Public recordCritical
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-28 21:16 UTC
oroinc / OroHealthCheckBundle
oroinc/OroHealthCheckBundle holds a health index of 19 out of 100, placing it in the Critical band. It scores highest on Sustainability & Governance (59/100) and lowest on Security (14/100). It was last updated today. 3 contributors account for most of its recent work.
19
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
19
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At risk ceiling of 49.
Ownership
Oro, Inc.Organization
121 followers104 public repossince Apr 2013
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| Packagist | oro/health-check-bundle | 7.0.1 | 5,896 | 85 | 95 days ago | orohealth-check |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
46
Development activity
47At risk
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 2.8/36 | Commit cadence — 4/52 weeks with commits |
| 7/18 | Commit volume — 5 commits in the last year |
| 1/10 | OpenSSF Scorecard: Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
Inputs used
| commits_last_year | 5 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 4 |
Release discipline
44At risk
How it's scored
| 27/27 | Ships releases — 1 releases published |
| 0/36 | Release recency — latest release 2,960 days ago |
| 12.6/27 | Release cadence — cadence unknown (single release) |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 1 |
| latest_release_tag | 2.3.0 |
| releases_from_tags | no |
| days_since_latest_release | 2,960 |
| mean_days_between_releases | — |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
32
Popularity & adoption
10Critical
How it's scored
| 4.9/60 | Stars — 3 stars |
| 0/25 | Forks — 0 forks |
| 5.3/15 | Watchers — 10 watchers |
Inputs used
| forks | 0 |
| stars | 3 |
| watchers | 10 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
44At risk
How it's scored
| 22.5/22.5 | README |
| 16.9/22.5 | License — license file present, not a recognized license |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
50Moderate
How it's scored
| 50.3/80 | Monthly downloads — 5,896 downloads/month across packagist |
| 0/20 | Registry dependents — 0 packages depend on it |
Inputs used
| packages | oro/health-check-bundle |
| dependents | 0 |
| ecosystems | packagist |
| total_downloads | 254,047 |
| monthly_downloads | 5,896 |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
59
How it's scored
| 36/54 | Bus factor — 3 contributor(s) cover half of all commits |
| 15.5/22.5 | Commit distribution — top contributor authored 31% of commits |
| 13.5/13.5 | Contributor breadth — 18 contributors |
| 6/10 | OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
Inputs used
| bus_factor | 3 |
| contributors_sampled | 18 |
| top_contributor_share | 0.31 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
70Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 15/25 | Owner reach — 121 followers of oroinc |
| 25/25 | Track record — 104 public repos, account ~13 yr old |
Inputs used
| followers | 121 |
| owner_type | Organization |
| is_verified | — |
| owner_login | oroinc |
| public_repos | 104 |
| account_age_days | 4,851 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on packagist |
| 35/35 | Publish recency — latest publish 95 days ago |
| 20/20 | Version history — 85 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | oro/health-check-bundle |
| ecosystems | packagist |
| any_deprecated | no |
| min_days_since_publish | 95 |
Engineering Quality
Are baseline engineering and documentation practices in place?
30
Engineering practices
30At risk
How it's scored
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
30At risk
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
14
Security posture
14Critical
Jurisdiction risk alert
High-risk jurisdiction exposure detected
1 top contributor profilesRussiaSecurity and overall rating: At risk ceiling
Based on self-published public profile locations. This governance signal does not determine nationality, citizenship, intent, sanctions status, or individual trustworthiness.
How jurisdiction exposure is assessedHow it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 0/10 | Dangerous-Workflow — no data |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | License — license file detected |
| 0.8/7.5 | Maintained — 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 2.9 |
| high_risk_jurisdiction_cap | 49 |
| high_risk_jurisdiction_multiplier | 50 |
| security_posture_after_multiplier | 14 |
| security_posture_before_jurisdiction | 29 |
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier and gives Security posture an At risk ceiling of 49.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
35
Agent context & guidance
39At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 39.2/40 | Legible commit history — 61 of 83 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.735 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
24Critical
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 0/11 | Static type checking |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 83 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
Code legibility for models
55Moderate
How it's scored
| 0/45 | Type-checkable code — PHP without a type-check config |
| 55/55 | Manageable file sizes — 0/46 source files over 60KB |
Inputs used
| primary_language | PHP |
| largest_source_bytes | 5,113 |
| source_files_sampled | 46 |
| oversized_source_files | 0 |
Key facts
3GitHub stars
18contributors
5commits, last 12 months
0days since last push
1releases
3bus factor
0open issues
Packagistpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
More detail
OpenSSF Scorecard 2.9 / 10
2.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| n/a | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 1 | Maintained | 2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1 |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 2
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Packagist | oro/platform-enterprise | 7.1.* | composer.json |
| Packagist | liip/monitor-bundle | 2.* | composer.json |
All dependencies 2
Full resolved dependency set from the GitHub dependency graph: 2 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Packagist | liip/monitor-bundle | — | direct |
| Packagist | oro/platform-enterprise | — | direct |
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 163,
"has_wiki": false,
"homepage": null,
"languages": {
"PHP": 73457,
"Gherkin": 1214
},
"pushed_at": "2026-07-28T21:07:16Z",
"created_at": "2018-06-14T14:40:50Z",
"owner_type": "Organization",
"updated_at": "2026-07-28T21:08:17Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": "NOASSERTION",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": "https://www.oroinc.com/",
"name": "Oro, Inc.",
"type": "Organization",
"login": "oroinc",
"company": null,
"location": "Los Angeles",
"followers": 121,
"avatar_url": "https://avatars.githubusercontent.com/u/4165718?v=4",
"created_at": "2013-04-15T23:39:58Z",
"is_verified": null,
"public_repos": 104,
"account_age_days": 4851
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "2.3.0",
"kind": "minor",
"published_at": "2018-06-20T10:10:40Z"
}
],
"recent_commits": [
{
"oid": "894c5d3d682529f9f386d9c77d5c9c06077316b0",
"body": "- Bump version to 7.1\n- Remove orocrm-magento1-connector for crm-demo\n- Change Magento demo data with general\n- Drop dead Magento package exclusions from the static analysis runners\n (.jenkins/php_code_style_standalone.sh, docker-build/scripts/test_phpcs.sh,\n test_phpmd.sh, test_php-cs-fixer.sh): \n[…]\ntes.php and preprocess-annotations.php.\n- Align ai-smart-agent branch-alias with the other packages: 7.1.x-dev => 7.1-dev.\n- Remove unused getReportReference() from the B2C demo data EntityReferences.",
"is_bot": false,
"headline": "BB-27086: Set application version in master to 7.1 (#46136)",
"author_name": "Victor Tihonchuk",
"author_login": "advocat",
"committed_at": "2026-07-28T16:33:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3f52bdcb931c7f6635ee8aa5bb1fe0a1dd5be2cc",
"body": "…n (#45150)",
"is_bot": false,
"headline": "BAP-23348: Improve logging for SMTP/IMAP/LDAP connection configuratio…",
"author_name": "Vova Soroka",
"author_login": "vsoroka",
"committed_at": "2026-05-29T18:12:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "560f892b8082d361a81a97aa4ff27167f53cf908",
"body": "… standard (#45005)",
"is_bot": false,
"headline": "BAP-23363: Fix test classes that do not comply with PSR-4 autoloading…",
"author_name": "Vova Soroka",
"author_login": "vsoroka",
"committed_at": "2026-04-24T00:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "205b41516889a3b786902b84d3d0bffcdf01d2a2",
"body": null,
"is_bot": false,
"headline": "BB-25349: Set application version in master to 7.0 (#43720)",
"author_name": "Andrii Yatsenko",
"author_login": "anyt",
"committed_at": "2026-01-15T07:48:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cb8552b17f1c2dddefe9c7bfebe25aa46c76756",
"body": "- Added missing class PHPDoc comments",
"is_bot": false,
"headline": "BAP-23252: Upgrade PHP_CodeSniffer and PHP CS Fixer",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2026-01-11T23:50:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa5a9fce24b04975e255059ab748eaf495e8a853",
"body": "- Misc PSR-2 and PSR-12 code style fixes:\n - PSR12.Traits.UseDeclaration\n - Squiz.Functions.FunctionDeclarationArgumentSpacing\n - PSR12.Operators.OperatorSpacing\n - PSR2.Classes.PropertyDeclaration\n - PSR12.Operators.OperatorSpacing\n - PSR12.Classes.AnonClassDeclaration\n - duplicated namespace\n - multiline control structures\n - ignore valid deprecation comments",
"is_bot": false,
"headline": "BAP-23252: Upgrade PHP_CodeSniffer and PHP CS Fixer",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2026-01-11T23:50:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b1569747a58d800bf34a1b7d3143777ac00426b",
"body": "- BB-25086: Invoice Entity\n- BB-25089: Pay Invoice\n- BB-25307: Pay Invoice - Changelog & documentation\n- BB-24108: Invoice PDF\n- BB-25274: Invoice PDF - Changelog & documentation\n- BB-25559: Data Audit for JSON Fields\n- BB-25449: Seller Info Configuration\n- BB-25616: Invoice Number Generator\n- BB-25\n[…]\nTo and ShipTo\n- BB-25771: Invoice Status\n- BB-25653: Entity activities are duplicated when entity configs are refreshed during install\n- BB-25773: Invoice Email Template\n- BB-25772: Invoice Line Items",
"is_bot": false,
"headline": "BB-24102: Invoices (#40770)",
"author_name": "Yefim Yevtushenko",
"author_login": "webevt",
"committed_at": "2025-07-18T10:19:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "79e46dcc5b0d061dec63c7fc5e829bcc51c7899f",
"body": null,
"is_bot": false,
"headline": "BAP-22853 Improve app healthchecks (#40635)",
"author_name": "timofiyprisyazhnyuk",
"author_login": "timofiyprisyazhnyuk",
"committed_at": "2025-06-19T10:22:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b9ed63672b5c647514bb00746961f9429320972",
"body": "… (#39443)\n\n---------\n\nCo-authored-by: timofiyprisyazhnyuk <timofiyprisyazhnyuk@gmail.com>",
"is_bot": false,
"headline": "BAP-22494 Parameter web_backend_prefix should not be used in platform…",
"author_name": "Maksym Maksymenko",
"author_login": "fubolg",
"committed_at": "2025-03-31T08:15:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01ab825633a7ecd6b89a4539fcdda173a48d3985",
"body": "…s (#40551)\n\n* BB-25262 Build to 6.0 failing because of old classes with PSR-4 errors\n- updated dev.json files to proper Tests folder exclusion rule\n- updated composer.json files to proper Tests folder exclusion rule\n- appended composer.json\n\n* Updated dev.locks\n| Production Changes | From \n[…]\nser | 2.0.0 | 2.1.0 | [...](https://github.com/phpstan/phpdoc-parser/compare/2.0.0...2.1.0) |\n\n---------\n\nCo-authored-by: orocrmdeployer <orocrmdeployer@oroinc.com>",
"is_bot": false,
"headline": "BB-25262 Build to 6.0 failing because of old classes with PSR-4 error…",
"author_name": "Vitalii Yeromenko",
"author_login": "vetal-e",
"committed_at": "2025-02-20T13:00:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4fcce2f3393d8bf80b9d7d839478c9fb7973bed5",
"body": null,
"is_bot": false,
"headline": "BAP-22912: Fix PHP 8.4 deprecation messages",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2025-01-31T01:37:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72146957f7f36ddda8eac8e1227b17c4c52c27ce",
"body": null,
"is_bot": false,
"headline": "BAP-22912: Fix PHP 8.4 deprecation messages",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2025-01-30T04:48:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36376edede817bd314608eb2568d41425ebdcd48",
"body": "* BB-24783: Update license files\r\n- updated copyright year, domains, license texts and references in applications and packages\r\n\r\n* Updated dev.locks\r\n\r\n| Production Changes | From | To | Compare \n[…]\n(https://github.com/schmittjoh/serializer/compare/3.31.0...3.31.1) |\r\n\r\n---------\r\n\r\nCo-authored-by: orocrmdeployer <orocrmdeployer@oroinc.com>\r\nCo-authored-by: Julia Khrysieva <ikhrysieva@oroinc.com>",
"is_bot": false,
"headline": "BB-24783: Update license files (#39644)",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2024-11-05T10:48:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5ced04b7b652389d5be893dfc6c9f35822b980bb",
"body": "…#39344)\n\n- Updated php-cs-fixer config\r\n- Applied new cs rules\r\n- Deleted annotations like \"{@inheritDoc}\"\r\n- Rector AddOverrideAttributeToOverriddenMethodsRector rule applied\r\n- Updated documentation",
"is_bot": false,
"headline": "BAP-22772: Use override attribute instead of inheritdoc annotations (…",
"author_name": "Oleksandr Protsiuk",
"author_login": "OleksandrProtsiuk",
"committed_at": "2024-09-24T12:20:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6e032fc5cb18878e6a9e43e4c6dc996765b92b9",
"body": "…ly classes) (#38494)",
"is_bot": false,
"headline": "BAP-22645: Update CS tooling to support new PHP features (e.g. readon…",
"author_name": "Oleksandr Protsiuk",
"author_login": "OleksandrProtsiuk",
"committed_at": "2024-06-04T10:28:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f0f790575af98d4f01e5d5668ba511afb4ab57c",
"body": null,
"is_bot": false,
"headline": "BAP-22638: Fix using cyrillic \"с\" instead of latin \"c\" (#38389)",
"author_name": "Vova Soroka",
"author_login": "vsoroka",
"committed_at": "2024-05-16T02:47:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9126e4b67521cfecc5286a6002b2c730073a395",
"body": "* tagging for Regular and Regression builds",
"is_bot": false,
"headline": "BB-19349: Review behat tests from regular build (#38295)",
"author_name": "Roman Kukla",
"author_login": "poman",
"committed_at": "2024-05-03T15:36:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c30857ecabd58a98fcd1f101b69c05ddcf1fd90",
"body": null,
"is_bot": false,
"headline": "BB-23821: Updated app version to 6.1 (#37996)",
"author_name": "Andrii Yatsenko",
"author_login": "anyt",
"committed_at": "2024-04-08T12:57:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "940f2a34fb87d4c47ef08598008e8f6918b376af",
"body": null,
"is_bot": false,
"headline": "BAP-22072: Health check page contains invalid information (#37461)",
"author_name": "Eugene Zibrov",
"author_login": "eugene-zibrov",
"committed_at": "2024-02-02T14:07:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8d43ab623a2a23f7ac991394348b31c39e7abd4",
"body": "- Migrated to Authenticator-based Security\r\n - Refactored all the authenticators to use new security architecture\r\n - Disabled all the custom authenticators\r\n - Refactoring + UserInterface replaced by AbstractUser\r\n - Added PULIC_ACCESS to open routes and added oro_security.access_contro\n[…]\nroinc.com>\r\nCo-authored-by: Zsombor Boldizsar-Zeik <zsombor.boldizsar.zeik@oroinc.com>\r\nCo-authored-by: Maksym Maksymenko <mmaksymenko@oroinc.com>\r\nCo-authored-by: Yevhenii Zhadan <yzhadan@oroinc.com>",
"is_bot": false,
"headline": "BAP-22237: Upgrade to Symfony 6.4 (#37219)",
"author_name": "Andrii Yatsenko",
"author_login": "anyt",
"committed_at": "2024-01-07T10:00:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "41a3f62d214e0761a71151628297ede3a4e0bb0f",
"body": "\r\nCo-authored-by: Viacheslav Dubrovskyi <vdubrovskyi@oroinc.com>",
"is_bot": false,
"headline": "BAP-22239: Move maintenance lock out of cache folder (#36411)",
"author_name": "Andrii Yatsenko",
"author_login": "anyt",
"committed_at": "2023-09-14T07:31:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3411da44b43ea9cd570c636bba35e826b44d348",
"body": "- switched oro/ packages to 6.0.* version",
"is_bot": false,
"headline": "BB-22921: 6.0.0 BETA (#36401)",
"author_name": "Andrii Yatsenko",
"author_login": "anyt",
"committed_at": "2023-09-12T10:20:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "621b51fa3dba070e1feb1212517da786bb4b1dd1",
"body": null,
"is_bot": false,
"headline": "BAP-22238: Use Symfony 6 return types (#36389)",
"author_name": "Andrii Yatsenko",
"author_login": "anyt",
"committed_at": "2023-09-11T18:55:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "560f795da11e49bc68ffd1f5f2dcf1d8e778ff0e",
"body": null,
"is_bot": false,
"headline": "BAP-22145: Redis healthchecks do not work (#36005)",
"author_name": "Eugene Zibrov",
"author_login": "eugene-zibrov",
"committed_at": "2023-07-13T08:09:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7b56a65cb11108f1d98e70a43599558e75d9c8e",
"body": "- added resolve of asterisk to application url\r\n- added logger and more verbosity to WampClient\r\n- fixed stream is not fully read because of buffering in tls connection\r\n- added ability to disable websocket server\r\n- added skip websocket healthcheck if it is not configured\r\n- removed websocket-related error from ExcludeLogByMessageHandler\r\n- added `user_agent` WS client parameter\r\n- updated documentation",
"is_bot": false,
"headline": "BAP-21789: websocket_frontend healthcheck is not working (#34541)",
"author_name": "Eugene Zibrov",
"author_login": "eugene-zibrov",
"committed_at": "2023-06-07T17:26:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d8c6ca0a5f394f39c0cece83072294ca646442e",
"body": "…t is configured\" fails when password is used (#35050)",
"is_bot": false,
"headline": "BAP-21893: HealthCheck \"Check if Elasticsearch is available in case i…",
"author_name": "ikhrysieva",
"author_login": "ikhrysieva",
"committed_at": "2023-03-24T12:36:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b6c8bb6a455ffb0c2db3ba7b449db350c46e6ee",
"body": "- add getSettings() method to Oro\\Bundle\\ConfigBundle\\DependencyInjection\\SettingsBuilder that simplifies loading of system settings into DIC in DI extension\r\n- refactor loading of system settings into DIC in DI extensions\r\n- add strict type to DI extensions\r\n- refactor unit tests for DI extensions",
"is_bot": false,
"headline": "BAP-21930: Refactor DI extensions for bundles (#35041)",
"author_name": "Vova Soroka",
"author_login": "vsoroka",
"committed_at": "2023-03-11T15:06:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbcde284bb6fb2854a55ca1c3e83917c9531720c",
"body": "…managing environment variables (#34720)\n\n- added .env-app files support and removed most of the parameters from the config/parameters.yml in favor of environment variables with DSNs. For more details, see the [migration guide](https://doc.oroinc.com/master/backend/setup/dev-environment/env-vars/).\r\n[…]\n party package snc/redis-bundle.\r\n\r\nCo-authored-by: Serhii Miasnoi <smiasnoi@oroinc.com>\r\nCo-authored-by: Dmytro Syrvachov <dsyrvachov@oroinc.com>\r\nCo-authored-by: Victor Tihonchuk <victor@oroinc.com>",
"is_bot": false,
"headline": "BAP-17334: Update applications to use \"symfony/dotenv\" component for …",
"author_name": "Andrii Yatsenko",
"author_login": "anyt",
"committed_at": "2023-01-29T20:12:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1a4aa4af13a4e75635aa249f43c3a83eb7fdc30c",
"body": " - fixed unit and functional tests",
"is_bot": false,
"headline": "BAP-21264: Add support of Elasticsearch 8.*",
"author_name": "Yevhen Shyshkin",
"author_login": "yshyshkin",
"committed_at": "2022-07-14T14:48:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61deb554877850b26ed09b9c41d4aa33d75fcee1",
"body": " - fixed checker and heath check tools\n - upgraded guzzlehttp/psr7\n - replaced HttpFactory with standard implementation",
"is_bot": false,
"headline": "BB-21296: Add possibility to boost products by customer history",
"author_name": "Yevhen Shyshkin",
"author_login": "yshyshkin",
"committed_at": "2022-05-17T14:13:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "064b2088d3bf9de8f3b65da0f6969ab316037222",
"body": " - added new dependencies\n - started work on implementation",
"is_bot": false,
"headline": "BAP-21264: Add support of Elasticsearch 8.*",
"author_name": "Yevhen Shyshkin",
"author_login": "yshyshkin",
"committed_at": "2022-05-16T17:28:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14f39ee2e1792b38dfeaddd34f6ff28629b1db6b",
"body": "…hods (#32522)\n\n- remove unneeded getAlias() method in bundle Extension classes\r\n- remove unneeded getContainerExtension() method in Bundle classes\r\n- remove check for comments for Bundle classes",
"is_bot": false,
"headline": "BAP-21348: Remove unneeded getAlias() and getContainerExtension() met…",
"author_name": "Vova Soroka",
"author_login": "vsoroka",
"committed_at": "2022-05-02T19:23:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7626a9a41b1429c9e8ad68943c5fe931fbae6bcc",
"body": "…ampClient (#32288)\n\n- added WebsocketServerConsoleHandler for toggling websocket monolog handler\r\n- fixed verbosity levels for websocket handler in OroSyncExtension\r\n- added websocket channel to websocket handler along with oro_websocket\r\n- changed logging level to error in ConnectionChecker\r\n- do not log connection error during installation process\r\n- updated tests",
"is_bot": false,
"headline": "BAP-20436: Gracefully handle websocket server connection failure in W…",
"author_name": "Yefim Yevtushenko",
"author_login": "webevt",
"committed_at": "2022-04-04T15:23:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd77cddc21ea4530b3cd758bf9fc4b0c8bf139d4",
"body": null,
"is_bot": false,
"headline": "BB-21117: Set application version in master to 5.1",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2022-03-09T11:48:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c8343bf4351afc7d1de75a499d8d9da757d1971",
"body": " - Connection params were moved to DSN string now and parsed in common parameters bag\r\n - Added of elastic search parameters providers based on data from parameters bag mentioned above\r\n - Removed connection related container parameters compiler passes\r\n - Website search and backoffice search can be split into separate engines(elastic search nodes)\r\n - Removed elastic search's SSL settings processing\r\n - Removed unnecessary parmeters form dist files\r\n - Updated changelog and documentation",
"is_bot": false,
"headline": "BAP-21007: Simplify search engine configuration",
"author_name": "smiasnoi",
"author_login": "smiasnoi",
"committed_at": "2022-01-12T18:00:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e66f662c1314e6bb591a7c5586d00e89542bd0ed",
"body": "- replaced @*.inner services arguments with @.inner",
"is_bot": false,
"headline": "BAP-20935: Make use of simpler decoration (#31473)",
"author_name": "Eugene Chetverikov",
"author_login": "EugeneC",
"committed_at": "2021-12-24T12:17:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bb19d56d18e58356d20a24416e4ad2972276b4c",
"body": null,
"is_bot": false,
"headline": "Refactor functional tests for platform and crm packages (#31283)",
"author_name": "Vova Soroka",
"author_login": "vsoroka",
"committed_at": "2021-12-06T06:14:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6950e02b12e5807d0738001c67aaa41b7c43ba0f",
"body": "- added Mailer\r\n- added Transport decorator that logs exception and dispatches BeforeMessageEvent instead of mailer\r\n- added LazyTransports decorator for making transports be created on send() method\r\n- added SystemConfigTransportFactory\r\n- added EmbeddedImagesExtractor, EmbeddedImagesInEmailModelHa\n[…]\nmmand\r\n- made use of Mailer in AutoResponseManager\r\n- removed symfony/swiftmailer-bundle\r\n- removed DirectMailer, Processor, SpoolItem, MailerWrapper\r\n- removed status messages from maintenance driver",
"is_bot": false,
"headline": "BAP-20793: Replace swiftmailer with symfony/mailer (#31049)",
"author_name": "Yefim Yevtushenko",
"author_login": "webevt",
"committed_at": "2021-11-17T16:17:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "80728967b1460b39fc5ee0fe60fa47a4a6103377",
"body": "- removed ttl from maintenance mode\r\n- updated doc",
"is_bot": false,
"headline": "BAP-20716: Remove ability to set TTL for maintenance (#30790)",
"author_name": "Eugene Chetverikov",
"author_login": "EugeneC",
"committed_at": "2021-10-22T10:15:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba74723e505f734a1b707eb7df65deaeabc55a82",
"body": "- upgraded symfony packages\r\n- updated dev.locks\r\n\r\n| Production Changes | From | To | Compare |\r\n|--------------------------------------|-----------|---------|--------------------------------\n[…]\nd routing should use new ErrorController\r\n- symfony/twig-bundle upgrade: removed exception_full.html.twig (customized Symfony exception page)\r\n- symfony/twig-bundle upgrade: removed obsolete templates",
"is_bot": false,
"headline": "BAP-20236: Upgrade to Symfony 5.3 - Part 3 (#30654)",
"author_name": "Yefim Yevtushenko",
"author_login": "webevt",
"committed_at": "2021-09-22T08:55:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "951272652fbf002b77e21e3aa3d9190524d254de",
"body": "…if they don't provide any extra information. (#30170)\n\n* BAP-20688: Code style cleanup. Remove @param and @return PHPDoc tags if they don't provide any extra information.\r\n- extended php cs fixer rules\r\n- manual fixed of invalid docblock comments\r\n- applied automatic fixes\r\n- applied automatic fixes to code samples\r\n- applied automatic fixes after backmerge\r\n- fixed documentation samples",
"is_bot": false,
"headline": "BAP-20688: Code style cleanup. Remove @param and @return PHPDoc tags …",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2021-07-16T17:05:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b84dfe2f5a500b03f6b439e2fb0224e9c0ae3cba",
"body": "…(#30237)\n\n- added OroMaintenanceBundle based on lexik/maintenance-bundle",
"is_bot": false,
"headline": "BAP-20695: Upgrade lexik/maintenance-bundle to comply with Symfony 5 …",
"author_name": "Eugene Chetverikov",
"author_login": "EugeneC",
"committed_at": "2021-07-16T14:07:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f136b8d17c0b4bcb59424fdb05f3e75448491a8",
"body": "…lt (#30063)\n\nupdated links in CHANGELOG.md\r\nupdated documentation to mention that search reindexation is required after upgrade\r\nmoved upgrade notes from packages to the application level and removed UPGRADE.md in packages",
"is_bot": false,
"headline": "BB-20108: Enable language optimization for websearch indexes by defau…",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2021-06-14T15:34:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f09a45fed52ffe4cf5a2fe9bc23211b1dc254f41",
"body": null,
"is_bot": false,
"headline": "BAP-20474: Refactor tests for DIC compiler passes (#30022)",
"author_name": "Vova Soroka",
"author_login": "vsoroka",
"committed_at": "2021-06-06T11:15:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "195da0634e0a475b65825bbb1252529d46964c4d",
"body": "- removed usages of FilterControllerArgumentsEvent, FilterControllerEvent, FilterResponseEvent, FinishRequestEvent, GetResponseEvent, GetResponseForControllerResultEvent, GetResponseForExceptionEvent, PostResponseEvent\r\n- reworked the deprecated ListenerInterface implementations",
"is_bot": false,
"headline": "BAP-20629: Upgrade HttpKernel events usages",
"author_name": "Yefim Yevtushenko",
"author_login": "webevt",
"committed_at": "2021-05-28T15:01:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33fd856f7af7396202a38a5b81ede0645e6a180c",
"body": "Co-authored-by: Mykhailo Sulyma <msulima@oroinc.com>",
"is_bot": false,
"headline": "BAP-20464: Fix PhpDoc mismatch and syntax errors (#29280)",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2021-03-05T16:20:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3c3d3dcbd1556d4c7536737840339c3b6be8408",
"body": "- switched master version to 5.0, because the next version os 5.0.0-alpha.1",
"is_bot": false,
"headline": "BB-20256: 4.2 LTS Release",
"author_name": "Andrii Yatsenko",
"author_login": "anyt",
"committed_at": "2021-02-05T15:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a1fa3f518d0a79710303267cf6d33bc1b86df06",
"body": "- cleaned up some dependency injection extension tests",
"is_bot": false,
"headline": "BAP-20358: Remove oro:translation:pack command",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2021-01-27T00:26:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a7988f0b0bb0399a36b5141e5ee2d52d2eaf6e4",
"body": "- upgraded doctrine/persistence and doctrine/orm packages\n- upgraded jms/serializer and hwi/oauth-bundle\n- upgraded oro/crm-magento1-connector to the version that supports doctrine 2.8\n- upgraded akeneo/batch-bundle to the version that supports doctrine 2.8\n- overrode the service in alice fixtures p\n[…]\nroken after doctrine upgrade\n- unskipped API tests that were broken because of the bug in the doctrine that is already fixed in 2.8.1\n- fixed wrong return value in isOrphanRemoval method in API tests.",
"is_bot": false,
"headline": "BAP-20330: Upgrade doctrine/orm to 2.8",
"author_name": "Andrii Yatsenko",
"author_login": "anyt",
"committed_at": "2021-01-14T20:46:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e09ada63b861c6521b37d49b5c5fa80243748f68",
"body": null,
"is_bot": false,
"headline": "BAP-20035: File storage component enablement and documentation",
"author_name": "Yurii Muratov",
"author_login": "yurio",
"committed_at": "2020-12-18T13:19:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec9c73b304ba692633da7a54845c636d527f4817",
"body": "…… (#28974)\n\n- split symfony/symfony package to individual components and bundles dependencies\r\n- removed unused symfony/* packages from the composer.json\r\n- moved dev dependencies to the require-dev section on an application level\r\n- synchronized all the dev.json and composer.json files across the \n[…]\njson and composer.json in package/crm, package/platform and package/commerce\r\n- synchronized all the dependencies version constraints across the applications and packages in dev.json and composer.json",
"is_bot": false,
"headline": "BAP-20161: Split symfony/symfony to individual packages and remove un…",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2020-10-05T08:53:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "30414a8ed784c2e6d1d9dfcbbc54b90f881708da",
"body": "…packages (#28348)\n\n* BAP-19880: Replace zendframework/zend-mail with laminas/laminas-mail\r\n- replaced the package and updated namespaces\r\n- updated laminas-mail and laminas-diactoros to the latest available version",
"is_bot": false,
"headline": "BAP-19880: Replace zendframework packages with corresponding laminas …",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2020-08-03T10:55:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00cf5fd8b2e97b5bc0985f54761c6467bcf9ddc7",
"body": "- fixed \"TypeError : Argument 2 passed to Oro\\Bundle\\HealthCheckBundle\\Tests\\Unit\\Check\\ElasticsearchCheckTest::testCheckConfigured() must be of the type string, bool given\"",
"is_bot": false,
"headline": "BAP-19820: Fix unit and functional tests to upgrade PHPUnit",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2020-05-21T02:17:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "471d6073a8f1cfda9e717350f53f526e5a5c5ff0",
"body": "- fixed \"TypeError : Argument 1 passed to Oro\\Bundle\\HealthCheckBundle\\Tests\\Unit\\Check\\ElasticsearchCheckTest::testCheckConfigured() must be of the type string, bool given\"",
"is_bot": false,
"headline": "BAP-19820: Fix unit and functional tests to upgrade PHPUnit",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2020-05-21T02:17:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "870d84d7b1e9cfd9ced942e9456b03b88c99106b",
"body": "- updated method signatures (setUp, tearDown...)",
"is_bot": false,
"headline": "BAP-19820: Fix unit and functional tests to upgrade PHPUnit",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2020-05-21T02:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc7faaf4efb175dabeef7eda0756398bae60ca40",
"body": " - removed redundant quotes in the yaml code examples around class names\n - added quotes to yaml expressions starting with @, otherwise it throws an exception\n - removed usages of class parameters in yaml files",
"is_bot": false,
"headline": "DOC-1260: Various documentation fixes reported by the Community",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2020-04-24T15:04:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efdad5f432b4f598f1f239799ee137bec3cff96e",
"body": "* BB-19089: 4.2-ALPHA1 Release\r\n - updated oro packages versions in composer.json and dev.json",
"is_bot": false,
"headline": "BB-19089: 4.2-ALPHA1 Release (#27313)",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2020-03-24T17:36:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f4b1ba7287ccb96ae1e483914c1172064c76732",
"body": " - fix regular expressions\r\n - fix routes\r\n - update elasticsearch/elasticsearch\r\n- upgrade \"friendsofphp/php-cs-fixer\" to version 2.12.12\r\n- change php version in CI builds\r\n- fixed regexp in behat contexts\r\n- added missed comment\r\n- Updated dev.locks\r\n- fixed broken currency formatting on the fron\n[…]\n on php 7.4 to master branch\r\n- fixed missing composer dependency\r\n - Added functional on PHP 7.3 to regression and weekly builds\r\n\r\nCo-authored-by: Yefim Yevtushenko <webevt@users.noreply.github.com>",
"is_bot": false,
"headline": "BB-18645: PHP 7.4 compatibility (#26269)",
"author_name": "Andrey Sevastianov",
"author_login": "Andrej-in-ua",
"committed_at": "2020-02-11T10:47:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f77115fd77d301b64f4692e4be225e8018248ea3",
"body": "* DOC-1260: Various documentation fixes reported by the Community\r\n - removed links to old documentation\r\n - added links to new documentation to all the packages",
"is_bot": false,
"headline": "DOC-1260: Various documentation fixes reported by the Community (#26430)",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2020-01-09T13:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b083b182d1593b25a28215364aa9d41512cb6fa7",
"body": "* BB-17760: Release manager activities\n - updated Jenkinsfile to use 4.1.x version\n* Updated oro packages version to 4.1\n* Updated dev.locks",
"is_bot": false,
"headline": "BB-17760: Release manager activities (#26098)",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2019-12-27T14:53:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1c083ec4ac6dd5209cdb58dc739a9e65cdf531f",
"body": null,
"is_bot": false,
"headline": "BAP-19357: Extend logging for Health Check SMTP verification (#26210)",
"author_name": "Viacheslav Bemza",
"author_login": null,
"committed_at": "2019-12-23T14:38:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a69d7306b44d6b0995bc59595171b420d88b51a",
"body": "- added npm install/ci in post install script\r\n- migrated bower dependencies to npm\r\n- updated dev.json, composer.json files\r\n- got rid of asset-packagist configs in composer.json files\r\n- updated 3rd-party-dependencies.md\r\n- added ORO_NODEJS=12 to jenkins builds configs\r\n- locked doctrine/persistence to 1.2.*\r\n- removed unused repo asset-packagist",
"is_bot": false,
"headline": "BB-18432: Composer JS Dependencies (#26112)",
"author_name": "Yefim Y",
"author_login": "webevt",
"committed_at": "2019-12-17T13:53:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82cbba25b70fbb10169559e75860ecac2c766dd5",
"body": " - added AuthenticatedTokenTrait to return old logic of tokens when list of user roles was changed\r\n - Deprecated constructing a `TreeBuilder` without passing root node information\r\n - added Symfony 4.3 automatic validation\r\n - The getExtendedType() method of the FormTypeExtensionInterface is deprec\n[…]\n(), use Countries instead\r\n - Deprecated RegistryInterface, use Doctrine\\Common\\Persistence\\ManagerRegistry\r\n- updated composer.lock files to symfony 4.4.1\r\n- updated dev.json\r\n- updated composer.json",
"is_bot": false,
"headline": "BAP-19397: Upgrade to Symfony 4.4 (#25955)",
"author_name": "Mykhailo Sulyma",
"author_login": null,
"committed_at": "2019-12-04T17:14:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b0331829ae9479dd1995cd9d9a9f96f54c41da8d",
"body": "…t depended (#24730)\n\n- covered by functional tests\r\n- replace to static keys for api endpoints",
"is_bot": false,
"headline": "BAP-19047: Filesystem health check endpoints should not be environmen…",
"author_name": "Viacheslav Bemza",
"author_login": null,
"committed_at": "2019-08-01T12:53:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecdf29cafea0e471cee7add815e6ad53a3c4a93b",
"body": "- upgraded liip/imagine-bundle\r\n- removed unused parameter\r\n- upgraded knplabs/knp-gaufrette-bundle\r\n- fixed watermark is not working",
"is_bot": false,
"headline": "BAP-19056: Update liip/imagine-bundle package (#24444)",
"author_name": "Yefim Yevtushenko",
"author_login": "webevt",
"committed_at": "2019-07-05T17:29:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c265649b9b0274142bec9d5c43112bfd760242b",
"body": "…23856)\n\n- added migrations to update acl_protected option\r\n- updated installers\r\n- added unit tests\r\n- CS fixes\r\n - text fixes\r\n- added columns to File entity\r\n- updated test\r\n- added parentEntityFieldName\r\n- added ability to handle collections\r\n- fixed error when value is null\r\n- fixed subscriber \n[…]\n request\r\n- fixed FileViewVoter\r\n- fixed frontend FileUrlProvide\r\n- made DefaultFileAccessControlChecker get data from entity config\r\n- made DefaultFileAccessControlChecker get data from entity config",
"is_bot": false,
"headline": "BAP-18587: Permission checks on downloading image field thumbnails (#…",
"author_name": "Yaroslav Bracilo",
"author_login": "yaroslavbr",
"committed_at": "2019-06-12T15:27:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ef9c03970eac7c86807d1f33891c4e39f942967b",
"body": "* Removed unused .gitignore, composer.cson and LICENSE files from bundles and components that are not distributed as separate packages\n* Generated incompatibilities-4-0-beta.md.\n* Updated dev.json and dev.lock to reference 4.0.x-dev version of oro packages",
"is_bot": false,
"headline": " 4.0-beta release preparation",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2019-04-26T09:40:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51754826d7bd9fc38a79b2c8be9c1db1db6d9c27",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into fix/BAP-17734",
"author_name": "Mykhailo Sulyma",
"author_login": null,
"committed_at": "2018-11-07T10:42:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8a2c02f5635cc0249ebe4bbab65cd7257df2317",
"body": " - refactoring classes for websocket checks\n - updated tests",
"is_bot": false,
"headline": "BB-15339: Add operation to adding create order for guest quote",
"author_name": "Mykhailo Sulyma",
"author_login": null,
"committed_at": "2018-10-26T13:21:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5e1480a42d8fdae35068b3e93c7e151b74b1d33",
"body": "- removed FrontendClientAttributesFactory in favor of expression in service definition",
"is_bot": false,
"headline": "BAP-17734: WebSocket healthcheck doesn't work with \"mixed\" configuration",
"author_name": "Yefim Yevtushenko",
"author_login": "webevt",
"committed_at": "2018-10-26T08:41:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8191b09f277b2ae2cee94b4ce50a23142b352082",
"body": "- removed WebSocketCheck\n- added WebSocketBackendCheck for backend check\n- added WebSocketFrontendCheck for frontend check\n- added FrontendClientAttributesFactory for client attributes with guessed transport\n- updated tests",
"is_bot": false,
"headline": "BAP-17734: WebSocket healthcheck doesn't work with \"mixed\" configuration",
"author_name": "Yefim Yevtushenko",
"author_login": "webevt",
"committed_at": "2018-10-25T17:26:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a70f2ccbc250da2f78358c27ac0024c1a06e6277",
"body": "- dropped unnecessary 'the' when used with OroCommerce, OroCRM, OroPlatform",
"is_bot": false,
"headline": "BAP-17728: Fix various typos",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2018-10-15T17:51:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d8b948489d4984d97097060a41daeab3e3d1a19",
"body": "- Oro Platform -> OroPlatform\n- ORO Platform -> OroPlatform",
"is_bot": false,
"headline": "BAP-17728: Fix various typos",
"author_name": "Michael Bessolov",
"author_login": "mbessolov",
"committed_at": "2018-10-15T16:52:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4cc95f3a330bf25b69688ae5d29f33c8a4ab594",
"body": " - Updated parameters.yml with websocket_backend_transport and websocket_backend_ssl_options\r\n - Modified a way to connect to WebSocket to use configured transport and SSL options\r\n - Moved a configuring websocket_backend_transport and websocket_backend_ssl_options to a bundle's configuration",
"is_bot": false,
"headline": "BAP-17500: SSL/TLS for Web Socket Client (#19544)",
"author_name": "Max Syskov",
"author_login": null,
"committed_at": "2018-09-14T15:54:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4501e3983a53891c5b0401b65104bbc1557fef2c",
"body": "* BB-14614: Release preparation activities\r\n - changed references for master branch to 3.1\r\n - fixed test after upgrade twig/twig",
"is_bot": false,
"headline": "[master] - BB-14614: Release preparation activities (#19347)",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2018-07-25T10:00:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6771a868f53cafdc21c007635ce86ffa6099879d",
"body": "- disabled healthcheck for frontend parameters of websocket connection",
"is_bot": false,
"headline": "BAP-17402: Disable web-socket healthcheck (#19229)",
"author_name": "Mykhailo Sulyma",
"author_login": null,
"committed_at": "2018-07-17T16:52:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "804650568de8624368f51acbef61dbdd40d3b696",
"body": "…console",
"is_bot": false,
"headline": "BB-14708: Healthcheck: for version 3.0+ replace app/console with bin/…",
"author_name": "Mykhailo Sulyma",
"author_login": null,
"committed_at": "2018-06-26T15:33:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65d011acddcabd140d77f941ce585084847557ae",
"body": "…… (phpunit) (#18583)\n\n* BAP-12799: Upgrade of the 3rd party dependencies to the latest stable version\r\n - updated phpunit deps\r\n - updated tests and php_cs config to be compatible with phpunit 6\r\n - updated tests according to BC breaks generated dev.locks\r\n - updated namespaces in unit tests\r\n - fixed PHPUnit\\Framework\\MockObject\\Matcher\\Invocation usage instead of MockBuilderion\r\n - replaced @before annotation with @afterInitClient\r\n - cs fix\r\n - updated namespaces",
"is_bot": false,
"headline": "BAP-12799: Upgrade of the 3rd party dependencies to the latest stable…",
"author_name": "Andrey Yatsenco",
"author_login": "anyt",
"committed_at": "2018-06-25T08:41:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36746fc649bb877ea0019d27ce38b9cd5b5503e4",
"body": null,
"is_bot": false,
"headline": "BB-14684: Update the Healthcheck documentation for the maintenance mode",
"author_name": "Mykhailo Sulyma",
"author_login": null,
"committed_at": "2018-06-22T09:02:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49f95dd5e08f5ea10e5716e30612e8053bb5840c",
"body": " - fixed failed unit test",
"is_bot": false,
"headline": "BAP-16769: Websocket on Symfony 3",
"author_name": "Mykhailo Sulyma",
"author_login": null,
"committed_at": "2018-06-14T09:42:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e15716f684f78b565d342f95a6d5279b3a4f1794",
"body": "- added / updated documentation\r\n- fixed cs issues\r\n- updated dev guide\r\n- fixed websocket checker",
"is_bot": false,
"headline": "BAP-17165: Update developers documentation (#18642)",
"author_name": "Yefim Yevtushenko",
"author_login": "webevt",
"committed_at": "2018-06-14T09:07:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1f1a38ba632c191fec2d26d327cdcb6d7800a58",
"body": "- fixed logger service definitions\r\n- fixed client service definitions\r\n- check before publish messages\r\n- fixed cs\r\n- fixed DB ping and event listeneк\r\n- restore healthcheck for Websocket\r\n- updated tests",
"is_bot": false,
"headline": "BAP-17166: Functional tests (#18636)",
"author_name": "Mykhailo Sulyma",
"author_login": null,
"committed_at": "2018-06-13T15:00:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb65d5c00abd63d5621bacd505fbfa5c1445bb64",
"body": "- added LiipMonitorBundle dependency\r\n- added checks for main application`s third party services\r\n- added FileDriver for maintenance mode with custom logic of ttl option\r\n- added dev documentation\r\n- updated composer files in application to enable healthcheck package by default",
"is_bot": false,
"headline": "BAP-14878: Application health check endpoint (#18526)",
"author_name": "Mykhailo Sulyma",
"author_login": null,
"committed_at": "2018-06-13T08:31:27Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 5,
"latest_release_at": "2018-06-20T10:10:40Z",
"latest_release_tag": "2.3.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 4,
"days_since_latest_release": 2960,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "oro/health-check-bundle",
"exists": true,
"license": "OSL-3.0",
"keywords": [
"ORO",
"health check"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/oro/health-check-bundle",
"is_deprecated": false,
"latest_version": "7.0.1",
"repository_url": "https://github.com/oroinc/OroHealthCheckBundle",
"versions_count": 85,
"total_downloads": 254047,
"dependents_count": 0,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 5896,
"first_published_at": null,
"latest_published_at": "2026-04-24T11:44:51Z",
"latest_version_yanked": null,
"days_since_latest_publish": 95
}
]
},
"popularity": {
"forks": 0,
"stars": 3,
"watchers": 10,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 5113,
"source_files_sampled": 46,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 2,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [
{
"name": "oro/platform-enterprise",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "7.1.*"
},
{
"name": "liip/monitor-bundle",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "2.*"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "liip/monitor-bundle",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "oro/platform-enterprise",
"direct": true,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 2,
"direct_count": 2,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "anyt",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/5183991?v=4"
},
{
"type": "User",
"login": "mbessolov",
"commits": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/2725121?v=4"
},
{
"type": "User",
"login": "webevt",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/3187691?v=4"
},
{
"type": "User",
"login": "vsoroka",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/4763952?v=4"
},
{
"type": "User",
"login": "EugeneC",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/1182885?v=4"
},
{
"type": "User",
"login": "eugene-zibrov",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/106163563?v=4"
},
{
"type": "User",
"login": "yshyshkin",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/3470882?v=4"
},
{
"type": "User",
"login": "OleksandrProtsiuk",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/44535554?v=4"
},
{
"type": "User",
"login": "timofiyprisyazhnyuk",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/33844707?v=4"
},
{
"type": "User",
"login": "smiasnoi",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/11079883?v=4"
}
],
"contributors_sampled": 18,
"top_contributor_share": 0.31
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 1,
"reason": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "894c5d3d682529f9f386d9c77d5c9c06077316b0",
"ran_at": "2026-07-28T21:16:45Z",
"aggregate_score": 2.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T21:07:18Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/oroinc/OroHealthCheckBundle",
"host": "github.com",
"name": "OroHealthCheckBundle",
"owner": "oroinc"
},
"metrics": {
"overall": {
"key": "overall",
"band": "critical",
"name": "Overall health",
"note": "High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At risk ceiling of 49.",
"notes": [
{
"code": "jurisdiction_overall_adjustment",
"params": {
"cap": 49,
"pct": 50
}
}
],
"value": 19,
"inputs": {
"security": 14,
"vitality": 46,
"community": 32,
"governance": 59,
"engineering": 30,
"high_risk_jurisdiction_cap": 49,
"high_risk_jurisdiction_multiplier": 50,
"weighted_overall_before_jurisdiction": 38,
"overall_after_jurisdiction_multiplier": 19
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 46,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"commits_last_year": 5,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "5 commits in the last year",
"points": 7,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 5
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"releases_count": 1,
"latest_release_tag": "2.3.0",
"releases_from_tags": false,
"days_since_latest_release": 2960,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2960 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2960
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 32,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"forks": 0,
"stars": 3,
"watchers": 10,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "10 watchers",
"points": 5.3,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 10
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"packages": [
"oro/health-check-bundle"
],
"dependents": 0,
"ecosystems": "packagist",
"total_downloads": 254047,
"monthly_downloads": 5896
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "5,896 downloads/month across packagist",
"points": 50.3,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 5896,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "0 packages depend on it",
"points": 0,
"status": "missed",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 0
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 59,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 18,
"top_contributor_share": 0.31
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 31% of commits",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 31
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "18 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 18
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"followers": 121,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "oroinc",
"public_repos": 104,
"account_age_days": 4851
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "121 followers of oroinc",
"points": 15,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 121,
"login": "oroinc"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "104 public repos, account ~13 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 104
}
},
{
"code": "account_age_years",
"params": {
"years": 13
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"oro/health-check-bundle"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 95
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 95 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 95
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "85 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 85
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 30,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 30,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 14,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier to Security posture and gives it an At risk ceiling of 49.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "jurisdiction_posture_adjustment",
"params": {
"cap": 49,
"pct": 50
}
}
],
"value": 14,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 2.9,
"high_risk_jurisdiction_cap": 49,
"high_risk_jurisdiction_multiplier": 50,
"security_posture_after_multiplier": 14,
"security_posture_before_jurisdiction": 29
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "moderate",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 50,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": true,
"exposures": [
{
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 8
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "Russia: top_contributor (1)",
"points": 50,
"status": "partial",
"details": [
{
"code": "jurisdiction_exposure",
"params": {
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 35,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.735,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "61 of 83 human commits state their intent (structured subject or explanatory body)",
"points": 39.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 61,
"sampled": 83
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 24,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 83",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 83
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 5113,
"source_files_sampled": 46,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/46 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 46,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-28T21:16:56.663285Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/oroinc/OroHealthCheckBundle.svg",
"full_name": "oroinc/OroHealthCheckBundle",
"license_state": "custom",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Packagist.