_author": "hazendaz"
        },
        {
          "number": 1060,
          "created_at": "2026-05-15T14:18:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/mathieucarbou/license-maven-plugin",
    "host": "github.com",
    "name": "license-maven-plugin",
    "owner": "mathieucarbou"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "excellent",
      "name": "Overall health",
      "note": "The weighted overall 75 is calibrated to 89 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 75,
            "calibrated": 89,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 89,
      "inputs": {
        "security": 66,
        "vitality": 92,
        "community": 72,
        "governance": 73,
        "calibration": "2026-08-02",
        "engineering": 70,
        "ai_readiness": 63,
        "weighted_overall_raw": 75
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 92,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "exceptional",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 97,
            "inputs": {
              "commits_last_year": 232,
              "human_commit_share": 0.64,
              "days_since_last_push": 3,
              "active_weeks_last_year": 48
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "48/52 weeks with commits",
                "points": 33.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 48
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "232 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 232
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 84,
            "inputs": {
              "releases_count": 4,
              "latest_release_tag": "v5.1.1",
              "releases_from_tags": false,
              "days_since_latest_release": 8,
              "mean_days_between_releases": 221.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "4 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 8 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~221.5 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 221.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 11,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 11 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "good",
        "name": "Community & Adoption",
        "value": 72,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "forks": 91,
              "stars": 257,
              "watchers": 12,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "257 stars",
                "points": 39.1,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 257
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "91 forks",
                "points": 16.3,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 91
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "12 watchers",
                "points": 5.8,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 73,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 45,
              "top_contributor_share": 0.477
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 48% of commits",
                "points": 11.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 48
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "45 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 45
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 33 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 75,
            "inputs": {
              "merged_prs": 765,
              "open_issues": 18,
              "closed_issues": 185,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 0.911,
              "closed_unmerged_prs": 96,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "91% of issues closed",
                "points": 38.3,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 91
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "765/861 decided PRs merged",
                "points": 26.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 765,
                      "decided": 861
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/14 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 65,
            "inputs": {
              "followers": 213,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "mathieucarbou",
              "public_repos": 71,
              "account_age_days": 6353
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "213 followers of mathieucarbou",
                "points": 16.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 213,
                      "login": "mathieucarbou"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "71 public repos, account ~17 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 71
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 17
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "com.mycila:license-maven-plugin",
                "com.mycila:license-maven-plugin-fs",
                "com.mycila:license-maven-plugin-git",
                "com.mycila:license-maven-plugin-svn"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 8
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "4 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 4,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 8 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "28 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 28
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 70,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "8 out of 9 merged PRs checked by a CI test -- score normalized to 8",
                "points": 16,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": "https://mathieu.carbou.me/license-maven-plugin/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://mathieu.carbou.me/license-maven-plugin/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 5.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "8 out of 9 merged PRs checked by a CI test -- score normalized to 8",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/14 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 33 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "4 existing vulnerabilities detected",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:com.mycila:license-maven-plugin@5.1.1 runtime dependency closure — what installing the published package pulls in — 41 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:com.mycila:license-maven-plugin@5.1.1",
                  "assessed": 41
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 41,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 41,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 1,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 19
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 63,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "weak",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 39,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.734,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "47 of 64 human commits state their intent (structured subject or explanatory body)",
                "points": 39.2,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 47,
                      "sampled": 64
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.03,
              "toolchain_manifests": [
                "license-maven-plugin-fs/pom.xml",
                "license-maven-plugin-git/pom.xml",
                "license-maven-plugin-svn/pom.xml",
                "license-maven-plugin/pom.xml",
                "license-maven-plugin/src/it/legacy-config-and-license-set/pom.xml",
                "license-maven-plugin/src/it/legacy-config/pom.xml",
                "license-maven-plugin/src/it/multi-license/pom.xml",
                "license-maven-plugin/src/it/pom-properties/pom.xml",
                "license-maven-plugin/src/it/single-licence-set/pom.xml",
                "license-maven-plugin/src/it/tri-license-set-with-includes/pom.xml",
                "license-maven-plugin/src/it/tri-license-set/pom.xml",
                "license-maven-plugin/src/test/resources-its/com/mycila/maven/plugin/license/dependencies/MavenProjectLicensesIT/approve/pom.xml",
                "license-maven-plugin/src/test/resources-its/com/mycila/maven/plugin/license/dependencies/MavenProjectLicensesIT/deny/pom.xml",
                "license-maven-plugin/src/test/resources-its/com/mycila/maven/plugin/license/dependencies/MavenProjectLicensesIT/no_dependencies/pom.xml",
                "license-maven-plugin/src/test/resources/check/pom.xml",
                "pom.xml"
              ],
              "dependency_bot_commit_share": 0.36
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "license-maven-plugin-fs/pom.xml, license-maven-plugin-git/pom.xml, license-maven-plugin-svn/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "license-maven-plugin-fs/pom.xml, license-maven-plugin-git/pom.xml, license-maven-plugin-svn/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "3 of the last 100 commits agent-authored or agent-credited",
                "points": 6,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 3,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "36 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 36,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "exceptional",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 95,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 145083,
              "source_files_sampled": 240,
              "oversized_source_files": 20
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "20/240 source files over 60KB",
                "points": 50.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 240,
                      "oversized": 20
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "metrics_version": "2.2.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-30T23:22:41.202759Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/mathieucarbou/license-maven-plugin.svg",
  "full_name": "mathieucarbou/license-maven-plugin",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.2.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsMaven.