openrewrite/rewrite-github-actions holds a health index of 63 out of 100, placing it in the Moderate band. It scores highest on Vitality (93/100) and lowest on Community & Adoption (37/100). It was last updated 3 days ago. 2 contributors account for most of its recent work.
63
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
63
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 0/100 source files over 60KB
Inputs used
primary_language
Java
largest_source_bytes
28,457
source_files_sampled
100
oversized_source_files
0
Key facts
1GitHub stars
28contributors
87commits, last 12 months
3days since last push
100releases
2bus factor
50open issues
Mavenpackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 5 ⇿
0Stars
5Forks
31Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 19Patch 12
Each point covers 2 days.
OpenSSF Scorecard 5.2 / 10
5.2aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 17:13 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"openrewrite",
"openrewrite-recipes"
],
"is_fork": false,
"size_kb": 2206,
"has_wiki": false,
"homepage": null,
"languages": {
"Java": 650248
},
"pushed_at": "2026-07-22T14:56:06Z",
"created_at": "2021-07-27T14:29:53Z",
"owner_type": "Organization",
"updated_at": "2026-07-22T14:59:57Z",
"description": "OpenRewrite recipes for performing GitHub action hygiene and migration tasks.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Java",
"significant_languages": [
"Java"
]
},
"owner": {
"blog": "https://docs.openrewrite.org",
"name": "OpenRewrite",
"type": "Organization",
"login": "openrewrite",
"company": null,
"location": "San Francisco, CA",
"followers": 984,
"avatar_url": "https://avatars.githubusercontent.com/u/61478321?v=4",
"created_at": "2020-02-25T21:27:36Z",
"is_verified": null,
"public_repos": 75,
"account_age_days": 2341
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v3.27.0",
"kind": "minor",
"published_at": "2026-07-14T05:22:32Z"
},
{
"tag": "v3.26.0",
"kind": "minor",
"published_at": "2026-07-01T06:17:54Z"
},
{
"tag": "v3.25.0",
"kind": "minor",
"published_at": "2026-06-17T09:49:55Z"
},
{
"tag": "v3.24.0",
"kind": "minor",
"published_at": "2026-06-03T13:21:10Z"
},
{
"tag": "v3.23.0",
"kind": "minor",
"published_at": "2026-05-21T10:14:55Z"
},
{
"tag": "v3.22.0",
"kind": "minor",
"published_at": "2026-05-06T23:19:34Z"
},
{
"tag": "v3.21.1",
"kind": "patch",
"published_at": "2026-04-27T09:07:55Z"
},
{
"tag": "v3.21.0",
"kind": "minor",
"published_at": "2026-04-21T07:30:04Z"
},
{
"tag": "v3.20.0",
"kind": "minor",
"published_at": "2026-04-08T12:04:32Z"
},
{
"tag": "v3.19.0",
"kind": "minor",
"published_at": "2026-03-25T09:26:50Z"
},
{
"tag": "v3.18.4",
"kind": "patch",
"published_at": "2026-03-12T12:43:58Z"
},
{
"tag": "v3.18.3",
"kind": "patch",
"published_at": "2026-03-04T16:27:32Z"
},
{
"tag": "v3.18.2",
"kind": "patch",
"published_at": "2026-02-25T12:18:50Z"
},
{
"tag": "v3.18.1",
"kind": "patch",
"published_at": "2026-02-11T08:44:03Z"
},
{
"tag": "v3.18.0",
"kind": "minor",
"published_at": "2026-01-20T19:01:33Z"
},
{
"tag": "v3.17.0",
"kind": "minor",
"published_at": "2026-01-07T15:45:13Z"
},
{
"tag": "v3.16.1",
"kind": "patch",
"published_at": "2025-12-16T15:16:47Z"
},
{
"tag": "v3.16.0",
"kind": "minor",
"published_at": "2025-12-05T10:16:19Z"
},
{
"tag": "v3.15.0",
"kind": "minor",
"published_at": "2025-11-20T11:28:42Z"
},
{
"tag": "v3.14.0",
"kind": "minor",
"published_at": "2025-11-04T13:00:20Z"
},
{
"tag": "v3.13.0",
"kind": "minor",
"published_at": "2025-10-22T10:34:11Z"
},
{
"tag": "v3.12.0",
"kind": "minor",
"published_at": "2025-10-10T17:03:44Z"
},
{
"tag": "v3.11.0",
"kind": "minor",
"published_at": "2025-09-24T12:10:48Z"
},
{
"tag": "v3.10.2",
"kind": "patch",
"published_at": "2025-09-10T10:36:02Z"
},
{
"tag": "v3.10.1",
"kind": "patch",
"published_at": "2025-08-27T15:39:05Z"
},
{
"tag": "v3.10.0",
"kind": "minor",
"published_at": "2025-08-12T20:51:02Z"
},
{
"tag": "v3.9.2",
"kind": "patch",
"published_at": "2025-07-23T21:23:15Z"
},
{
"tag": "v3.9.1",
"kind": "patch",
"published_at": "2025-07-23T10:31:19Z"
},
{
"tag": "v3.9.0",
"kind": "minor",
"published_at": "2025-07-09T13:33:37Z"
},
{
"tag": "v3.8.0",
"kind": "minor",
"published_at": "2025-06-25T10:48:43Z"
},
{
"tag": "v3.7.0",
"kind": "minor",
"published_at": "2025-05-28T14:05:03Z"
},
{
"tag": "v3.6.0",
"kind": "minor",
"published_at": "2025-05-07T16:38:04Z"
},
{
"tag": "v3.5.0",
"kind": "minor",
"published_at": "2025-04-24T16:17:14Z"
},
{
"tag": "v3.4.1",
"kind": "patch",
"published_at": "2025-04-10T14:18:23Z"
},
{
"tag": "v3.4.0",
"kind": "minor",
"published_at": "2025-04-09T17:31:44Z"
},
{
"tag": "v3.3.1",
"kind": "patch",
"published_at": "2025-03-27T16:27:16Z"
},
{
"tag": "v3.3.0",
"kind": "minor",
"published_at": "2025-03-11T18:05:35Z"
},
{
"tag": "v3.2.0",
"kind": "minor",
"published_at": "2025-02-20T16:27:42Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2025-02-07T16:55:30Z"
},
{
"tag": "v3.0.2",
"kind": "patch",
"published_at": "2025-01-24T13:11:35Z"
},
{
"tag": "v3.0.1",
"kind": "patch",
"published_at": "2025-01-17T10:55:50Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2025-01-10T16:26:20Z"
},
{
"tag": "v2.11.0",
"kind": "minor",
"published_at": "2024-12-18T17:05:05Z"
},
{
"tag": "v2.10.1",
"kind": "patch",
"published_at": "2024-11-28T16:40:10Z"
},
{
"tag": "v2.10.0",
"kind": "minor",
"published_at": "2024-11-27T16:17:54Z"
},
{
"tag": "v2.9.2",
"kind": "patch",
"published_at": "2024-11-13T15:45:06Z"
},
{
"tag": "v2.9.1",
"kind": "patch",
"published_at": "2024-11-08T20:01:08Z"
},
{
"tag": "v2.9.0",
"kind": "minor",
"published_at": "2024-11-06T19:04:08Z"
},
{
"tag": "v2.8.2",
"kind": "patch",
"published_at": "2024-10-23T13:54:25Z"
},
{
"tag": "v2.8.1",
"kind": "patch",
"published_at": "2024-10-09T15:52:14Z"
},
{
"tag": "v2.8.0",
"kind": "minor",
"published_at": "2024-09-24T16:44:30Z"
},
{
"tag": "v2.7.5",
"kind": "patch",
"published_at": "2024-09-11T16:50:18Z"
},
{
"tag": "v2.7.4",
"kind": "patch",
"published_at": "2024-08-28T13:15:46Z"
},
{
"tag": "v2.7.3",
"kind": "patch",
"published_at": "2024-08-12T18:44:11Z"
},
{
"tag": "v2.7.2",
"kind": "patch",
"published_at": "2024-08-08T08:46:12Z"
},
{
"tag": "v2.7.1",
"kind": "patch",
"published_at": "2024-07-31T11:03:17Z"
},
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2024-07-15T08:42:13Z"
},
{
"tag": "v2.6.2",
"kind": "patch",
"published_at": "2024-07-03T16:21:23Z"
},
{
"tag": "v2.6.1",
"kind": "patch",
"published_at": "2024-06-19T17:00:44Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2024-06-19T08:20:26Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2024-06-07T22:10:52Z"
},
{
"tag": "v2.4.2",
"kind": "patch",
"published_at": "2024-05-22T21:06:55Z"
},
{
"tag": "v2.4.1",
"kind": "patch",
"published_at": "2024-05-22T12:52:03Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2024-05-18T05:00:33Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2024-05-08T12:31:01Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2024-04-24T13:45:38Z"
},
{
"tag": "v2.1.7",
"kind": "patch",
"published_at": "2024-03-19T17:56:26Z"
},
{
"tag": "v2.1.6",
"kind": "patch",
"published_at": "2024-03-12T21:27:16Z"
},
{
"tag": "v2.1.5",
"kind": "patch",
"published_at": "2024-02-20T19:46:00Z"
},
{
"tag": "v2.1.4",
"kind": "patch",
"published_at": "2024-02-06T12:24:28Z"
},
{
"tag": "v2.1.3",
"kind": "patch",
"published_at": "2024-01-23T13:27:03Z"
},
{
"tag": "v2.1.2",
"kind": "patch",
"published_at": "2024-01-16T12:21:06Z"
},
{
"tag": "v2.1.1",
"kind": "patch",
"published_at": "2024-01-09T13:54:39Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2024-01-09T10:33:01Z"
},
{
"tag": "v2.0.14",
"kind": "patch",
"published_at": "2023-12-21T13:19:18Z"
},
{
"tag": "v2.0.13",
"kind": "patch",
"published_at": "2023-12-20T09:58:55Z"
},
{
"tag": "v2.0.12",
"kind": "patch",
"published_at": "2023-12-14T10:52:14Z"
},
{
"tag": "v2.0.11",
"kind": "patch",
"published_at": "2023-12-08T09:37:04Z"
},
{
"tag": "v2.0.10",
"kind": "patch",
"published_at": "2023-12-04T18:48:28Z"
},
{
"tag": "v2.0.9",
"kind": "patch",
"published_at": "2023-11-24T23:45:48Z"
},
{
"tag": "v2.0.8",
"kind": "patch",
"published_at": "2023-11-24T14:46:13Z"
},
{
"tag": "v2.0.7",
"kind": "patch",
"published_at": "2023-10-27T22:31:44Z"
},
{
"tag": "v2.0.6",
"kind": "patch",
"published_at": "2023-10-03T01:31:00Z"
},
{
"tag": "v2.0.5",
"kind": "patch",
"published_at": "2023-09-12T14:16:13Z"
},
{
"tag": "v2.0.4",
"kind": "patch",
"published_at": "2023-08-24T18:19:07Z"
},
{
"tag": "v2.0.3",
"kind": "patch",
"published_at": "2023-07-18T07:26:46Z"
},
{
"tag": "v2.0.2",
"kind": "patch",
"published_at": "2023-07-04T08:54:36Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2023-06-14T01:58:50Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2023-06-02T01:21:43Z"
},
{
"tag": "v1.20.0",
"kind": "minor",
"published_at": "2023-04-21T00:35:58Z"
},
{
"tag": "v1.19.0",
"kind": "minor",
"published_at": "2023-04-04T01:02:20Z"
},
{
"tag": "v1.18.0",
"kind": "minor",
"published_at": "2023-03-15T02:35:32Z"
},
{
"tag": "v1.17.0",
"kind": "minor",
"published_at": "2023-02-16T04:44:43Z"
},
{
"tag": "v1.16.0",
"kind": "minor",
"published_at": "2023-01-20T21:56:23Z"
},
{
"tag": "v1.15.0",
"kind": "minor",
"published_at": "2022-12-12T22:13:26Z"
},
{
"tag": "v1.14.0",
"kind": "minor",
"published_at": "2022-11-17T02:38:38Z"
},
{
"tag": "v1.13.0",
"kind": "minor",
"published_at": "2022-10-20T01:18:34Z"
},
{
"tag": "v1.12.0",
"kind": "minor",
"published_at": "2022-10-11T01:36:49Z"
},
{
"tag": "v1.11.0",
"kind": "minor",
"published_at": "2022-09-22T20:47:42Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2022-09-02T20:30:50Z"
}
],
"recent_commits": [
{
"oid": "48c75c3e1fce15a5bbc459f3d2a8fac62a24400d",
"body": null,
"is_bot": false,
"headline": "Set Develocity `projectId` to \"openrewrite\" (#206)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-07-22T14:56:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b991f1806da9bc1dc3af6ff10f9eb3ef7678decd",
"body": "Co-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Move Develocity to community.develocity.cloud",
"author_name": "tim@moderne.io",
"author_login": "timtebeek",
"committed_at": "2026-07-22T12:10:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c86697479318faece748ae8708deeca329d79ec8",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#205)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-20T09:54:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86c1c77e1692dfa4794ebf0745e77ef0b2d6dc61",
"body": "Co-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "timtebeek@gmail.com",
"author_login": "timtebeek",
"committed_at": "2026-07-13T07:45:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc8eff011dc84be422911a1d7943256457b21848",
"body": "* Match composite action definitions in action recipes\n\nGitHub Actions can be defined in composite action files (action.yml),\nnot just workflow files. Recipes that match action references now also\napply to these definitions, keyed on the required action.yml/action.yaml\nfilename rather than the conve\n[…]\ntch both workflow files and action definitions\n- Broaden ChangeAction/ChangeActionVersion JsonPath to reach\n runs.steps[].uses in composite actions\n\n* Register IsGitHubActionDefinition in recipes.csv",
"is_bot": false,
"headline": "Match composite action definitions in GitHub Action recipes (#203)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-07-10T22:25:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "216ed3ee29b77d0876567d261132fb9e70127f4c",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#202)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-06T12:49:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e623b8d4c6efeae71909b962f200b5a5afa8f0ac",
"body": "* UpgradeOfficialGitHubActions recipe\n\n* Add UpgradeOfficialGitHubActions to best practices; reuse LatestRelease comparator\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": false,
"headline": "UpgradeOfficialGitHubActions recipe (#201)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2026-06-30T17:31:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d40ee5cf382de16f3f71de77eabca468de5174d",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#200)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-29T11:40:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4aeaaf42125da33c136515c519c8b220ef1a1362",
"body": "…pt-in oldSha (#199)\n\n* Skip SHA-pinned `uses:` via opt-in `oldSha` in ChangeAction(Version)\n\nChangeActionVersion and ChangeAction stripped deliberate commit-SHA pins when rewriting a `uses:` reference. Add an opt-in `oldSha` sentinel mirroring Docker ChangeFrom's `oldDigest`:\n\n- unset -> change reg\n[…]\nome\nbefore the replacement. Updates the positional constructor callers in\nChangeActionTest and the generated recipes.csv option order to match.\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": false,
"headline": "Preserve SHA-pinned actions in ChangeAction/ChangeActionVersion via o…",
"author_name": "Merlin Bögershausen",
"author_login": "MBoegers",
"committed_at": "2026-06-29T08:23:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d9f74ec11495695db6adbab341d7e11a8f52988d",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/yESIGzVB0?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-06-23T07:37:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b759f13957322e3baf2193250bc5e3baaef7ef7",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#198)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T12:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b83c324fe11e393cfc50917f5c82637f1e809af",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(ci): bump actions/checkout from 6 to 7 (#197)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-18T19:22:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e7fa82ae1eb6771402184c1fe16aaf1a0350f5a",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.xml.security.RemoveOwaspSuppressions?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZQ%3D%3D#defaults=W3sidmFsdWUiOiIyMDI2LTA2LTE3IiwibmFtZSI6ImN1dE9mZkRhdGUifV0=\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Remove out-of-date OWASP suppressions",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-06-17T17:36:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6f5a44c4f3c7f097b5e43d5ac60e9a781cf5eab",
"body": null,
"is_bot": false,
"headline": "Pin test references to immutable patch tags to stop SHA drift (#196)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-06-16T20:46:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a3b34e9e967dd8ae61c3f3097cf09810e7b764b",
"body": "* Update known action SHAs\n\n* Update expected SHA in PinGitHubActionsToShaTest after known-SHA refresh\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": true,
"headline": "Update known action SHAs (#192)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-16T20:27:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2949c06c5ae20fb38fff56b0ee15e020d328a838",
"body": null,
"is_bot": false,
"headline": "Refresh the tibdex app token recipe (#194)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2026-06-16T14:01:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bba8bfb77d4480d103429f90c1ce491c3e0dca74",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.AddToGitignore?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZQ%3D%3D#defaults=W3sidmFsdWUiOiIuY29udGV4dC8iLCJuYW1lIjoiZW50cmllcyJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "git-ignore .context/",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2026-06-09T11:30:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d72245f48fa570796f584a2e462db0dfc0b3169",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#190)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-01T11:53:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c99c738f8c8aae162f1646a8454e86949a2d0177",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZS9PcGVuUmV3cml0ZQ%3D%3D#defaults=W3sidmFsdWUiOiI5LjUuMSIsIm5hbWUiOiJ2ZXJzaW9uIn0seyJ2YWx1ZSI6ImJpbiIsIm5hbWUiOiJkaXN0cmlidXRpb24ifSx7InZhbHVlIjoiYmFmYzE0MWI2MTlhZDYzNTBmZDk3NWZjOTAzMTU2ZGQ1YzE1MTk5OGNjOGIwNThlOGMxMDQ0YWI1ZjdiMDMxZiIsIm5hbWUiOiJkaXN0cmlidXRpb25DaGVja3N1bSJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Update Gradle wrapper 9.5.1",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-28T19:51:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd8baafbba769c6dd17c90e9288e237733c80fca",
"body": null,
"is_bot": false,
"headline": "Regenerate recipes.csv (#189)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-28T18:33:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d11ba8a4b822932a09b8d72b50d937d946c22a6",
"body": "* Update known action SHAs\n\n* Update stale codeql-action SHA in PinGitHubActionsToShaTest\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": true,
"headline": "Update known action SHAs (#188)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-26T07:35:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "befa0b4a4c1b86871e7e90a6a24bdc7a2fd9876b",
"body": "* Update known action SHAs\n\n* Update stale codeql-action SHA in PinGitHubActionsToShaTest\n\nThe codeql-action v3 SHA was updated in a3b2f53, but the test still\nreferenced the old SHA.\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": true,
"headline": "Update known action SHAs (#187)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-18T10:54:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81bb47b6fcfe52410141c93fc3dc1a87c59a3f86",
"body": "* Update test fixture to current codeql-action SHA\n\n* Remove stray worktree event file",
"is_bot": false,
"headline": "Update stale codeql-action SHA in PinGitHubActionsToShaTest (#186)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-15T12:04:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "590580154990f591fb6ed13c12efa5a1ee534996",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-15T10:52:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79aac92cdc06f923b6459193177f441aa0397e22",
"body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Update known action SHAs (#185)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-11T10:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ddfcf484450380b8c7c0dde58c1f624966d0462",
"body": "…o skip pinning SHAs (#184)",
"is_bot": false,
"headline": "feat(github-actions): Add an option of trusted owners list in order t…",
"author_name": "Mustapha Belmokhtar",
"author_login": "BelmoMusta",
"committed_at": "2026-05-06T16:00:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88a5e12f6cbbc3f5bbcbf5b0cbc3f373dd17aaca",
"body": "* Update known action SHAs\n\n* Update expected SHA in PinGitHubActionsToShaTest to match refreshed known-action-shas\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
"is_bot": false,
"headline": "Update known action SHAs (#183)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-04T10:40:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24130884c565efaebbf224e54cf93614da488aa5",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v6)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(ci): bump actions/checkout from 4 to 6 (#180)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-04T09:44:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a4e07c4ae9a1383a3ec1e828f6447ef748fda03",
"body": "…#182)\n\n`grep` exits 1 when an action's tags don't match the `v<N>[.<N>[.<N>]]`\npattern (e.g. `bazel-contrib/setup-bazel` uses `release-X.Y.Z`), and\nunder `pipefail` that killed the scheduled job. Append `|| true` so the\nloop skips the action instead of aborting.",
"is_bot": false,
"headline": "Tolerate actions with no matching version tags in update-known-shas (…",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-05-04T08:50:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e8788ddf9d0160f34a4aa2592dc621f98af80bb",
"body": "…ce boundary (#181)",
"is_bot": false,
"headline": "Fix tag comment placement when pinned `uses:` is followed by a sequen…",
"author_name": "Steve Elliott",
"author_login": "steve-aom-elliott",
"committed_at": "2026-05-02T01:19:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc0963123d655e9448955433d034a0a585c89aa4",
"body": "* Add PinGitHubActionsToSha recipe\n\nNew recipe that replaces mutable tag/branch references in GitHub Actions\nuses: declarations with immutable commit SHAs. Includes static SHA\nmapping for common actions with GitHub API fallback, configurable\nofficial action pinning, and comprehensive test coverage.\n\n[…]\nnue to round-trip\nas just `<tag>` so Dependabot/Renovate keep recognizing them.\n\n---------\n\nCo-authored-by: Steve Elliott <steve.aom.elliott@gmail.com>\nCo-authored-by: Steve Elliott <steve@moderne.io>",
"is_bot": false,
"headline": "Add recipe to pin GitHub Actions to commit SHAs (#169)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-29T22:19:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8007d783776e3e8a45020f3ec42871aa726582ad",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.ExamplesExtractor?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Extract documentation examples from tests",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2026-04-21T07:04:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce477df6d970dcb38567cd9f364fa2a3e7f71bd3",
"body": null,
"is_bot": false,
"headline": "Add GitHubActionsBestPractices recipe (#178)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-11T20:59:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d9d26054b8995d36dc559d07a2c44eeaa6326c8",
"body": "- wrapper-validation: v3 → v5 (last version before removal in v6)\n- setup-gradle: v3 → v6 (latest)",
"is_bot": false,
"headline": "Update Gradle action versions to latest (#177)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-11T20:52:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c94188483d1b2efb201d77d296b4b085c59ef6de",
"body": "* Add PreferBlockStyleJobDependencies recipe (#129)\n\nConvert flow-style `needs` sequences to block-style in GitHub Actions\nworkflows when a job depends on more than one other job.\n\n* Use ListUtils.map instead of stream()",
"is_bot": false,
"headline": "Add PreferBlockStyleJobDependencies recipe (#176)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-11T20:51:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "692e30b87493a242c7e8d91461e0ae4e679d8a77",
"body": "Using `secrets: inherit` is a security anti-pattern that passes all\nsecrets to reusable workflows, violating the principle of least\nprivilege. This is flagged by security linters like zizmor.\n\nCloses #174",
"is_bot": false,
"headline": "Remove PreferSecretsInheritWorkflow recipe (#175)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-09T12:07:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ee019859e529fa2c54a0d38406eb1dee9835bc3",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-08T08:21:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c212b94bfbfde2d44531eb1878f9d8564c4a002b",
"body": "After openrewrite/rewrite#7291, JsonPathMatcher trailing wildcards now\nexpand to individual child entries instead of matching the parent mapping.\n\n- FindMissingTimeout: change `$.jobs.*.*` to `$.jobs.*` since wildcards\n now correctly resolve to job-level entries\n- RemoveWorkflowInputArgument: navigate one fewer parent level since\n `$.jobs.*` now matches at the Entry cursor directly",
"is_bot": false,
"headline": "Fix JsonPath matchers for rewrite-yaml wildcard expansion change (#173)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-07T19:22:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08137fc782a6309e55760deb2768917253759402",
"body": "The docs system generates source code links by stripping the `Recipe`\nsuffix from class names, producing broken 404 links for all 19 security\nrecipes. Rename them to match the convention used by the other recipes.\n\nFixes https://github.com/openrewrite/rewrite-github-actions/issues/171",
"is_bot": false,
"headline": "Drop `Recipe` suffix from security recipe class names (#172)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-04-06T21:25:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31cdfb8891a125c09e354136e81f68b503387588",
"body": "…workflow (#170)",
"is_bot": false,
"headline": "feat(github-actions): Enable adding runners to all the jobs within a …",
"author_name": "Mustapha Belmokhtar",
"author_login": "BelmoMusta",
"committed_at": "2026-03-28T22:11:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a990e73f5b807b52c4e4ca38f225ba1bfbf1f50",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-03-27T10:19:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ededa88f8109971401303e7c4a1afc66404d82c",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.ExamplesExtractor?organizationId=QUxML01vZGVybmU%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Extract documentation examples from tests",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2026-03-25T08:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4233286a2b540a8ea741dab5c743718b6a9cbdf",
"body": null,
"is_bot": false,
"headline": "feat(dependabot-cooldown): Add the ability to exclude ecosystems (#168)",
"author_name": "Mustapha Belmokhtar",
"author_login": "BelmoMusta",
"committed_at": "2026-03-24T20:36:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af573c2845209beb2b2b3c2da7951ad63a012a48",
"body": "Add @JsonCreator to the public constructor so Jackson can\ndeserialize AddCronTrigger, fixing all AddCronTriggerTest failures\nintroduced by the Lombok Best Practices commit.",
"is_bot": false,
"headline": "Fix AddCronTrigger Jackson deserialization (#167)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-03-24T20:18:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c51d7fe06815d6488aff5915a029f2e37c587707",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.migrate.lombok.LombokBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Lombok Best Practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-03-11T22:31:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "189ca858564bd59723b784fd1927578cbc4d22c9",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sidmFsdWUiOiI5LjMuMSIsIm5hbWUiOiJ2ZXJzaW9uIn0seyJ2YWx1ZSI6ImJpbiIsIm5hbWUiOiJkaXN0cmlidXRpb24ifSx7InZhbHVlIjpmYWxzZSwib\n[…]\nmTWlzc2luZyJ9LHsidmFsdWUiOiJiMjY2ZDVmZjZiOTBlYWRhNmRjM2IyMGNiMDkwZTM3MzEzMDJlNTUzYTI3YzVkM2U0ZGYxZjBkNzZiZWFmZjA2IiwibmFtZSI6ImRpc3RyaWJ1dGlvbkNoZWNrc3VtIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Update Gradle wrapper to 9.3.1",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-02-23T19:17:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f1c75ce7edc643b9d54d052d2fc437d2c93ed155",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.DeleteSourceFiles?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sibmFtZSI6ImZpbGVQYXR0ZXJuIiwidmFsdWUiOiIuZ2l0aHViL3dvcmtmbG93cy8qLXByLnltbCJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Delete files",
"author_name": "Jonathan Schnéider",
"author_login": "jkschneider",
"committed_at": "2026-02-09T13:52:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f5376909088db9cad56e49878f2db5710019803",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseEstimatedEffortPerOccurrenceField?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Replace `getEstimatedEffortPerOccurrence()` method with field",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-17T11:52:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51f283f953c0937ae1c246484d12d44168f93fd5",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseTagsField?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Replace `getTags()` method with field",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-16T17:36:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4ed9fc727d74c8fa058ba2ce79b3ec5c034710c",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sibmFtZSI6InZlcnNpb24iLCJ2YWx1ZSI6IjkuMy4wIn0seyJuYW1lIjoiZGlzdHJpYnV0aW9uIiwidmFsdWUiOiJiaW4ifSx7Im5hbWUiOiJhZGRJZk1pc\n[…]\n1ZSI6ZmFsc2V9LHsibmFtZSI6ImRpc3RyaWJ1dGlvbkNoZWNrc3VtIiwidmFsdWUiOiIwZDU4NWY2OWRhMDkxZmM1YjJiZWNlZDg3N2ZlYWI1NWEzMDY0ZDQzYjhhMWQ0NmFlYjA3OTk2YjA5MTVlMGUwIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Update Gradle wrapper to 9.3.0",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-16T12:40:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7bd4201e61a108018a4a5ce289823b8ed09a885f",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/VUxszwdBH?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Replace `Arrays.asList` with `List.of` in tests",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-15T11:09:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80040caa3cef2d568b38e14309d46e5a4a3f2c67",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseDisplayNameAndDescriptionFields?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Replace `getDisplayName()` and `getDescription()` methods with fields",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-14T12:44:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "229ae8898e3fa0f27b10d441f73d3df3bd3ecdbb",
"body": "… (#165)\n\n* Replace `getDisplayName()` and `getDescription()` methods with fields\n\nUse this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseDisplayNameAndDescriptionFields?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <\n[…]\n41898282+github-actions[bot]@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Moderne <team@moderne.io>\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": false,
"headline": "Replace `getDisplayName()` and `getDescription()` methods with fields…",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2026-01-13T10:31:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba25156df4a3fa0c62e5e60633ac4ea8d31f91f0",
"body": null,
"is_bot": false,
"headline": "Generate a recipes.csv for the recipes defined in this repository",
"author_name": "Jonathan Schneider",
"author_login": "jkschneider",
"committed_at": "2025-12-25T19:00:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a10901ab03a0a5cd1bf582a44fc5fb533123685",
"body": "* Allow to update nested actions\n\n* `ChangeValue` does not support wildcards in replacement pattern\n\n* Address code suggestions\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": false,
"headline": "Allow updating multiple actions using a wildcard pattern (#164)",
"author_name": "Willem Jan Glerum",
"author_login": "wjglerum",
"committed_at": "2025-12-16T22:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfc0aac390722ae703dbe6287ea171dc2ba691cd",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-11-27T09:17:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c648c49913ff5d7f6db58d9d4d495c3ab2519033",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sidmFsdWUiOiI5LjIuMSIsIm5hbWUiOiJ2ZXJzaW9uIn0seyJ2YWx1ZSI6ImJpbiIsIm5hbWUiOiJkaXN0cmlidXRpb24ifSx7InZhbHVlIjpmYWxzZSwibmFtZSI6ImFkZElmTWlzc2luZyJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Gradle wrapper 9.2.1",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-11-25T18:53:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "867a35820790426835dd02e1a12768b694634d3f",
"body": "* Add .worktrees/ to .gitignore\n\nPreparing to use git worktrees for isolated feature development.\n\n* Add recipe to configure Dependabot cooldown periods\n\nAdds AddDependabotCooldown recipe to insert cooldown configuration into\ndependabot.yml files. Cooldowns delay adoption of newly published dependen\n[…]\nnd\ncomprehensive test coverage (10 tests).\n\n* Override `validate` instead of doing that in `getVisitor`\n\n* Only compose cooldown yaml when used\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": false,
"headline": "Add recipe to configure Dependabot cooldown periods (#162)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-11-25T12:37:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e068ad48fb643f4edc646f8a63b4a5dc2df3de84",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-11-12T09:12:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88ceea206d4b144578a63d8fd14e89c8e0273ce9",
"body": "* Allow both `.yml` and `.yaml` for GitHub workflow files\n\n* Extract a named precondition\n\n* Organize imports\n\n* Override `getVisitor` instead of `getRecipeList`\n\n* Do not mention path in description\n\n* Remove unused imports and update example to use .yaml extension\n\nApplied best practice recipes th\n[…]\ncom/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n* Test precondition separately\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Allow to rewrite both `.yml` and `.yaml` GitHub workflow files (#159)",
"author_name": "Willem Jan Glerum",
"author_login": "wjglerum",
"committed_at": "2025-11-10T17:49:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d26aad0ff4db9d77c22c1fc202ae00ea0bf7e486",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/Sh3Bg6DMd?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Gradle 9.2.0 (#158)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-29T21:01:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab2dfd599f40aa68795bcfc78d24ea35f9939ac6",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/FHYMFao9c?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Gradle 9.1.0 on Java 25 (#157)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-28T16:47:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8008dbb532ce70ec2d6978ee2790725b82cf3883",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices (#156)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-23T09:29:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b23cbd4a26a72a8ad85688322457e0508ecdb601",
"body": "Implements a declarative OpenRewrite recipe to automate migration\nfrom astral-sh/setup-uv@v6 to v7, handling breaking changes introduced\nin the v7.0.0 release.\n\nChanges:\n- Updates action version from v6 to v7\n- Removes deprecated server-url input (replaced by manifest-file in v7)\n- Preserves all oth\n[…]\n uses composition of existing ChangeActionVersion and\nDeleteKey recipes for a clean, maintainable implementation.\n\nFixes breaking changes from https://github.com/astral-sh/setup-uv/releases/tag/v7.0.0",
"is_bot": false,
"headline": "feat: add recipe to migrate astral-sh/setup-uv from v6 to v7 (#155)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-10-22T20:18:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6fec7fa095fff531e3953d01d3474dc2a825e461",
"body": null,
"is_bot": false,
"headline": "Fix recipe validation issue",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-20T09:27:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52cd6c71bc01a252b9fe051330323408eb7b6ed2",
"body": null,
"is_bot": false,
"headline": "Update suppressions (#153)",
"author_name": "Laurens Westerlaken",
"author_login": null,
"committed_at": "2025-10-15T10:07:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2baa6388d70fbcc081600be446094ce2a748d51",
"body": "* Refactor security recipes to use YamlHelper utility\n\nAdd YamlHelper utility class with common YAML LST traversal patterns and refactor 7 security recipes to use it, eliminating ~60-80 lines of repetitive instanceof checks and improving code consistency.\n\nChanges:\n- Add YamlHelper utility class wit\n[…]\n\n* Add @Nullable annotations to YamlHelper methods\n\n* Inline method used once, and reduce visibility\n\n* Don't extract a method used once so far\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
"is_bot": false,
"headline": "Refactor security recipes with YamlHelper utility (#152)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-10-11T12:37:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "310f94487434871a8b5ea883a728961e76c0653b",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Update recipe documentation examples (#151)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-04T11:19:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ed538d7f75f0fa0d9a08a1b5b16d9b5d56e9f96",
"body": "…-github-app-token (#150)\n\nAdds a new declarative recipe that migrates from tibdex/github-app-token@v2\nto the official actions/create-github-app-token@v2, updates parameter names\nfrom snake_case to kebab-case, and adds the required owner parameter.",
"is_bot": false,
"headline": "feat: add recipe to migrate tibdex/github-app-token to actions/create…",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-10-01T16:05:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05e3bd33a79cb0322d197244ca713fdfa980b87c",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices (#149)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-10-01T10:06:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ec60241e87643f327b51bb61fd0eba9c8152a73",
"body": "… (#148)\n\n* fix: no update non-python cache keys\n\n* refactor: update to more idiomatic Rewrite recipe\n\n* feat: add `actions/setup-node` node version recipe\n\nUpdate security recipes to use more idiomatic means for yaml traversal",
"is_bot": false,
"headline": "refactor: fix invalid `uv` change and add `actions/setup-node` recipe…",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-24T23:40:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d69cf5f324b1e8d4a8b3708d4875c29eef024dbc",
"body": "Add SetupPythonToUv recipe that migrates workflows from actions/setup-python\nto astral-sh/setup-uv for faster Python environment setup.",
"is_bot": false,
"headline": "feat: add OpenRewrite recipe to convert setup-python to UV action (#147)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-23T17:38:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4b6bc9fe2d4b2691dba17a13db2122d8175db13",
"body": "* Apply best practices\n\n* Apply formatter\n\n* Add package-info.java\n\n* Sort security recipes\n\n* Fix ForbiddenUsesRecipe",
"is_bot": false,
"headline": "Apply best practices (#146)",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-09-23T10:21:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8714b3fc6892f06219ff5478457e729d803bf60",
"body": null,
"is_bot": false,
"headline": "feat: add new recipes to security insights",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-23T03:34:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "806e8bff99767733adf0108d9d1cc29a4f25d091",
"body": null,
"is_bot": false,
"headline": "feat: add more GitHub Action security-centric find recipes (#145)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-23T03:28:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5182cc8587a57251c3ff6b396c9188af8668bc59",
"body": null,
"is_bot": false,
"headline": "feat: additional GitHub Action security insight recipes (#144)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-22T23:59:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7307df24411686a1c73695bddac5ab996467513c",
"body": null,
"is_bot": false,
"headline": "feat: check for excessive permissions in GA (#143)",
"author_name": "Scott Jungling",
"author_login": "sjungling",
"committed_at": "2025-09-22T23:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11fd2bf1f2fce87e6ac05bc417cf06825dc6f90e",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-08-09T17:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "849b0c7e89f6fddee40406ae039e69d498282255",
"body": "* Implementation stub\n\n* Simplify implementation\n\n* Removing with: if no arguments\n\n* Apply suggestions from code review\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>\n\n* Apply suggestions from code review\n\nCo-authored-by: github-actions[bot] <41898282+g\n[…]\nions[bot]@users.noreply.github.com>\n\n* Import order\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": false,
"headline": "`RemoveWorkflowInputArgument` recipe (#139)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-08T13:21:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "48aa42592a0c746407fcc67e833edcaf583a420f",
"body": "…ames (#141)\n\n* Regex to allow hyphens\n\n* Adapting tests to cover hyphens\n\n* Digits in tests",
"is_bot": false,
"headline": "`RemoveUnusedWorkflowDispatchInputs` - amend the detection of input n…",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-08T05:50:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0021b35d1768dbafa652f630d8a90f0206c0dcd5",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.RenameFile?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl#defaults%3DW3sidmFsdWUiOiIuY2xhdWRlL3NldHRpbmdzLmxvY2FsLmpzb24iLCJuYW1lIjoiZmlsZU1hdGNoZXIifSx7InZhbHVlIjoic2V0dGluZ3MuanNvbiIsIm5hbWUiOiJmaWxlTmFtZSJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "rename settings.local.json to settings.json (#140)",
"author_name": "Kyle Scully",
"author_login": "zieka",
"committed_at": "2025-08-05T17:52:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faa88b0d8945336764c6c2dddd23a447eef0cffc",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "OpenRewrite recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-08-05T09:51:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3eaa7d72f99aed0c9740eb8a67f67240d2789abc",
"body": null,
"is_bot": false,
"headline": "Safety check against empty workflow_dispatch (#138)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-01T12:22:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d98f92bea3bc5d1c7eeb815dd9105bf87734df1",
"body": null,
"is_bot": false,
"headline": "Handling alternate syntax for inputs (#137)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-01T12:02:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1583a469d29ee840179959f3992abfc8709404f6",
"body": "* Basic impl\n\n* Regexp as constant\n\n* Use JsonPathMatcher\n\n* Simplify removal\n\n* Merge test cases\n\n* Simplify usage detection\n\n* Merge two visitors\n\n* Test case for multiple inputs used\n\n* Fix handling of all inputs removed\n\n* Code suggestions",
"is_bot": false,
"headline": "`RemoveUnusedWorkflowDispatchInputs` recipe (#136)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-01T11:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e5f22b85943f9f5c65aa0eeaad372b853986f1a",
"body": null,
"is_bot": false,
"headline": "Fixing markdown for link (#135)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-08-01T05:44:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e02235ceaf1a49549765d9aec8616bf020cbae51",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/m9HsHwu2Z?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Static imports for Collections and Collectors",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-07-30T21:20:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "379fdbe4351be2444058b663603e7cfda4d14874",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: OpenRewrite Recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-07-08T15:48:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfe8ac936d5e6f88c38d458e6d762a534f2baee3",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.staticanalysis.ReorderAnnotations?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Reorder annotations alphabetically",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-07-07T10:00:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30f6874ae5716bc11bab5f92bee2693754603d59",
"body": null,
"is_bot": false,
"headline": "ReplaceSecrets and ReplaceSecretKeys",
"author_name": "Jonathan Schneider",
"author_login": "jkschneider",
"committed_at": "2025-07-05T13:33:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22ce8b302d09c58acd9e6eba118df3a1673b62f1",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl#defaults%3DW3sidmFsdWUiOmZhbHNlLCJuYW1lIjoiYWRkSWZNaXNzaW5nIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Update Gradle wrapper",
"author_name": "Shannon Pamperl",
"author_login": "shanman190",
"committed_at": "2025-07-04T15:51:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59907b1f5cfb3943b4227e1ccc20b170ad09ff8b",
"body": "Use this link to re-run the recipe: https://app.moderne.io/builder/zYwEKw0Gm?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: org.openrewrite.mavencentral (#133)",
"author_name": "Laurens Westerlaken",
"author_login": null,
"committed_at": "2025-07-02T12:09:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed1d671fd7af73a15e470088169d98d27219fa88",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sidmFsdWUiOiJiaW4iLCJuYW1lIjoiZGlzdHJpYnV0aW9uIn0seyJ2YWx1ZSI6IkZhbHNlIiwibmFtZSI6ImFkZElmTWlzc2luZyJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Update Gradle wrapper",
"author_name": "Shannon Pamperl",
"author_login": "shanman190",
"committed_at": "2025-06-05T15:10:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be068ba3c4ba85c486b0e6b5c43f0240b781f592",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sibmFtZSI6ImRpc3RyaWJ1dGlvbiIsInZhbHVlIjoiYmluIn0seyJuYW1lIjoiYWRkSWZNaXNzaW5nIiwidmFsdWUiOiJGYWxzZSJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Update Gradle wrapper",
"author_name": "Shannon Pamperl",
"author_login": "shanman190",
"committed_at": "2025-05-22T17:26:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bd4a35b685b3bf35c6e544f5138c8be1bf098cc",
"body": null,
"is_bot": false,
"headline": "Added symlink to license, added link to licensing page",
"author_name": "Johan Kragt",
"author_login": "JohannisK",
"committed_at": "2025-05-01T14:10:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e81514028566f11f3d3f4f9c28feb7a802f5ff74",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: OpenRewrite Recipe best practices",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-04-26T21:33:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ad29f4dc2f3704ab9ae70cbd3efe97ba5c676d2",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sibmFtZSI6ImRpc3RyaWJ1dGlvbiIsInZhbHVlIjoiYmluIn0seyJuYW1lIjoiYWRkSWZNaXNzaW5nIiwidmFsdWUiOiJGYWxzZSJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Update Gradle wrapper",
"author_name": "Shannon Pamperl",
"author_login": "shanman190",
"committed_at": "2025-04-25T13:40:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fcdcf0ee59a864710cd44e0c8e04244f50cc790",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.text.CreateTextFile?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sidmFsdWUiOiItLS1cbm5hbWU6IGNpXG5cbm9uOlxuICBwdXNoOlxuICAgIGJyYW5jaGVzOlxuICAgICAgLSBtYWluXG4gICAgdGFncy1pZ25vcmU6XG4gICAgICAtIFwiKlwiXG4gIHB1bGxfcmVx\n[…]\nDb250ZW50cyJ9LHsidmFsdWUiOiIuZ2l0aHViL3dvcmtmbG93cy9jaS55bWwiLCJuYW1lIjoicmVsYXRpdmVGaWxlTmFtZSJ9LHsidmFsdWUiOiJUcnVlIiwibmFtZSI6Im92ZXJ3cml0ZUV4aXN0aW5nIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "Adding OPS_GITHUB_ACTIONS_WEBHOOK for Slack notification of failures",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-04-23T07:27:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc7233103861b913a9dbd1c61b87b14de7f6f81d",
"body": null,
"is_bot": false,
"headline": "Fix MergeYaml constructor calls (#131)",
"author_name": "Greg Oledzki",
"author_login": "greg-at-moderne",
"committed_at": "2025-04-23T06:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86dc7d0f602c5db4d71de8a8f9b3294cc9981df4",
"body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.ExamplesExtractor?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
"is_bot": false,
"headline": "refactor: Extract documentation examples from tests",
"author_name": "Tim te Beek",
"author_login": "timtebeek",
"committed_at": "2025-04-21T20:31:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 87,
"latest_release_at": "2026-07-14T05:22:32Z",
"latest_release_tag": "v3.27.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 36,
"days_since_latest_release": 11,
"mean_days_between_releases": 12.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 5,
"stars": 1,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2025-03-10",
"count": 1
},
{
"date": "2025-10-26",
"count": 1
},
{
"date": "2025-11-10",
"count": 1
},
{
"date": "2026-03-22",
"count": 1
},
{
"date": "2026-04-28",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 51
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"build.gradle.kts"
],
"largest_source_bytes": 28457,
"source_files_sampled": 100,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"build.gradle.kts"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 122,
"open_issues": 50,
"closed_ratio": 0.315,
"closed_issues": 23,
"closed_unmerged_prs": 10
},
"bus_factor": 2,
"bot_contributors": 3,
"top_contributors": [
{
"type": "User",
"login": "timtebeek",
"commits": 99,
"avatar_url": "https://avatars.githubusercontent.com/u/1027334?v=4"
},
{
"type": "User",
"login": "jkschneider",
"commits": 33,
"avatar_url": "https://avatars.githubusercontent.com/u/1697736?v=4"
},
{
"type": "User",
"login": "aegershman",
"commits": 31,
"avatar_url": "https://avatars.githubusercontent.com/u/5619476?v=4"
},
{
"type": "User",
"login": "greg-at-moderne",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/192309513?v=4"
},
{
"type": "User",
"login": "shanman190",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/1707798?v=4"
},
{
"type": "User",
"login": "sjungling",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/8387?v=4"
},
{
"type": "User",
"login": "yeikel",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/8935151?v=4"
},
{
"type": "User",
"login": "sambsnyd",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/8549033?v=4"
},
{
"type": "User",
"login": "knutwannheden",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/408765?v=4"
},
{
"type": "User",
"login": "natedanner",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/882752?v=4"
}
],
"contributors_sampled": 28,
"top_contributor_share": 0.381
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"publish.yml",
"repository-backup.yml",
"stale.yml",
"update-known-shas.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 9,
"reason": "22 out of 23 merged PRs checked by a CI test -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 4/19 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 9 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "48c75c3e1fce15a5bbc459f3d2a8fac62a24400d",
"ran_at": "2026-07-25T17:13:37Z",
"aggregate_score": 5.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T19:22:11Z",
"oldest_open_prs": [
{
"number": 204,
"created_at": "2026-07-13T09:31:25Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-22T14:56:05Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 7,
"created_at": "2021-10-12T20:45:28Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 10,
"created_at": "2021-10-16T19:29:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 11,
"created_at": "2021-11-03T20:16:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 20,
"created_at": "2023-01-05T09:23:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 26,
"created_at": "2023-01-26T19:01:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 27,
"created_at": "2023-01-26T19:03:49Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 28,
"created_at": "2023-01-26T19:10:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 30,
"created_at": "2023-01-26T20:21:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 32,
"created_at": "2023-01-28T23:34:48Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 33,
"created_at": "2023-01-28T23:48:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 34,
"created_at": "2023-01-28T23:51:46Z",
"last_comment_at": "2024-08-21T07:50:01Z",
"last_comment_author": "timtebeek"
},
{
"number": 35,
"created_at": "2023-01-28T23:53:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 36,
"created_at": "2023-01-29T09:08:25Z",
"last_comment_at": "2023-01-29T10:33:20Z",
"last_comment_author": "timtebeek"
},
{
"number": 40,
"created_at": "2023-02-05T06:00:35Z",
"last_comment_at": "2023-06-02T16:21:49Z",
"last_comment_author": "timtebeek"
},
{
"number": 41,
"created_at": "2023-02-05T06:07:35Z",
"last_comment_at": "2023-06-02T16:20:20Z",
"last_comment_author": "timtebeek"
},
{
"number": 42,
"created_at": "2023-02-07T22:38:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 46,
"created_at": "2023-02-11T04:29:33Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 47,
"created_at": "2023-02-11T23:52:37Z",
"last_comment_at": "2023-02-13T09:06:40Z",
"last_comment_author": "timtebeek"
},
{
"number": 48,
"created_at": "2023-02-13T04:38:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 49,
"created_at": "2023-02-21T20:12:56Z",
"last_comment_at": "2023-02-22T10:33:51Z",
"last_comment_author": "timtebeek"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/openrewrite/rewrite-github-actions",
"host": "github.com",
"name": "rewrite-github-actions",
"owner": "openrewrite"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"security": 52,
"vitality": 93,
"community": 37,
"governance": 64,
"engineering": 63
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 93,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 88,
"inputs": {
"commits_last_year": 87,
"human_commit_share": 0.89,
"days_since_last_push": 3,
"active_weeks_last_year": 36
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "36/52 weeks with commits",
"points": 24.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 36
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "87 commits in the last year",
"points": 17.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 87
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v3.27.0",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 12.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~12.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 12.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 3,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 3 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 3
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 37,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 7,
"inputs": {
"forks": 5,
"stars": 1,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "1 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 1
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 28,
"top_contributor_share": 0.381
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 38% of commits",
"points": 13.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 38
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "28 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 28
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 9 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"merged_prs": 122,
"open_issues": 50,
"closed_issues": 23,
"issue_closed_ratio": 0.315,
"closed_unmerged_prs": 10
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "32% of issues closed",
"points": 14.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 32
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "122/132 decided PRs merged",
"points": 35.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 122,
"decided": 132
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 4/19 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"followers": 984,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "openrewrite",
"public_repos": 75,
"account_age_days": 2341
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "984 followers of openrewrite",
"points": 21.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 984,
"login": "openrewrite"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "75 public repos, account ~6 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 75
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 63,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "22 out of 23 merged PRs checked by a CI test -- score normalized to 9",
"points": 18,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [
"openrewrite",
"openrewrite-recipes"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "2 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 2
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 52,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 52,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "22 out of 23 merged PRs checked by a CI test -- score normalized to 9",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 4/19 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 9 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.921,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "82 of 89 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 82,
"sampled": 89
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [
"build.gradle.kts"
],
"dependency_bot_commit_share": 0.02
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "build.gradle.kts (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "build.gradle.kts"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Java (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "2 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 28457,
"source_files_sampled": 100,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/100 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 100,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T17:14:00.764938Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/openrewrite/rewrite-github-actions.svg",
"full_name": "openrewrite/rewrite-github-actions",
"license_state": "custom",
"license_spdx": null
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with openrewrite/rewrite-github-actions. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
