Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-25 02:56 UTC

smallrye / smallrye-config

SmallRye Config - A Java Configuration library

JavaApache-2.0★ 204 stars⑂ 140 forkssince May 2018View on GitHub ↗

smallrye/smallrye-config holds a health index of 72 out of 100, placing it in the Good band. It scores highest on Vitality (94/100) and lowest on Community & Adoption (55/100). It was last updated 2 days ago. A single contributor accounts for most of its recent work.

72
overall / 100
Good

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

72
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

SmallRyeOrganization
175 followers53 public repossince May 2018

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Mavenio.smallrye.config:smallrye-config3.18.1-1299 days ago
Mavenio.smallrye.config:smallrye-config-common3.18.1-1299 days ago
Mavenio.smallrye.config:smallrye-config-validator3.18.1-949 days ago
Mavenio.smallrye.config:smallrye-config-microprofile3.18.1-29 days ago
Mavenio.smallrye.config:smallrye-config-core3.18.1-1019 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

94Excellent · 22% of overall
How it's scored
36/36Push recency — last push 2 days ago
31.8/36Commit cadence — 46/52 weeks with commits
18/18Commit volume — 178 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year178
human_commit_share0.55
days_since_last_push2
active_weeks_last_year46
How it's scored
27/27Ships releases — 100 releases published
36/36Release recency — latest release 9 days ago
27/27Release cadence — a release every ~33.2 days
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Inputs used
releases_count100
latest_release_tag3.18.1
releases_from_tagsno
days_since_latest_release9
mean_days_between_releases33.2

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

55Moderate · 18% of overall
How it's scored
37.4/60Stars — 204 stars
17.9/25Forks — 140 forks
5/15Watchers — 9 watchers
Inputs used
forks140
stars204
watchers9
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (Apache-2.0)
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

70Good · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
7.7/22.5Commit distribution — top contributor authored 66% of commits
13.5/13.5Contributor breadth — 69 contributors
10/10OpenSSF Scorecard: Contributors — project has 46 contributing companies or organizations
Inputs used
bus_factor1
contributors_sampled69
top_contributor_share0.657
How it's scored
42.7/46.8Issue resolution — 91% of issues closed
33.7/38.3PR acceptance — 1,093/1,239 decided PRs merged
3/15OpenSSF Scorecard: Code-Review — Found 5/21 approved changesets -- score normalized to 2
Inputs used
merged_prs1,093
open_issues26
closed_issues276
issue_closed_ratio0.914
closed_unmerged_prs146
How it's scored
30/30Ownership backing — organization-owned
0/20Verified domain
16.1/25Owner reach — 175 followers of smallrye
24.6/25Track record — 53 public repos, account ~8 yr old
Inputs used
followers175
owner_typeOrganization
is_verified
owner_loginsmallrye
public_repos53
account_age_days3,006
How it's scored
25/25Published & resolvable — 5 package(s) on maven
35/35Publish recency — latest publish 9 days ago
20/20Version history — 129 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesio.smallrye.config:smallrye-config, io.smallrye.config:smallrye-config-common, io.smallrye.config:smallrye-config-validator, io.smallrye.config:smallrye-config-microprofile, io.smallrye.config:smallrye-config-core
ecosystemsmaven
any_deprecatedno
min_days_since_publish9

Engineering Quality

Are baseline engineering and documentation practices in place?

71Good · 20% of overall
How it's scored
24/24CI workflows — 7 workflow(s)
24/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 22 out of 22 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configno
has_precommit_configno
How it's scored
30/30README
25/25Documentation directory
0/15Documentation / homepage site
10/10Repository description
10/10Topics — 5 topics
0/10Wiki
Inputs used
topicsmicroprofile, microservices, config, configuration, java
has_wikino
homepage
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

63Moderate · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
6/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 22 out of 22 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
1.5/7.5Code-Review — Found 5/21 approved changesets -- score normalized to 2
2.5/2.5Contributors — project has 46 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6/7.5Vulnerabilities — 2 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate5.3
Excluded from scoring (no data or not applicable): packaging. Remaining weights renormalized.
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40No advisories left outstanding — no advisory carries a publication date
Inputs used
sourceosv
advisories0
affected_packages0
assessed_packages20
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:io.smallrye.config:smallrye-config@3.18.1 runtime dependency closure — what installing the published package pulls in — 20 packages. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

56Moderate · 0% of overall
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
31/40Legible commit history — 32 of 55 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.582
agent_instruction_files
agent_instruction_max_bytes
How it's scored
12.6/18One-command bootstrap — cdi/pom.xml, common/pom.xml, coverage/pom.xml (toolchain convention, no task runner)
22/22Automated tests
0/11Lint / format config
11/11Static type checking — Java (statically typed)
10/10Reproducible environment — lockfile
0/10Demonstrated agent practice — no agent-authored commits among the last 100
8/8Automated maintenance — 33 of the last 100 commits are automated dependency updates
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfilesPipfile.lock
has_dockerfileno
typed_languageyes
bootstrap_files
has_devcontainerno
has_linter_configno
typecheck_configs
agent_commit_share0
toolchain_manifestscdi/pom.xml, common/pom.xml, coverage/pom.xml, documentation/pom.xml, examples/configmap/pom.xml, examples/expansion/pom.xml, examples/interceptors/pom.xml, examples/mapping/pom.xml, examples/pom.xml, examples/profiles/pom.xml, implementation/pom.xml, microprofile/pom.xml, pom.xml, sources/file-system/pom.xml, sources/hocon/pom.xml, sources/keystore/pom.xml, sources/yaml/pom.xml, sources/zookeeper/pom.xml, testsuite/extra/pom.xml, testsuite/pom.xml, testsuite/tck/pom.xml, utils/cdi-provider/pom.xml, utils/crypto/pom.xml, utils/events/pom.xml, validator/pom.xml
dependency_bot_commit_share0.33
How it's scored
45/45Type-checkable code — Java (statically typed)
54/55Manageable file sizes — 5/279 source files over 60KB
Inputs used
primary_languageJava
largest_source_bytes101,429
source_files_sampled279
oversized_source_files5
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
0/20MCP server
40/40Runnable examples — examples
Inputs used
example_dirsexamples
has_mcp_signalno
api_schema_files

Key facts

204GitHub stars
69contributors
178commits, last 12 months
2days since last push
100releases
1bus factor
26open issues
Maven, PyPIpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

More detail

Star and fork history 0 ★ / 140 ⇿
0Stars
140Forks
100Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

025507510012515013932018-052022-062026-07
Major 1Minor 33Patch 62

Each point covers 8 days.

OpenSSF Scorecard 5.3 / 10
5.3aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 02:55 UTC

10Binary-Artifactsno binaries found in the repo
8Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests22 out of 22 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
2Code-ReviewFound 5/21 approved changesets -- score normalized to 2
10Contributorsproject has 46 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
8Vulnerabilities2 existing vulnerabilities detected
Direct dependencies 50
RegistryPackageVersion constraintManifest
Mavenio.smallrye.config:smallrye-config-corecdi/pom.xml
Mavenio.smallrye.config:smallrye-config-microprofile${project.version}cdi/pom.xml
Mavenorg.jboss.logging:jboss-loggingcdi/pom.xml
Mavenorg.jboss.logging:jboss-logging-annotationscdi/pom.xml
Mavenorg.jboss.logging:jboss-logging-processorcdi/pom.xml
Mavenorg.junit.jupiter:junit-jupitercdi/pom.xml
Mavenorg.jboss.weld:weld-junit5cdi/pom.xml
Mavenorg.eclipse.microprofile.config:microprofile-config-apicommon/pom.xml
Mavenio.smallrye.common:smallrye-common-classloadercommon/pom.xml
Mavenorg.jboss.logging:jboss-loggingcommon/pom.xml
Mavenorg.junit.jupiter:junit-jupitercommon/pom.xml
Mavenio.smallrye.config:smallrye-config-commoncoverage/pom.xml
Mavenio.smallrye.config:smallrye-config-corecoverage/pom.xml
Mavenio.smallrye.config:smallrye-configcoverage/pom.xml
Mavenio.smallrye.config:smallrye-config-microprofile${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-validator${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-source-file-system${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-source-hocon${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-source-zookeeper${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-source-yaml${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-source-keystore${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-crypto${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-events${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-source-injection${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-test-extra${project.version}coverage/pom.xml
Mavenio.smallrye.config:smallrye-config-tck${project.version}coverage/pom.xml
Mavenorg.eclipse.microprofile.config:microprofile-config-apiimplementation/pom.xml
Mavenjakarta.annotation:jakarta.annotation-apiimplementation/pom.xml
Mavenio.smallrye.common:smallrye-common-annotationimplementation/pom.xml
Mavenio.smallrye.common:smallrye-common-expressionimplementation/pom.xml
Mavenio.smallrye.common:smallrye-common-constraintimplementation/pom.xml
Mavenio.smallrye.common:smallrye-common-classloaderimplementation/pom.xml
Mavenorg.jboss.logging:jboss-loggingimplementation/pom.xml
Mavenorg.jboss.logging:jboss-logging-annotationsimplementation/pom.xml
Mavenorg.ow2.asm:asmimplementation/pom.xml
Mavenio.smallrye.config:smallrye-config-commonimplementation/pom.xml
Mavenorg.junit.jupiter:junit-jupiterimplementation/pom.xml
Mavenio.smallrye.testing:smallrye-testing-utilitiesimplementation/pom.xml
Mavenio.smallrye.config:smallrye-config-coremicroprofile/pom.xml
Mavenorg.junit.jupiter:junit-jupitermicroprofile/pom.xml
Mavenorg.eclipse.microprofile.config:microprofile-config-api${version.eclipse.microprofile.config}pom.xml
Mavenorg.ow2.asm:asm${version.asm}pom.xml
Mavenio.smallrye.common:smallrye-common-bom${version.smallrye.common}pom.xml
Mavenio.smallrye.testing:smallrye-testing-bom${version.smallrye.testing}pom.xml
Mavenio.smallrye.config:smallrye-config-common${project.version}pom.xml
Mavenio.smallrye.config:smallrye-config-core${project.version}pom.xml
Mavenio.smallrye.config:smallrye-config${project.version}pom.xml
Mavenio.smallrye.testing:smallrye-testing-bom-tck${version.smallrye.testing}testsuite/pom.xml
Mavenio.smallrye.config:smallrye-configvalidator/pom.xml
Mavenorg.junit.jupiter:junit-jupitervalidator/pom.xml
All dependencies 188

Full resolved dependency set from the GitHub dependency graph: 29 direct and 159 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
Mavenio.smallrye.common:smallrye-common-annotation2.20.0direct
Mavenio.smallrye.common:smallrye-common-classloader2.20.0direct
Mavenio.smallrye.common:smallrye-common-constraint2.20.0direct
Mavenio.smallrye.common:smallrye-common-expression2.20.0direct
Mavenio.smallrye.config:smallrye-config3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-common3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-core3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-crypto3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-events3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-microprofile3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-source-file-system3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-source-hocon3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-source-injection3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-source-keystore3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-source-yaml3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-source-zookeeper3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-tck3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-test-extra3.18.2-SNAPSHOTdirect
Mavenio.smallrye.config:smallrye-config-validator3.18.2-SNAPSHOTdirect
Mavenio.smallrye.testing:smallrye-testing-utilities2.5.0direct
Mavenjakarta.annotation:jakarta.annotation-api2.1.1direct
Mavenorg.eclipse.microprofile.config:microprofile-config-api3.1.1direct
Mavenorg.jboss.logging:jboss-logging3.6.3.Finaldirect
Mavenorg.jboss.logging:jboss-logging-annotations3.0.4.Finaldirect
Mavenorg.jboss.logging:jboss-logging-processor3.0.4.Finaldirect
Mavenorg.jboss.weld:weld-junit54.0.0.Finaldirect
Mavenorg.jboss.weld:weld-junit54.0.5.Finaldirect
Mavenorg.junit.jupiter:junit-jupiter6.1.1direct
Mavenorg.ow2.asm:asm9.10.1direct
Mavencom.beust:jcommander1.82indirect
Mavencom.fasterxml:classmate1.7.1indirect
Mavencom.github.spotbugs:spotbugs-annotations4.6.0indirect
Mavencom.github.spotbugs:spotbugs-annotations4.8.5indirect
Mavencom.google.code.findbugs:jsr3053.0.2indirect
Mavencom.google.errorprone:error_prone_annotations2.18.0indirect
Mavencom.google.guava:failureaccess1.0.1indirect
Mavencom.google.guava:guava32.0.0-jreindirect
Mavencom.google.guava:listenablefuture9999.0-empty-to-avoid-conflict-with-guavaindirect
Mavencom.google.j2objc:j2objc-annotations2.8indirect
Mavencom.typesafe:config1.4.9indirect
Mavencommons-io:commons-io2.17.0indirect
Mavenio.dropwizard.metrics:metrics-core3.2.5indirect
Mavenio.netty:netty-buffer4.1.113.Finalindirect
Mavenio.netty:netty-codec4.1.113.Finalindirect
Mavenio.netty:netty-common4.1.113.Finalindirect
Mavenio.netty:netty-handler4.1.113.Finalindirect
Mavenio.netty:netty-resolver4.1.113.Finalindirect
Mavenio.netty:netty-tcnative-boringssl-static2.0.66.Finalindirect
Mavenio.netty:netty-tcnative-classes2.0.66.Finalindirect
Mavenio.netty:netty-transport4.1.113.Finalindirect
Mavenio.netty:netty-transport-classes-epoll4.1.113.Finalindirect
Mavenio.netty:netty-transport-native-epoll4.1.113.Finalindirect
Mavenio.netty:netty-transport-native-unix-common4.1.113.Finalindirect
Mavenio.smallrye.common:smallrye-common-function2.20.0indirect
Mavenjakarta.ejb:jakarta.ejb-api4.0.1indirect
Mavenjakarta.el:jakarta.el-api5.0.0indirect
Mavenjakarta.el:jakarta.el-api5.0.1indirect
Mavenjakarta.enterprise:jakarta.enterprise.cdi-api4.0.1indirect
Mavenjakarta.enterprise:jakarta.enterprise.cdi-el-api4.1.0-M1indirect
Mavenjakarta.enterprise:jakarta.enterprise.lang-model4.0.1indirect
Mavenjakarta.inject:jakarta.inject-api2.0.1indirect
Mavenjakarta.interceptor:jakarta.interceptor-api2.1.0indirect
Mavenjakarta.persistence:jakarta.persistence-api3.1.0indirect
Mavenjakarta.transaction:jakarta.transaction-api2.0.0indirect
Mavenjakarta.validation:jakarta.validation-api3.0.2indirect
Mavennet.bytebuddy:byte-buddy1.18.3indirect
Mavenorg.apache.curator:curator-client5.9.0indirect
Mavenorg.apache.curator:curator-framework5.9.0indirect
Mavenorg.apache.curator:curator-recipes5.9.0indirect
Mavenorg.apache.curator:curator-test5.9.0indirect
Mavenorg.apache.openwebbeans.arquillian:owb-arquillian-standalone4.0.3indirect
Mavenorg.apache.openwebbeans:openwebbeans-impl4.0.3indirect
Mavenorg.apache.openwebbeans:openwebbeans-spi4.0.3indirect
Mavenorg.apache.xbean:xbean-asm9-shaded4.26indirect
Mavenorg.apache.xbean:xbean-finder-shaded4.26indirect
Mavenorg.apache.yetus:audience-annotations0.12.0indirect
Mavenorg.apache.zookeeper:zookeeper3.9.3indirect
Mavenorg.apache.zookeeper:zookeeper-jute3.9.3indirect
Mavenorg.apiguardian:apiguardian-api1.1.2indirect
Mavenorg.assertj:assertj-core3.27.7indirect
Mavenorg.checkerframework:checker-qual3.33.0indirect
Mavenorg.eclipse.microprofile.config:microprofile-config-tck3.1.1indirect
Mavenorg.glassfish.expressly:expressly5.0.0indirect
Mavenorg.hamcrest:hamcrest-all1.3indirect
Mavenorg.hibernate.validator:hibernate-validator9.1.0.Finalindirect
Mavenorg.jboss.arquillian.config:arquillian-config-api1.8.0.Finalindirect
Mavenorg.jboss.arquillian.config:arquillian-config-impl-base1.8.0.Finalindirect
Mavenorg.jboss.arquillian.config:arquillian-config-spi1.8.0.Finalindirect
Mavenorg.jboss.arquillian.container:arquillian-container-impl-base1.8.0.Finalindirect
Mavenorg.jboss.arquillian.container:arquillian-container-spi1.8.0.Finalindirect
Mavenorg.jboss.arquillian.container:arquillian-container-test-api1.8.0.Finalindirect
Mavenorg.jboss.arquillian.container:arquillian-container-test-impl-base1.8.0.Finalindirect
Mavenorg.jboss.arquillian.container:arquillian-container-test-spi1.8.0.Finalindirect
Mavenorg.jboss.arquillian.container:arquillian-weld-embedded4.0.0.Finalindirect
Mavenorg.jboss.arquillian.core:arquillian-core-api1.8.0.Finalindirect
Mavenorg.jboss.arquillian.core:arquillian-core-impl-base1.8.0.Finalindirect
Mavenorg.jboss.arquillian.core:arquillian-core-spi1.8.0.Finalindirect
Mavenorg.jboss.arquillian.junit5:arquillian-junit5-container1.8.0.Finalindirect
Mavenorg.jboss.arquillian.junit5:arquillian-junit5-core1.8.0.Finalindirect
Mavenorg.jboss.arquillian.test:arquillian-test-api1.8.0.Finalindirect
Mavenorg.jboss.arquillian.test:arquillian-test-impl-base1.8.0.Finalindirect
Mavenorg.jboss.arquillian.test:arquillian-test-spi1.8.0.Finalindirect
Mavenorg.jboss.arquillian.testenricher:arquillian-testenricher-cdi-jakarta1.8.0.Finalindirect
Mavenorg.jboss.arquillian.testng:arquillian-testng-container1.8.0.Finalindirect
Mavenorg.jboss.arquillian.testng:arquillian-testng-core1.8.0.Finalindirect
Mavenorg.jboss.classfilewriter:jboss-classfilewriter1.2.5.Finalindirect
Mavenorg.jboss.classfilewriter:jboss-classfilewriter1.3.0.Finalindirect
Mavenorg.jboss.jdeparser:jdeparser2.0.3.Finalindirect
Mavenorg.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-api-base2.0.0indirect
Mavenorg.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-spi2.0.0indirect
Mavenorg.jboss.shrinkwrap:shrinkwrap-api1.2.6indirect
Mavenorg.jboss.shrinkwrap:shrinkwrap-impl-base1.2.6indirect
Mavenorg.jboss.shrinkwrap:shrinkwrap-spi1.2.6indirect
Mavenorg.jboss.weld.environment:weld-environment-common5.0.0.SP1indirect
Mavenorg.jboss.weld.environment:weld-environment-common5.1.6.Finalindirect
Mavenorg.jboss.weld.probe:weld-probe-core5.0.0.SP1indirect
Mavenorg.jboss.weld.se:weld-se-core5.0.0.SP1indirect
Mavenorg.jboss.weld.se:weld-se-core5.1.6.Finalindirect
Mavenorg.jboss.weld:weld-api5.0.SP3indirect
Mavenorg.jboss.weld:weld-core-impl5.1.0.Finalindirect
Mavenorg.jboss.weld:weld-core-impl5.1.6.Finalindirect
Mavenorg.jboss.weld:weld-junit-common4.0.0.Finalindirect
Mavenorg.jboss.weld:weld-junit-common4.0.5.Finalindirect
Mavenorg.jboss.weld:weld-lite-extension-translator5.0.0.SP1indirect
Mavenorg.jboss.weld:weld-lite-extension-translator5.1.6.Finalindirect
Mavenorg.jboss.weld:weld-lite-extension-translator6.0.0.Alpha1indirect
Mavenorg.jboss.weld:weld-spi5.0.SP3indirect
Mavenorg.jetbrains.kotlin:kotlin-stdlib2.4.0indirect
Mavenorg.jetbrains.kotlin:kotlin-stdlib-jdk72.4.0indirect
Mavenorg.jetbrains.kotlin:kotlin-stdlib-jdk82.4.0indirect
Mavenorg.jetbrains.kotlin:kotlin-test2.4.0indirect
Mavenorg.jetbrains:annotations13.0indirect
Mavenorg.junit.jupiter:junit-jupiter-api5.11.4indirect
Mavenorg.junit.jupiter:junit-jupiter-api5.14.1indirect
Mavenorg.junit.jupiter:junit-jupiter-engine5.11.4indirect
Mavenorg.junit.jupiter:junit-jupiter-engine5.14.1indirect
Mavenorg.junit.jupiter:junit-jupiter-params5.11.4indirect
Mavenorg.junit.jupiter:junit-jupiter-params5.14.1indirect
Mavenorg.junit.platform:junit-platform-commons1.11.4indirect
Mavenorg.junit.platform:junit-platform-commons1.14.1indirect
Mavenorg.junit.platform:junit-platform-engine1.11.4indirect
Mavenorg.junit.platform:junit-platform-engine1.14.1indirect
Mavenorg.junit.platform:junit-platform-launcher1.14.1indirect
Mavenorg.junit.platform:junit-platform-testkit1.14.1indirect
Mavenorg.opentest4j:opentest4j1.3.0indirect
Mavenorg.slf4j:slf4j-api1.7.25indirect
Mavenorg.slf4j:slf4j-api1.7.30indirect
Mavenorg.slf4j:slf4j-api2.0.17indirect
Mavenorg.testng:testng7.6.0indirect
Mavenorg.webjars:jquery3.6.0indirect
Mavenorg.xerial.snappy:snappy-java1.1.10.4indirect
Mavenorg.yaml:snakeyaml2.6indirect
PyPIbabel2.18.0indirect
PyPIbackrefs6.2indirect
PyPIcertifi2026.2.25indirect
PyPIcharset-normalizer3.4.7indirect
PyPIclick8.3.2indirect
PyPIcolorama0.4.6indirect
PyPIghp-import2.1.0indirect
PyPIhjson3.1.0indirect
PyPIidna3.15indirect
PyPIjinja23.1.6indirect
PyPImarkdown3.10.2indirect
PyPImarkupsafe3.0.3indirect
PyPImergedeep1.3.4indirect
PyPImike2.1.4indirect
PyPImkdocs1.6.1indirect
PyPImkdocs-get-deps0.2.2indirect
PyPImkdocs-macros-plugin1.5.0indirect
PyPImkdocs-material9.7.6indirect
PyPImkdocs-material-extensions1.3.1indirect
PyPIpackaging26.0indirect
PyPIpaginate0.5.7indirect
PyPIpathspec1.0.4indirect
PyPIplatformdirs4.9.6indirect
PyPIpygments2.20.0indirect
PyPIpymdown-extensions10.21.3indirect
PyPIpyparsing3.3.2indirect
PyPIpython-dateutil2.9.0.post0indirect
PyPIpyyaml6.0.3indirect
PyPIpyyaml-env-tag1.1indirect
PyPIrequests2.33.1indirect
PyPIsix1.17.0indirect
PyPIsuper-collections0.6.2indirect
PyPItermcolor3.3.0indirect
PyPIurllib32.7.0indirect
PyPIverspec0.1.0indirect
PyPIwatchdog6.0.0indirect
Dependency advisories 0

Installing maven:io.smallrye.config:smallrye-config@3.18.1 pulls in 20 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.

No known advisories affect the assessed dependencies.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "microprofile",
        "microservices",
        "config",
        "configuration",
        "java"
      ],
      "is_fork": false,
      "size_kb": 12301,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Java": 1808403,
        "Kotlin": 2541
      },
      "pushed_at": "2026-07-22T18:21:38Z",
      "created_at": "2018-05-20T15:07:04Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-22T18:24:19Z",
      "description": "SmallRye Config - A Java Configuration library",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Java",
      "significant_languages": [
        "Java"
      ]
    },
    "owner": {
      "blog": "https://smallrye.io",
      "name": "SmallRye",
      "type": "Organization",
      "login": "smallrye",
      "company": null,
      "location": null,
      "followers": 175,
      "avatar_url": "https://avatars.githubusercontent.com/u/38892730?v=4",
      "created_at": "2018-05-01T19:22:51Z",
      "is_verified": null,
      "public_repos": 53,
      "account_age_days": 3006
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "3.18.1",
          "kind": "patch",
          "published_at": "2026-07-15T17:01:57Z"
        },
        {
          "tag": "3.18.0",
          "kind": "minor",
          "published_at": "2026-07-04T02:03:45Z"
        },
        {
          "tag": "3.17.2",
          "kind": "patch",
          "published_at": "2026-04-20T21:57:01Z"
        },
        {
          "tag": "3.17.1",
          "kind": "patch",
          "published_at": "2026-04-17T23:27:13Z"
        },
        {
          "tag": "3.17.0",
          "kind": "minor",
          "published_at": "2026-04-13T19:48:24Z"
        },
        {
          "tag": "3.16.0",
          "kind": "minor",
          "published_at": "2026-01-28T19:12:57Z"
        },
        {
          "tag": "3.15.1",
          "kind": "patch",
          "published_at": "2026-01-16T16:52:37Z"
        },
        {
          "tag": "3.15.0",
          "kind": "minor",
          "published_at": "2025-12-20T09:00:10Z"
        },
        {
          "tag": "3.14.1",
          "kind": "patch",
          "published_at": "2025-10-03T09:57:37Z"
        },
        {
          "tag": "3.14.0",
          "kind": "minor",
          "published_at": "2025-09-19T17:53:24Z"
        },
        {
          "tag": "3.13.4",
          "kind": "patch",
          "published_at": "2025-07-23T09:40:33Z"
        },
        {
          "tag": "3.13.3",
          "kind": "patch",
          "published_at": "2025-07-17T18:33:03Z"
        },
        {
          "tag": "3.13.2",
          "kind": "patch",
          "published_at": "2025-06-12T18:10:48Z"
        },
        {
          "tag": "3.13.1",
          "kind": "patch",
          "published_at": "2025-06-06T11:04:16Z"
        },
        {
          "tag": "3.13.0",
          "kind": "minor",
          "published_at": "2025-05-21T08:56:49Z"
        },
        {
          "tag": "3.12.4",
          "kind": "patch",
          "published_at": "2025-03-27T16:35:22Z"
        },
        {
          "tag": "3.12.3",
          "kind": "patch",
          "published_at": "2025-03-11T15:50:35Z"
        },
        {
          "tag": "3.11.4",
          "kind": "patch",
          "published_at": "2025-02-24T11:41:05Z"
        },
        {
          "tag": "3.12.2",
          "kind": "patch",
          "published_at": "2025-02-19T13:25:14Z"
        },
        {
          "tag": "3.11.3",
          "kind": "patch",
          "published_at": "2025-02-19T12:07:22Z"
        },
        {
          "tag": "3.12.1",
          "kind": "patch",
          "published_at": "2025-02-18T20:07:00Z"
        },
        {
          "tag": "3.12.0",
          "kind": "minor",
          "published_at": "2025-02-15T20:48:14Z"
        },
        {
          "tag": "3.11.2",
          "kind": "patch",
          "published_at": "2025-02-03T17:22:10Z"
        },
        {
          "tag": "3.11.1",
          "kind": "patch",
          "published_at": "2025-01-11T14:53:35Z"
        },
        {
          "tag": "3.11.0",
          "kind": "minor",
          "published_at": "2025-01-10T22:11:24Z"
        },
        {
          "tag": "3.10.2",
          "kind": "patch",
          "published_at": "2024-11-29T20:13:01Z"
        },
        {
          "tag": "3.10.1",
          "kind": "patch",
          "published_at": "2024-11-12T16:31:23Z"
        },
        {
          "tag": "3.10.0",
          "kind": "minor",
          "published_at": "2024-10-15T19:55:26Z"
        },
        {
          "tag": "3.9.1",
          "kind": "patch",
          "published_at": "2024-07-31T22:42:37Z"
        },
        {
          "tag": "3.9.0",
          "kind": "minor",
          "published_at": "2024-07-15T13:11:07Z"
        },
        {
          "tag": "3.8.3",
          "kind": "patch",
          "published_at": "2024-06-22T11:50:55Z"
        },
        {
          "tag": "3.8.2",
          "kind": "patch",
          "published_at": "2024-05-23T10:03:16Z"
        },
        {
          "tag": "3.8.1",
          "kind": "patch",
          "published_at": "2024-04-24T18:01:15Z"
        },
        {
          "tag": "3.8.0",
          "kind": "minor",
          "published_at": "2024-04-23T13:41:32Z"
        },
        {
          "tag": "3.7.1",
          "kind": "patch",
          "published_at": "2024-03-18T21:51:45Z"
        },
        {
          "tag": "3.7.0",
          "kind": "minor",
          "published_at": "2024-03-14T15:15:34Z"
        },
        {
          "tag": "3.6.1",
          "kind": "patch",
          "published_at": "2024-03-09T12:12:46Z"
        },
        {
          "tag": "3.6.0",
          "kind": "minor",
          "published_at": "2024-02-28T12:45:49Z"
        },
        {
          "tag": "3.5.4",
          "kind": "patch",
          "published_at": "2024-02-07T12:14:23Z"
        },
        {
          "tag": "3.5.3",
          "kind": "patch",
          "published_at": "2024-02-06T18:32:08Z"
        },
        {
          "tag": "3.5.2",
          "kind": "patch",
          "published_at": "2024-01-11T19:19:43Z"
        },
        {
          "tag": "3.5.1",
          "kind": "patch",
          "published_at": "2024-01-02T16:43:52Z"
        },
        {
          "tag": "3.5.0",
          "kind": "minor",
          "published_at": "2023-12-22T22:21:36Z"
        },
        {
          "tag": "3.4.4",
          "kind": "patch",
          "published_at": "2023-11-10T23:21:56Z"
        },
        {
          "tag": "3.4.3",
          "kind": "patch",
          "published_at": "2023-11-08T12:26:41Z"
        },
        {
          "tag": "3.4.2",
          "kind": "patch",
          "published_at": "2023-11-07T20:01:26Z"
        },
        {
          "tag": "3.4.1",
          "kind": "patch",
          "published_at": "2023-10-02T12:31:23Z"
        },
        {
          "tag": "3.4.0",
          "kind": "minor",
          "published_at": "2023-09-25T22:09:48Z"
        },
        {
          "tag": "3.3.4",
          "kind": "patch",
          "published_at": "2023-08-30T15:21:38Z"
        },
        {
          "tag": "3.3.3",
          "kind": "patch",
          "published_at": "2023-08-04T15:17:48Z"
        },
        {
          "tag": "3.3.2",
          "kind": "patch",
          "published_at": "2023-07-17T20:14:28Z"
        },
        {
          "tag": "3.3.1",
          "kind": "patch",
          "published_at": "2023-07-06T15:08:29Z"
        },
        {
          "tag": "3.3.0",
          "kind": "minor",
          "published_at": "2023-06-12T17:55:39Z"
        },
        {
          "tag": "3.2.1",
          "kind": "patch",
          "published_at": "2023-03-31T16:30:23Z"
        },
        {
          "tag": "3.2.0",
          "kind": "minor",
          "published_at": "2023-03-21T20:14:02Z"
        },
        {
          "tag": "3.1.3",
          "kind": "patch",
          "published_at": "2023-02-17T17:56:39Z"
        },
        {
          "tag": "2.13.3",
          "kind": "patch",
          "published_at": "2023-02-17T16:31:28Z"
        },
        {
          "tag": "3.1.2",
          "kind": "patch",
          "published_at": "2023-02-01T17:24:30Z"
        },
        {
          "tag": "2.13.2",
          "kind": "patch",
          "published_at": "2023-02-01T16:59:43Z"
        },
        {
          "tag": "2.12.3",
          "kind": "patch",
          "published_at": "2023-01-18T11:31:39Z"
        },
        {
          "tag": "3.1.1",
          "kind": "patch",
          "published_at": "2022-12-20T19:12:06Z"
        },
        {
          "tag": "2.13.1",
          "kind": "patch",
          "published_at": "2022-12-20T18:50:05Z"
        },
        {
          "tag": "2.9.3",
          "kind": "patch",
          "published_at": "2022-12-09T12:36:03Z"
        },
        {
          "tag": "3.1.0",
          "kind": "minor",
          "published_at": "2022-11-24T18:56:46Z"
        },
        {
          "tag": "2.13.0",
          "kind": "minor",
          "published_at": "2022-11-24T16:16:27Z"
        },
        {
          "tag": "2.12.2",
          "kind": "patch",
          "published_at": "2022-11-22T13:35:45Z"
        },
        {
          "tag": "2.12.1",
          "kind": "patch",
          "published_at": "2022-09-20T09:32:33Z"
        },
        {
          "tag": "3.0.0",
          "kind": "major",
          "published_at": "2022-09-02T09:49:42Z"
        },
        {
          "tag": "2.12.0",
          "kind": "minor",
          "published_at": "2022-09-02T00:39:05Z"
        },
        {
          "tag": "3.0.0-RC4",
          "kind": "prerelease",
          "published_at": "2022-08-02T11:04:37Z"
        },
        {
          "tag": "2.11.1",
          "kind": "patch",
          "published_at": "2022-08-01T16:10:00Z"
        },
        {
          "tag": "3.0.0-RC3",
          "kind": "prerelease",
          "published_at": "2022-07-25T12:41:47Z"
        },
        {
          "tag": "2.11.0",
          "kind": "minor",
          "published_at": "2022-07-15T19:35:53Z"
        },
        {
          "tag": "2.10.1",
          "kind": "patch",
          "published_at": "2022-06-14T17:43:11Z"
        },
        {
          "tag": "2.10.0",
          "kind": "minor",
          "published_at": "2022-04-07T16:30:23Z"
        },
        {
          "tag": "3.0.0-RC2",
          "kind": "prerelease",
          "published_at": "2022-03-28T14:07:39Z"
        },
        {
          "tag": "2.9.2",
          "kind": "patch",
          "published_at": "2022-03-17T00:58:21Z"
        },
        {
          "tag": "2.9.1",
          "kind": "patch",
          "published_at": "2022-02-22T00:46:54Z"
        },
        {
          "tag": "2.9.0",
          "kind": "minor",
          "published_at": "2022-02-11T23:56:03Z"
        },
        {
          "tag": "2.8.2",
          "kind": "patch",
          "published_at": "2022-01-17T18:42:33Z"
        },
        {
          "tag": "3.0.0-RC1",
          "kind": "prerelease",
          "published_at": "2021-12-23T12:21:17Z"
        },
        {
          "tag": "2.8.1",
          "kind": "patch",
          "published_at": "2021-12-22T17:14:54Z"
        },
        {
          "tag": "2.8.0",
          "kind": "minor",
          "published_at": "2021-12-20T15:18:48Z"
        },
        {
          "tag": "2.7.0",
          "kind": "minor",
          "published_at": "2021-12-03T11:28:25Z"
        },
        {
          "tag": "2.6.1",
          "kind": "patch",
          "published_at": "2021-11-17T16:10:14Z"
        },
        {
          "tag": "2.6.0",
          "kind": "minor",
          "published_at": "2021-10-19T12:44:25Z"
        },
        {
          "tag": "2.5.1",
          "kind": "patch",
          "published_at": "2021-09-24T15:53:31Z"
        },
        {
          "tag": "2.5.0",
          "kind": "minor",
          "published_at": "2021-09-14T21:09:40Z"
        },
        {
          "tag": "2.4.4",
          "kind": "patch",
          "published_at": "2021-08-20T15:27:24Z"
        },
        {
          "tag": "2.4.3",
          "kind": "patch",
          "published_at": "2021-08-06T17:42:36Z"
        },
        {
          "tag": "2.4.2",
          "kind": "patch",
          "published_at": "2021-07-12T17:13:30Z"
        },
        {
          "tag": "2.4.1",
          "kind": "patch",
          "published_at": "2021-06-29T17:36:18Z"
        },
        {
          "tag": "2.4.0",
          "kind": "minor",
          "published_at": "2021-06-28T11:26:56Z"
        },
        {
          "tag": "1.13.1",
          "kind": "patch",
          "published_at": "2021-05-20T16:25:44Z"
        },
        {
          "tag": "2.3.0",
          "kind": "minor",
          "published_at": "2021-05-12T17:38:39Z"
        },
        {
          "tag": "1.13.0",
          "kind": "minor",
          "published_at": "2021-04-27T17:07:17Z"
        },
        {
          "tag": "1.12.0",
          "kind": "minor",
          "published_at": "2021-03-20T01:18:46Z"
        },
        {
          "tag": "2.2.0",
          "kind": "minor",
          "published_at": "2021-03-20T00:21:26Z"
        },
        {
          "tag": "1.11.1",
          "kind": "patch",
          "published_at": "2021-03-05T17:47:07Z"
        },
        {
          "tag": "1.11.0",
          "kind": "minor",
          "published_at": "2021-02-15T16:55:45Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "8a8abf701f1f4901c35fc70ff9896fbc1d37bfa9",
          "body": "…a (#1551)",
          "is_bot": false,
          "headline": "Collect nested ConfigMappingClass entries in getConfigMappingsMetadat…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-07-22T18:21:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9458d406995ba0eceb989acb805e90d68a12e388",
          "body": "…1550)",
          "is_bot": false,
          "headline": "Ignore @WithDefault on Map and Collection with nested group values (#…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-07-22T18:01:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63980bb3701176e5a4d9e8632492b283c4b0aee1",
          "body": "…548)\n\nBumps [io.smallrye.common:smallrye-common-bom](https://github.com/smallrye/smallrye-common) from 2.19.0 to 2.20.0.\n- [Release notes](https://github.com/smallrye/smallrye-common/releases)\n- [Commits](https://github.com/smallrye/smallrye-common/compare/2.19.0...2.20.0)\n\n---\nupdated-dependencies\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.smallrye.common:smallrye-common-bom from 2.19.0 to 2.20.0 (#1…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T15:59:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6c8c66ff62c6db971e500623ecc94de121670748",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-07-15T17:01:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d576664af18b68ea8ebe780595c1b05c1e09a25d",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare release 3.18.1",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-07-15T17:01:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6280131ff48ec260e32ef29f64ccfccf4938ad9",
          "body": null,
          "is_bot": false,
          "headline": "Release 3.18.1 (#1547)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-07-15T17:00:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a86d44d8c24277d616c9a0007864f3e7801fb2d",
          "body": "…apping Map (#1546)",
          "is_bot": false,
          "headline": "@WithUnnamedKey#eager to control if default keys are present in the m…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-07-15T16:45:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb0c3bfb6d6363a286533cb209b5d458433ab6d4",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-07-04T02:03:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21ceb7502937f340ae883702526a61deb5b1ce2a",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare release 3.18.0",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-07-04T02:03:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7bafe6373ed25cf630cd241130458609ea8aee1",
          "body": null,
          "is_bot": false,
          "headline": "Update release preparation condition in workflow",
          "author_name": "George Gastaldi",
          "author_login": "gastaldi",
          "committed_at": "2026-07-04T02:01:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c94a186811febdc090ce58b29d27208c84aabc11",
          "body": null,
          "is_bot": false,
          "headline": "Add workflow_dispatch trigger to release workflow",
          "author_name": "George Gastaldi",
          "author_login": "gastaldi",
          "committed_at": "2026-07-04T01:58:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e93eddf8527a6bc3c99ca72e02468778da94bb80",
          "body": null,
          "is_bot": false,
          "headline": "Release 3.18.0 (#1544)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-07-03T16:06:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0daa482f24d8e8cd1fc791f30979ff5e10a8a191",
          "body": "…t even if unconfigured (#1534)\n\n* Add systematic tests for @WithDefaults/@WithUnnamedKey map behavior\n\nParameterized tests documenting current behavior of @WithDefaults and\n@WithUnnamedKey on Maps in @ConfigMapping interfaces. Assertions expect\ncorrect behavior; 6 tests currently fail, documenting \n[…]\nWithDefault, even when nothing is configured.\n\n* Do not include the unnamedKey in a @WithUnnamedKey Map if the Map value is the default\n\n---------\n\nCo-authored-by: Roberto Cortez <radcortez@yahoo.com>",
          "is_bot": false,
          "headline": "Reproduce issue with `@WithUnnamedKey` config group considered presen…",
          "author_name": "Yoann Rodière",
          "author_login": "yrodiere",
          "committed_at": "2026-07-03T15:05:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d6d5dcc08d92a94572847077c02e472d7506b7c",
          "body": "Bumps [io.smallrye:smallrye-parent](https://github.com/smallrye/smallrye-parent) from 50 to 51.\n- [Release notes](https://github.com/smallrye/smallrye-parent/releases)\n- [Commits](https://github.com/smallrye/smallrye-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: io.smallrye:smallrye-\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.smallrye:smallrye-parent from 50 to 51 (#1543)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T09:12:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3f13795e84c79cfc656d006c313170c2b2fbe275",
          "body": null,
          "is_bot": false,
          "headline": "Fix test coverage",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-06-23T10:55:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee9ad05aec249d298f5e2853c0c5f353f6bb0199",
          "body": "…ys and values (#1541)",
          "is_bot": false,
          "headline": "Fix ConfigMapping hashCode collision for Map properties with equal ke…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-06-23T10:28:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a711a841808ee8501f985d46cc93eec7e2d8904",
          "body": "Bumps [idna](https://github.com/kjd/idna) from 3.11 to 3.15.\n- [Release notes](https://github.com/kjd/idna/releases)\n- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)\n- [Commits](https://github.com/kjd/idna/compare/v3.11...v3.15)\n\n---\nupdated-dependencies:\n- dependency-name: idna\n  dependency-version: '3.15'\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump idna from 3.11 to 3.15 in /documentation (#1525)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T22:53:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "885fc02c47ddf461d09783a67557f49074e71c4e",
          "body": "…524)\n\nBumps [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) from 10.21.2 to 10.21.3.\n- [Release notes](https://github.com/facelessuser/pymdown-extensions/releases)\n- [Commits](https://github.com/facelessuser/pymdown-extensions/compare/10.21.2...10.21.3)\n\n---\nupdated-depende\n[…]\ns\n  dependency-version: 10.21.3\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump pymdown-extensions from 10.21.2 to 10.21.3 in /documentation (#1…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T22:40:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8e0931b033b93c53b8d90c0da267401caf6c7bef",
          "body": "Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.6.3 to 2.7.0.\n- [Release notes](https://github.com/urllib3/urllib3/releases)\n- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)\n- [Commits](https://github.com/urllib3/urllib3/compare/2.6.3...2.7.0)\n\n---\nupdated-dependenc\n[…]\nib3\n  dependency-version: 2.7.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump urllib3 from 2.6.3 to 2.7.0 in /documentation (#1520)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-22T22:35:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "075cadb235bacf4afc6671d55c0c1a36088c4b50",
          "body": "…1540)",
          "is_bot": false,
          "headline": "Bump Python version from 3.9 to 3.12 in CI documentation workflows (#…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-06-22T22:34:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2f3869cfdb9f96e824be9f2ba0a5961239aa7f8",
          "body": null,
          "is_bot": false,
          "headline": "Remove deprecated Jasypt support (#1539)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-06-22T18:43:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31ba1326177dbc54f3c02f3484f162c0982dbf5b",
          "body": null,
          "is_bot": false,
          "headline": "Support nested config classes in class-based mappings (#1538)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-06-22T18:21:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38216aaafde679f7ba77cd3ddad6fdcf58a045d7",
          "body": "…@ConfigProperties (#1532)",
          "is_bot": false,
          "headline": "Add SPI ConfigMappingHandler to split handling of @ConfigMapping and …",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-06-22T16:43:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5190fb22eeb27e849d92e53e21f84c44d8705276",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump actions/checkout from 6 to 7 (#1537)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-19T12:56:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9c2e937a21239d30b08cf9a9ca49ae8b3705dad3",
          "body": "Co-authored-by: Ahmed El amraouiyine <ahmed.elamraouiyine@vilavi.fr>",
          "is_bot": false,
          "headline": "Fix HOCON property name rendering (#1535)",
          "author_name": "Ahmed EL.",
          "author_login": "xfocus3",
          "committed_at": "2026-06-18T16:14:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a5e0110bf4ae2b44cf9699bc89c8329ebdb9959",
          "body": "…536)\n\nConfigure JUnit 5 reporter extensions for `maven-surefire-plugin`\nso that `@ParameterizedTest` (and `@DisplayName`) values appear in\nSurefire XML reports instead of bare indices.\n\n## XML reports (`target/surefire-reports/*.xml`) — fixed\n\nBefore:\n\n```xml\n<testcase name=\"leadingSpace(Class, Obj\n[…]\nrefire/issues/3203)).\n\n## Reference\n\nSame approach used in Hibernate Search:\nhttps://github.com/hibernate/hibernate-search/blob/main/pom.xml#L756-L781\n\nAssisted-By: Claude Code <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Configure Surefire to display parameterized test names in reports (#1…",
          "author_name": "Yoann Rodière",
          "author_login": "yrodiere",
          "committed_at": "2026-06-18T15:54:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dfa8e752f0c7441c80294f71c3be7821a58b962c",
          "body": null,
          "is_bot": false,
          "headline": "Lock pipenv dependencies for CI",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-06-17T17:29:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4bb49c7788d2cfa8cf33145cf584aff2824405ec",
          "body": "Bumps [io.smallrye:smallrye-parent](https://github.com/smallrye/smallrye-parent) from 49 to 50.\n- [Release notes](https://github.com/smallrye/smallrye-parent/releases)\n- [Commits](https://github.com/smallrye/smallrye-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: io.smallrye:smallrye-\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.smallrye:smallrye-parent from 49 to 50 (#1533)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-16T15:34:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f06ef44df4d1f8795c1aed4b39746f1dd92f9c5c",
          "body": "Bumps `kotlin.version` from 2.3.21 to 2.4.0.\n\nUpdates `org.jetbrains.kotlin:kotlin-stdlib-jdk8` from 2.3.21 to 2.4.0\n- [Release notes](https://github.com/JetBrains/kotlin/releases)\n- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)\n- [Commits](https://github.com/JetBrains/ko\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump kotlin.version from 2.3.21 to 2.4.0 (#1529)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-11T09:38:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d805e0132bc9c17f7f7803cab9e5d3edd6c68844",
          "body": "…531)\n\nBumps [io.smallrye.common:smallrye-common-bom](https://github.com/smallrye/smallrye-common) from 2.18.1 to 2.19.0.\n- [Release notes](https://github.com/smallrye/smallrye-common/releases)\n- [Commits](https://github.com/smallrye/smallrye-common/compare/2.18.1...2.19.0)\n\n---\nupdated-dependencies\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.smallrye.common:smallrye-common-bom from 2.18.1 to 2.19.0 (#1…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-11T09:38:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0a4ffc099cb91d0a27e9d4df180d676fe7c68f6a",
          "body": "Bumps [com.typesafe:config](https://github.com/lightbend/config) from 1.4.8 to 1.4.9.\n- [Release notes](https://github.com/lightbend/config/releases)\n- [Changelog](https://github.com/lightbend/config/blob/main/NEWS.md)\n- [Commits](https://github.com/lightbend/config/compare/v1.4.8...v1.4.9)\n\n---\nupd\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.typesafe:config from 1.4.8 to 1.4.9 (#1530)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-04T10:43:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "03365fc23a9383dbea5a0f67a3633dd583a93a32",
          "body": "Related to https://github.com/quarkusio/quarkus/issues/53197",
          "is_bot": false,
          "headline": "Update MicroProfile Config to 3.1.1 (#1528)",
          "author_name": "Guillaume Smet",
          "author_login": "gsmet",
          "committed_at": "2026-06-01T13:59:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac1c65049f6cca00537843142397e12bb5bc1719",
          "body": "Bumps org.ow2.asm:asm from 9.10 to 9.10.1.\n\n---\nupdated-dependencies:\n- dependency-name: org.ow2.asm:asm\n  dependency-version: 9.10.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1526)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-31T11:07:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05dc803be6b00fbb2c85c7d033e8710cfa8478a9",
          "body": "Class doesn't implement its own hashCode so its hashCode is not stable\nat all.\nDuring the reproducibility work made by @reaver585, we figured out it\nwould be better to have a stable hashCode.\n\nWe don't change the equals() as we want the class loader to be taken\ninto account in the equals().\n\nRelated to a discussion in:\nhttps://github.com/quarkusio/quarkus/pull/54371#discussion_r3312830183",
          "is_bot": false,
          "headline": "Stabilize hashCode of ConfigClass (#1527)",
          "author_name": "Guillaume Smet",
          "author_login": "gsmet",
          "committed_at": "2026-05-29T15:39:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29edda73ced4709bcbf306bc91a80dc9ea4f85d3",
          "body": "Bumps org.ow2.asm:asm from 9.9.1 to 9.10.\n\n---\nupdated-dependencies:\n- dependency-name: org.ow2.asm:asm\n  dependency-version: '9.10'\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1523)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-18T15:47:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d31fd752e093b07276a9941b1ac687fbd6e6d9a",
          "body": "…522)\n\nBumps [io.smallrye.common:smallrye-common-bom](https://github.com/smallrye/smallrye-common) from 2.18.0 to 2.18.1.\n- [Release notes](https://github.com/smallrye/smallrye-common/releases)\n- [Commits](https://github.com/smallrye/smallrye-common/compare/2.18.0...2.18.1)\n\n---\nupdated-dependencies\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.smallrye.common:smallrye-common-bom from 2.18.0 to 2.18.1 (#1…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-14T09:19:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3b49a863ed14664a82323ee66149bf5f223ef8f",
          "body": "…519)\n\nBumps [io.smallrye.common:smallrye-common-bom](https://github.com/smallrye/smallrye-common) from 2.17.1 to 2.18.0.\n- [Release notes](https://github.com/smallrye/smallrye-common/releases)\n- [Commits](https://github.com/smallrye/smallrye-common/compare/2.17.1...2.18.0)\n\n---\nupdated-dependencies\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.smallrye.common:smallrye-common-bom from 2.17.1 to 2.18.0 (#1…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-08T18:48:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "483a7b2a31439242d0e208b4a8e7efbbf6380143",
          "body": "Bumps [com.typesafe:config](https://github.com/lightbend/config) from 1.4.7 to 1.4.8.\n- [Release notes](https://github.com/lightbend/config/releases)\n- [Changelog](https://github.com/lightbend/config/blob/main/NEWS.md)\n- [Commits](https://github.com/lightbend/config/compare/v1.4.7...v1.4.8)\n\n---\nupd\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.typesafe:config from 1.4.7 to 1.4.8 (#1518)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-06T09:39:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b164c4f5cc1d987fb9f492670a024e4df9ea47e3",
          "body": null,
          "is_bot": false,
          "headline": "Move @ConfigProperties tests to cdi module",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-05-05T17:39:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46b9174c9afd30268c8bd137e04f9ca662668ad2",
          "body": "Bumps [com.typesafe:config](https://github.com/lightbend/config) from 1.4.6 to 1.4.7.\n- [Release notes](https://github.com/lightbend/config/releases)\n- [Changelog](https://github.com/lightbend/config/blob/main/NEWS.md)\n- [Commits](https://github.com/lightbend/config/compare/v1.4.6...v1.4.7)\n\n---\nupd\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.typesafe:config from 1.4.6 to 1.4.7 (#1516)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-01T12:29:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8c66bd15dca55396d857ecb310809078aa73195",
          "body": "Bumps [io.smallrye:smallrye-parent](https://github.com/smallrye/smallrye-parent) from 48 to 49.\n- [Release notes](https://github.com/smallrye/smallrye-parent/releases)\n- [Commits](https://github.com/smallrye/smallrye-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: io.smallrye:smallrye-\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.smallrye:smallrye-parent from 48 to 49 (#1515)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-28T17:22:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b76804a726d45d50b4c3f705d67b7795a8b9dd0e",
          "body": "Bumps `kotlin.version` from 2.3.20 to 2.3.21.\n\nUpdates `org.jetbrains.kotlin:kotlin-stdlib-jdk8` from 2.3.20 to 2.3.21\n- [Release notes](https://github.com/JetBrains/kotlin/releases)\n- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)\n- [Commits](https://github.com/JetBrains/\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump kotlin.version from 2.3.20 to 2.3.21 (#1514)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-24T20:49:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f6402e8a7eb87693712e21e822243bdbf3ca3502",
          "body": "Bumps [org.jboss.bridger:bridger](https://github.com/dmlloyd/bridger) from 1.6.Final to 1.8.\n- [Release notes](https://github.com/dmlloyd/bridger/releases)\n- [Commits](https://github.com/dmlloyd/bridger/compare/1.6.Final...1.8)\n\n---\nupdated-dependencies:\n- dependency-name: org.jboss.bridger:bridger\n\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.jboss.bridger:bridger from 1.6.Final to 1.8 (#1513)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-24T17:58:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "46bdce1c634830ce956566a02588251eedb38abf",
          "body": "Bumps [io.sundr:sundr-maven-plugin](https://github.com/sundrio/sundrio) from 0.240.1 to 0.300.0.\n- [Commits](https://github.com/sundrio/sundrio/compare/0.240.1...0.300.0)\n\n---\nupdated-dependencies:\n- dependency-name: io.sundr:sundr-maven-plugin\n  dependency-version: 0.300.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.sundr:sundr-maven-plugin from 0.240.1 to 0.300.0 (#1510)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-24T17:58:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b1899c080d12311e757b5677eecacdc71b3a3a48",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-04-20T21:56:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64e31128e5f6442a675e030276c1d6eff5b017d9",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare release 3.17.2",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-04-20T21:56:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3321972d105704b2750daf2057b5d949c471dc63",
          "body": null,
          "is_bot": false,
          "headline": "Release 3.17.2 (#1512)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-20T21:55:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5cb30389b0e266577fe68cde517533a72e49cee1",
          "body": "…ists as null (#1511)",
          "is_bot": false,
          "headline": "Fix PropertyNamesMatcher fallback to wildcards even if exact match ex…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-20T21:49:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14725d60f6a5f45a81460963c9ddf123f1c4781f",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-04-17T23:27:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "503f67aecc56fc1443556895ccf25e96705b36a3",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare release 3.17.1",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-04-17T23:27:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "744742d76ce377f8933029b02fad2a8ce7f5ddb1",
          "body": null,
          "is_bot": false,
          "headline": "Release 3.17.1 (#1509)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-17T23:25:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "977c01e0dc61cfc0f6678e51a63aac64b5dd4880",
          "body": null,
          "is_bot": false,
          "headline": "Apply BeanStyleGetters to defaults (#1508)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-17T23:20:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "207691f93870b2b39a7025f54d30a19173441fac",
          "body": "…faultValuesConfigSource (#1507)",
          "is_bot": false,
          "headline": "Do not include wildcard names in the list of property names of the De…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-17T19:12:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6f31c7888907a11b123875264479edb880bdfa5",
          "body": "…ttern matches (#1506)",
          "is_bot": false,
          "headline": "Fix PropertyNamesMatcher.get returning wrong value for null-valued pa…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-17T19:07:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c0b08626b6316340d562d3c33ca2eb686f1b549",
          "body": "…ed children (#1505)",
          "is_bot": false,
          "headline": "Fix PropertyNamesMatcher matching wildcard input segments against nam…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-17T18:50:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "992dd237de1256039874393edfc64cc4edcc9f4b",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-04-13T19:48:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9630e78a22c28ecac29813864ba38ec1cd1b6cc5",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare release 3.17.0",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-04-13T19:48:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c96a248752844d7a9de91cd7d940630608cfb2ca",
          "body": null,
          "is_bot": false,
          "headline": "Release 3.17.0 (#1503)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-13T19:46:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3612438e3c8f3d68d82b9b2e9e9ab25b63b4075",
          "body": null,
          "is_bot": false,
          "headline": "Readd removed constructor and deprecate it",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-13T19:39:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1550114660b2840b136dbb8df36957ab6d787bf",
          "body": null,
          "is_bot": false,
          "headline": "Use PropertyNamesMatcher to report unknowns (#1502)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-13T19:38:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a5d2f81770c0f163c6e429bb53cfd07ae9d16cf6",
          "body": "…500)\n\nBumps [io.smallrye.common:smallrye-common-bom](https://github.com/smallrye/smallrye-common) from 2.17.0 to 2.17.1.\n- [Release notes](https://github.com/smallrye/smallrye-common/releases)\n- [Commits](https://github.com/smallrye/smallrye-common/compare/2.17.0...2.17.1)\n\n---\nupdated-dependencies\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.smallrye.common:smallrye-common-bom from 2.17.0 to 2.17.1 (#1…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-13T15:14:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f07abc76aa906914e2271571fa843b0fb6f32799",
          "body": "Bumps [io.sundr:sundr-maven-plugin](https://github.com/sundrio/sundrio) from 0.230.2 to 0.240.1.\n- [Commits](https://github.com/sundrio/sundrio/compare/0.230.2...0.240.1)\n\n---\nupdated-dependencies:\n- dependency-name: io.sundr:sundr-maven-plugin\n  dependency-version: 0.240.1\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.sundr:sundr-maven-plugin from 0.230.2 to 0.240.1 (#1499)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-13T15:13:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "359eb7123cfac0d0330333344528b65b177d3fe5",
          "body": null,
          "is_bot": false,
          "headline": "Update documentation dependencies (#1501)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-13T15:12:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54c945840deb1dd7db63741880a1de57a3ef5c14",
          "body": "Bumps [requests](https://github.com/psf/requests) from 2.32.4 to 2.33.0.\n- [Release notes](https://github.com/psf/requests/releases)\n- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)\n- [Commits](https://github.com/psf/requests/compare/v2.32.4...v2.33.0)\n\n---\nupdated-dependencies:\n-\n[…]\nts\n  dependency-version: 2.33.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump requests from 2.32.4 to 2.33.0 in /documentation (#1493)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-13T14:48:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fd68665f84d87b803b10625e695d460dcf783a3a",
          "body": null,
          "is_bot": false,
          "headline": "Some micro optimizations for EnvConfigSource (#1498)",
          "author_name": "Guillaume Smet",
          "author_login": "gsmet",
          "committed_at": "2026-04-02T14:47:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c60df60fbdaf08e433aa9e5e879047107bad077",
          "body": null,
          "is_bot": false,
          "headline": "Generate direct ctor call for ConfigMapping nested elements (#1497)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-02T14:45:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc2753bc3daa4bfa94fa15888abc1d2d408c4ad4",
          "body": "…e PropertyName as a key (#1496)",
          "is_bot": false,
          "headline": "Improve PropertyNamesMatcher and use it instead of structures that us…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-04-02T14:44:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d82fd7a5196083e488127b01d884aedadaf1d72",
          "body": "…equals (#1492)",
          "is_bot": false,
          "headline": "Prevent greedy wildcard from consuming star segments in PropertyName …",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-03-31T14:26:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9f26f019c14074c2bcf3c254b244ae03d57d282",
          "body": "Identifying prefixing that we ignore from the get go allows to filter\nthings a lot more efficiently and avoid populating filters with elements\nthat we will in any case not consider because of the ignored prefixes.\n\nThis reduces the population cost and also the interrogation cost.",
          "is_bot": false,
          "headline": "Add withMappingIgnorePrefix() API for optimized prefix filtering (#1491)",
          "author_name": "Guillaume Smet",
          "author_login": "gsmet",
          "committed_at": "2026-03-18T12:18:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df67ce4d56b02d6c4acdf01e96a9c4f841ff985a",
          "body": "…490)\n\nPropertyName hashCode() is not designed for being used in an\nHashSet/HashMap so we should avoid it at all costs.\nIt is both inefficient when populating the HashSet/HashMap and when\ngetting the elements from it.\n\nAlso fixes substring calculation for .** patterns (it was dropping the\ndot, which we actually want to keep).",
          "is_bot": false,
          "headline": "Optimize reportUnknown() to avoid PropertyName HashSet collisions (#1…",
          "author_name": "Guillaume Smet",
          "author_login": "gsmet",
          "committed_at": "2026-03-17T18:29:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0002b43048e50fbe4211d4d56406528f0254755e",
          "body": "Check if secretKeys is empty before calling contains() to avoid\nunnecessary allocations and hash lookups when there are no secret\nkeys configured.\n\nNote that again we shouldn't use a HashSet to store PropertyNames for\nsecret keys and that's something that IMHO requires a more global fix.\n\nAlso don't enter complex logic to match [ if there's no [ in the\nproperty name.",
          "is_bot": false,
          "headline": "Micro-optimizations in SmallRyeConfig property iteration (#1489)",
          "author_name": "Guillaume Smet",
          "author_login": "gsmet",
          "committed_at": "2026-03-17T18:28:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3eb8d1ecc9771ac72d6dccb348d5a55c7373cacc",
          "body": "Bumps `kotlin.version` from 2.3.10 to 2.3.20.\n\nUpdates `org.jetbrains.kotlin:kotlin-stdlib-jdk8` from 2.3.10 to 2.3.20\n- [Release notes](https://github.com/JetBrains/kotlin/releases)\n- [Changelog](https://github.com/JetBrains/kotlin/blob/v2.3.20/ChangeLog.md)\n- [Commits](https://github.com/JetBrains\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump kotlin.version from 2.3.10 to 2.3.20 (#1488)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-17T10:12:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6004b3fda851050062ef7e8e5956029189c511a4",
          "body": "It is used by CollectionConverter and it's quite frequent that the\ndefault value has only one simple element.",
          "is_bot": false,
          "headline": "Provide a fast path for StringUtil#split() (#1485)",
          "author_name": "Guillaume Smet",
          "author_login": "gsmet",
          "committed_at": "2026-03-11T08:13:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16c9139b6c51cb72fd4659bce625cde677656a8f",
          "body": "…487)\n\nBumps [io.smallrye.common:smallrye-common-bom](https://github.com/smallrye/smallrye-common) from 2.16.0 to 2.17.0.\n- [Release notes](https://github.com/smallrye/smallrye-common/releases)\n- [Commits](https://github.com/smallrye/smallrye-common/compare/2.16.0...2.17.0)\n\n---\nupdated-dependencies\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.smallrye.common:smallrye-common-bom from 2.16.0 to 2.17.0 (#1…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-11T08:11:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d119aa316dee839be58bd4b59633a204b7f1ef8",
          "body": "…#1483)\n\nBumps [io.github.dmlloyd.maven:module-services-plugin](https://github.com/dmlloyd/module-services-plugin) from 1.2 to 1.3.\n- [Release notes](https://github.com/dmlloyd/module-services-plugin/releases)\n- [Commits](https://github.com/dmlloyd/module-services-plugin/compare/1.2...1.3)\n\n---\nupda\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.github.dmlloyd.maven:module-services-plugin from 1.2 to 1.3 (…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-06T15:27:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a59321ddf2796b479cf59f02f0c744963c8e593e",
          "body": "…(#1484)\n\nBumps [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) from 3.6.1 to 3.6.2.\n- [Release notes](https://github.com/apache/maven-shade-plugin/releases)\n- [Commits](https://github.com/apache/maven-shade-plugin/compare/maven-shade-plugin-3.6.1...maven-\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-06T15:27:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9feea67d140fc9543b0a9f4e5faaecf03a07a920",
          "body": null,
          "is_bot": false,
          "headline": "Add NPE guard if profile value is null",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-03-03T21:43:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1ad5e40dd4cc4b5c4259f1739ac219801f0c6ed",
          "body": null,
          "is_bot": false,
          "headline": "Test @WithKeys and Env names",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-03-02T10:13:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ed7a85befe5480abf6bf2bd3730943ca3143edf",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifac\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump actions/upload-artifact from 6 to 7 (#1482)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-27T15:54:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ae305da79f030e1fcf76b4eb753caab05d6cb401",
          "body": "Bumps [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) from 2.5 to 2.6.\n- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.6..snakeyaml-2.5)\n\n---\nupdated-dependencies:\n- dependency-name: org.yaml:snakeyaml\n  dependency-version: '2.6'\n  dependency-type: \n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.yaml:snakeyaml from 2.5 to 2.6 (#1481)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-27T15:53:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2ddebaa80c7a9f3692449ee8300b03089dfc2c8",
          "body": "Bumps [com.typesafe:config](https://github.com/lightbend/config) from 1.4.5 to 1.4.6.\n- [Release notes](https://github.com/lightbend/config/releases)\n- [Changelog](https://github.com/lightbend/config/blob/main/NEWS.md)\n- [Commits](https://github.com/lightbend/config/compare/v1.4.5...v1.4.6)\n\n---\nupd\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.typesafe:config from 1.4.5 to 1.4.6 (#1480)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-27T15:53:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0ad96f1a34feaef262e4ae8876176d192e3f49a",
          "body": "Bumps [io.fabric8:docker-maven-plugin](https://github.com/fabric8io/docker-maven-plugin) from 0.48.0 to 0.48.1.\n- [Release notes](https://github.com/fabric8io/docker-maven-plugin/releases)\n- [Changelog](https://github.com/fabric8io/docker-maven-plugin/blob/master/doc/changelog.md)\n- [Commits](https:\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.fabric8:docker-maven-plugin from 0.48.0 to 0.48.1 (#1479)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-09T10:53:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "79f7f7671a17eabfc21d912510506547101c0e2f",
          "body": "…478)\n\nBumps [io.smallrye.common:smallrye-common-bom](https://github.com/smallrye/smallrye-common) from 2.15.0 to 2.16.0.\n- [Release notes](https://github.com/smallrye/smallrye-common/releases)\n- [Commits](https://github.com/smallrye/smallrye-common/compare/2.15.0...2.16.0)\n\n---\nupdated-dependencies\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump io.smallrye.common:smallrye-common-bom from 2.15.0 to 2.16.0 (#1…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-09T10:38:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0842b7810fc073aba8eedff850cf4c30f3e38e57",
          "body": null,
          "is_bot": false,
          "headline": "Immutable profiles (#1476)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-02-06T16:01:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b49fdd62c9726325e9af3f082a052620b87603bc",
          "body": "Bumps `kotlin.version` from 2.3.0 to 2.3.10.\n\nUpdates `org.jetbrains.kotlin:kotlin-stdlib-jdk8` from 2.3.0 to 2.3.10\n- [Release notes](https://github.com/JetBrains/kotlin/releases)\n- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)\n- [Commits](https://github.com/JetBrains/ko\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump kotlin.version from 2.3.0 to 2.3.10 (#1477)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-06T16:01:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "90c3da72d6fe1d03cb2bc1faf06a6ca0d1f0024a",
          "body": "The ASM dependency is only used by the mapping generator; all other functions work without this dependency.",
          "is_bot": false,
          "headline": "ASM dependency should be optional (#1475)",
          "author_name": "David M. Lloyd",
          "author_login": "dmlloyd",
          "committed_at": "2026-02-03T23:36:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10dd00578ccad4d5dcb97e814bf3da77466b5b51",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-01-28T19:12:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02a86077596c5a77d626bf75386f4523c44695f9",
          "body": null,
          "is_bot": true,
          "headline": "[maven-release-plugin] prepare release 3.16.0",
          "author_name": "smallrye-ci-releases[bot]",
          "author_login": "smallrye-ci-releases[bot]",
          "committed_at": "2026-01-28T19:12:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "983c40617638adcfc41ebd235f405d3842223965",
          "body": null,
          "is_bot": false,
          "headline": "Release 3.16.0 (#1473)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-01-28T19:11:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fe7bf59ee48f15468f3a489b51a56c01d4a0d9d",
          "body": null,
          "is_bot": false,
          "headline": "Fix JavaDoc generation problem for Jasypt",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-01-28T18:34:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67cc03f5a541ff6674ad7ad328f9666fa41a3f50",
          "body": null,
          "is_bot": false,
          "headline": "Fixed javadoc",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-01-28T18:25:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d9cc7853c28b42feef14be8f93aaedf6cf288f4",
          "body": null,
          "is_bot": false,
          "headline": "Deprecate and throw an Exception when using Jasypt (#1472)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-01-28T16:16:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b7a77cee877dc3ff54ccc7cb9b74f1a91ffd506",
          "body": null,
          "is_bot": false,
          "headline": "Add get methods to retrieve SmallRyeConfig directly (#1454)",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-01-28T16:14:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d728ba26afbdbbcd67b70165a8dcb28581d0713",
          "body": "Also avoid instantiating a loggeri that is not used.\n\nFollow-up of #1469",
          "is_bot": false,
          "headline": "Generalize enforcing the locale in loggers (#1471)",
          "author_name": "Guillaume Smet",
          "author_login": "gsmet",
          "committed_at": "2026-01-27T11:39:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae5cca65f4a0e6e1923d380b1a39b4840a04993d",
          "body": null,
          "is_bot": false,
          "headline": "Move comparator from `getConfigurableSources` into a field (#1470)",
          "author_name": "Georgios Andrianakis",
          "author_login": "geoand",
          "committed_at": "2026-01-26T15:31:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "801b0c8b886998ac145d4975a0a899a4b505c6f5",
          "body": "We don't have any translation yet so it's useless to actually try to\nload the localized classes.\n\nI added a comment to make sure people think about dropping the parameter\nif they add localized classes.\n\nPer discussion with David Lloyd and James Perkins.",
          "is_bot": false,
          "headline": "Enforce locale when initializing MessageLogger (#1469)",
          "author_name": "Guillaume Smet",
          "author_login": "gsmet",
          "committed_at": "2026-01-26T15:26:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fde4c56fd0d3f3f398873c04e7a412734ae8247e",
          "body": "This is done to remove the method reference that\nshows up in startup profiling.\n\nIt could also be argued that the resulting code\nis simpler",
          "is_bot": false,
          "headline": "Use custom comparator in `getConfigurableSources` (#1468)",
          "author_name": "Georgios Andrianakis",
          "author_login": "geoand",
          "committed_at": "2026-01-26T15:22:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5dc80698d3cd10cd716efc8e30ecda9b0b5ff0c9",
          "body": "…hing (#1466)",
          "is_bot": false,
          "headline": "Restrict the candidates property names for Environment Variables matc…",
          "author_name": "Roberto Cortez",
          "author_login": "radcortez",
          "committed_at": "2026-01-22T23:55:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d19cabe50570b2ad195af74dcfc94d63fcd1802",
          "body": null,
          "is_bot": false,
          "headline": "Fix JavaDoc generation problem for Zookeeper source (#1464)",
          "author_name": "David M. Lloyd",
          "author_login": "dmlloyd",
          "committed_at": "2026-01-20T20:22:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ef0a7632cbbd2f0842ae7faacf1e5bdade3f7f1",
          "body": "* Modularize SmallRye Config\n\nIntroduce module descriptors for all components of SmallRye Config. Fixes #644.\n\n* Remove logging processor from dependencies",
          "is_bot": false,
          "headline": "Modularize SmallRye Config (#1459)",
          "author_name": "David M. Lloyd",
          "author_login": "dmlloyd",
          "committed_at": "2026-01-20T15:07:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 178,
      "latest_release_at": "2026-07-15T17:01:57Z",
      "latest_release_tag": "3.18.1",
      "releases_from_tags": false,
      "days_since_last_push": 2,
      "active_weeks_last_year": 46,
      "days_since_latest_release": 9,
      "mean_days_between_releases": 33.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "io.smallrye.config:smallrye-config",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.smallrye.config/smallrye-config",
          "is_deprecated": false,
          "latest_version": "3.18.1",
          "repository_url": null,
          "versions_count": 129,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T17:42:55Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.smallrye.config:smallrye-config-common",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.smallrye.config/smallrye-config-common",
          "is_deprecated": false,
          "latest_version": "3.18.1",
          "repository_url": null,
          "versions_count": 129,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T17:42:59Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.smallrye.config:smallrye-config-validator",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.smallrye.config/smallrye-config-validator",
          "is_deprecated": false,
          "latest_version": "3.18.1",
          "repository_url": null,
          "versions_count": 94,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T17:42:59Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.smallrye.config:smallrye-config-microprofile",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.smallrye.config/smallrye-config-microprofile",
          "is_deprecated": false,
          "latest_version": "3.18.1",
          "repository_url": null,
          "versions_count": 2,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T17:43:00Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.smallrye.config:smallrye-config-core",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.smallrye.config/smallrye-config-core",
          "is_deprecated": false,
          "latest_version": "3.18.1",
          "repository_url": null,
          "versions_count": 101,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T17:43:00Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        }
      ]
    },
    "popularity": {
      "forks": 140,
      "stars": 204,
      "watchers": 9,
      "fork_history": {
        "days": [
          {
            "date": "2018-05-23",
            "count": 1
          },
          {
            "date": "2018-05-29",
            "count": 1
          },
          {
            "date": "2018-06-26",
            "count": 1
          },
          {
            "date": "2018-06-29",
            "count": 1
          },
          {
            "date": "2018-07-19",
            "count": 1
          },
          {
            "date": "2018-08-30",
            "count": 1
          },
          {
            "date": "2018-09-06",
            "count": 1
          },
          {
            "date": "2018-09-07",
            "count": 2
          },
          {
            "date": "2018-10-23",
            "count": 1
          },
          {
            "date": "2018-11-03",
            "count": 1
          },
          {
            "date": "2018-11-09",
            "count": 1
          },
          {
            "date": "2018-11-26",
            "count": 1
          },
          {
            "date": "2018-12-13",
            "count": 1
          },
          {
            "date": "2018-12-18",
            "count": 1
          },
          {
            "date": "2019-01-10",
            "count": 2
          },
          {
            "date": "2019-02-08",
            "count": 1
          },
          {
            "date": "2019-03-31",
            "count": 1
          },
          {
            "date": "2019-05-10",
            "count": 1
          },
          {
            "date": "2019-05-12",
            "count": 1
          },
          {
            "date": "2019-05-21",
            "count": 1
          },
          {
            "date": "2019-05-31",
            "count": 1
          },
          {
            "date": "2019-07-02",
            "count": 1
          },
          {
            "date": "2019-07-30",
            "count": 1
          },
          {
            "date": "2019-08-09",
            "count": 1
          },
          {
            "date": "2019-09-12",
            "count": 1
          },
          {
            "date": "2019-09-26",
            "count": 1
          },
          {
            "date": "2019-10-09",
            "count": 1
          },
          {
            "date": "2019-10-30",
            "count": 1
          },
          {
            "date": "2019-11-05",
            "count": 1
          },
          {
            "date": "2019-11-08",
            "count": 1
          },
          {
            "date": "2019-12-04",
            "count": 1
          },
          {
            "date": "2019-12-11",
            "count": 1
          },
          {
            "date": "2020-01-10",
            "count": 1
          },
          {
            "date": "2020-01-28",
            "count": 1
          },
          {
            "date": "2020-02-05",
            "count": 1
          },
          {
            "date": "2020-02-11",
            "count": 1
          },
          {
            "date": "2020-02-21",
            "count": 1
          },
          {
            "date": "2020-02-25",
            "count": 1
          },
          {
            "date": "2020-03-13",
            "count": 1
          },
          {
            "date": "2020-03-24",
            "count": 1
          },
          {
            "date": "2020-04-11",
            "count": 1
          },
          {
            "date": "2020-05-06",
            "count": 1
          },
          {
            "date": "2020-05-07",
            "count": 1
          },
          {
            "date": "2020-05-31",
            "count": 1
          },
          {
            "date": "2020-06-05",
            "count": 1
          },
          {
            "date": "2020-06-29",
            "count": 1
          },
          {
            "date": "2020-07-13",
            "count": 1
          },
          {
            "date": "2020-07-16",
            "count": 1
          },
          {
            "date": "2020-07-30",
            "count": 1
          },
          {
            "date": "2020-08-21",
            "count": 1
          },
          {
            "date": "2020-08-22",
            "count": 1
          },
          {
            "date": "2020-08-27",
            "count": 1
          },
          {
            "date": "2020-09-04",
            "count": 1
          },
          {
            "date": "2020-10-12",
            "count": 1
          },
          {
            "date": "2020-12-18",
            "count": 1
          },
          {
            "date": "2021-02-13",
            "count": 1
          },
          {
            "date": "2021-02-17",
            "count": 1
          },
          {
            "date": "2021-03-16",
            "count": 1
          },
          {
            "date": "2021-05-16",
            "count": 1
          },
          {
            "date": "2021-05-17",
            "count": 1
          },
          {
            "date": "2021-05-21",
            "count": 1
          },
          {
            "date": "2021-05-23",
            "count": 1
          },
          {
            "date": "2021-08-17",
            "count": 1
          },
          {
            "date": "2021-08-25",
            "count": 1
          },
          {
            "date": "2021-10-07",
            "count": 1
          },
          {
            "date": "2021-10-14",
            "count": 1
          },
          {
            "date": "2021-11-12",
            "count": 1
          },
          {
            "date": "2021-11-26",
            "count": 1
          },
          {
            "date": "2021-12-08",
            "count": 1
          },
          {
            "date": "2021-12-10",
            "count": 1
          },
          {
            "date": "2021-12-15",
            "count": 1
          },
          {
            "date": "2022-01-22",
            "count": 1
          },
          {
            "date": "2022-01-24",
            "count": 1
          },
          {
            "date": "2022-02-07",
            "count": 1
          },
          {
            "date": "2022-03-04",
            "count": 1
          },
          {
            "date": "2022-03-16",
            "count": 1
          },
          {
            "date": "2022-05-06",
            "count": 1
          },
          {
            "date": "2022-05-18",
            "count": 1
          },
          {
            "date": "2022-06-10",
            "count": 1
          },
          {
            "date": "2022-07-13",
            "count": 1
          },
          {
            "date": "2022-08-03",
            "count": 1
          },
          {
            "date": "2022-08-16",
            "count": 1
          },
          {
            "date": "2022-08-31",
            "count": 1
          },
          {
            "date": "2022-09-05",
            "count": 1
          },
          {
            "date": "2022-09-30",
            "count": 2
          },
          {
            "date": "2022-10-11",
            "count": 1
          },
          {
            "date": "2022-12-04",
            "count": 1
          },
          {
            "date": "2023-01-05",
            "count": 1
          },
          {
            "date": "2023-03-10",
            "count": 1
          },
          {
            "date": "2023-03-14",
            "count": 1
          },
          {
            "date": "2023-03-18",
            "count": 1
          },
          {
            "date": "2023-03-23",
            "count": 2
          },
          {
            "date": "2023-04-18",
            "count": 1
          },
          {
            "date": "2023-05-18",
            "count": 1
          },
          {
            "date": "2023-08-27",
            "count": 1
          },
          {
            "date": "2023-09-01",
            "count": 1
          },
          {
            "date": "2023-09-09",
            "count": 1
          },
          {
            "date": "2023-11-01",
            "count": 1
          },
          {
            "date": "2023-11-08",
            "count": 1
          },
          {
            "date": "2023-11-29",
            "count": 1
          },
          {
            "date": "2023-12-12",
            "count": 1
          },
          {
            "date": "2024-01-08",
            "count": 1
          },
          {
            "date": "2024-01-11",
            "count": 1
          },
          {
            "date": "2024-01-12",
            "count": 1
          },
          {
            "date": "2024-03-06",
            "count": 1
          },
          {
            "date": "2024-03-13",
            "count": 1
          },
          {
            "date": "2024-05-13",
            "count": 1
          },
          {
            "date": "2024-07-04",
            "count": 1
          },
          {
            "date": "2024-07-24",
            "count": 1
          },
          {
            "date": "2024-10-10",
            "count": 1
          },
          {
            "date": "2024-11-11",
            "count": 2
          },
          {
            "date": "2024-12-13",
            "count": 1
          },
          {
            "date": "2024-12-17",
            "count": 1
          },
          {
            "date": "2025-01-13",
            "count": 1
          },
          {
            "date": "2025-01-29",
            "count": 1
          },
          {
            "date": "2025-02-24",
            "count": 1
          },
          {
            "date": "2025-04-07",
            "count": 1
          },
          {
            "date": "2025-05-12",
            "count": 1
          },
          {
            "date": "2025-05-23",
            "count": 2
          },
          {
            "date": "2025-07-14",
            "count": 1
          },
          {
            "date": "2025-08-17",
            "count": 1
          },
          {
            "date": "2025-10-02",
            "count": 1
          },
          {
            "date": "2025-11-05",
            "count": 1
          },
          {
            "date": "2025-12-17",
            "count": 1
          },
          {
            "date": "2025-12-29",
            "count": 1
          },
          {
            "date": "2026-01-26",
            "count": 1
          },
          {
            "date": "2026-04-24",
            "count": 1
          },
          {
            "date": "2026-04-27",
            "count": 1
          },
          {
            "date": "2026-05-12",
            "count": 1
          },
          {
            "date": "2026-06-18",
            "count": 1
          },
          {
            "date": "2026-06-21",
            "count": 1
          },
          {
            "date": "2026-07-03",
            "count": 1
          },
          {
            "date": "2026-07-17",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 139,
        "total_forks": 140
      },
      "star_history": null,
      "open_issues_and_prs": 34
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "cdi/pom.xml",
        "common/pom.xml",
        "coverage/pom.xml",
        "documentation/pom.xml",
        "examples/configmap/pom.xml",
        "examples/expansion/pom.xml",
        "examples/interceptors/pom.xml",
        "examples/mapping/pom.xml",
        "examples/pom.xml",
        "examples/profiles/pom.xml",
        "implementation/pom.xml",
        "microprofile/pom.xml",
        "pom.xml",
        "sources/file-system/pom.xml",
        "sources/hocon/pom.xml",
        "sources/keystore/pom.xml",
        "sources/yaml/pom.xml",
        "sources/zookeeper/pom.xml",
        "testsuite/extra/pom.xml",
        "testsuite/pom.xml",
        "testsuite/tck/pom.xml",
        "utils/cdi-provider/pom.xml",
        "utils/crypto/pom.xml",
        "utils/events/pom.xml",
        "validator/pom.xml"
      ],
      "largest_source_bytes": 101429,
      "source_files_sampled": 279,
      "oversized_source_files": 5,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "cdi/pom.xml",
        "common/pom.xml",
        "coverage/pom.xml",
        "documentation/Pipfile",
        "documentation/pom.xml",
        "examples/pom.xml",
        "implementation/pom.xml",
        "microprofile/pom.xml",
        "pom.xml",
        "testsuite/pom.xml",
        "validator/pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 20,
        "malicious_count": 0,
        "assessed_package": "maven:io.smallrye.config:smallrye-config@3.18.1",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "maven",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "io.smallrye.config:smallrye-config-core",
          "manifest": "cdi/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.config:smallrye-config-microprofile",
          "manifest": "cdi/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.jboss.logging:jboss-logging",
          "manifest": "cdi/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.jboss.logging:jboss-logging-annotations",
          "manifest": "cdi/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.jboss.logging:jboss-logging-processor",
          "manifest": "cdi/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.junit.jupiter:junit-jupiter",
          "manifest": "cdi/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.jboss.weld:weld-junit5",
          "manifest": "cdi/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.eclipse.microprofile.config:microprofile-config-api",
          "manifest": "common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.common:smallrye-common-classloader",
          "manifest": "common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.jboss.logging:jboss-logging",
          "manifest": "common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.junit.jupiter:junit-jupiter",
          "manifest": "common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.config:smallrye-config-common",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.config:smallrye-config-core",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.config:smallrye-config",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.config:smallrye-config-microprofile",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-validator",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-source-file-system",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-source-hocon",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-source-zookeeper",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-source-yaml",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-source-keystore",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-crypto",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-events",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-source-injection",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-test-extra",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-tck",
          "manifest": "coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.eclipse.microprofile.config:microprofile-config-api",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "jakarta.annotation:jakarta.annotation-api",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.common:smallrye-common-annotation",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.common:smallrye-common-expression",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.common:smallrye-common-constraint",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.common:smallrye-common-classloader",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.jboss.logging:jboss-logging",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.jboss.logging:jboss-logging-annotations",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.ow2.asm:asm",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.config:smallrye-config-common",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.junit.jupiter:junit-jupiter",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.testing:smallrye-testing-utilities",
          "manifest": "implementation/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.smallrye.config:smallrye-config-core",
          "manifest": "microprofile/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.junit.jupiter:junit-jupiter",
          "manifest": "microprofile/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.eclipse.microprofile.config:microprofile-config-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${version.eclipse.microprofile.config}"
        },
        {
          "name": "org.ow2.asm:asm",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${version.asm}"
        },
        {
          "name": "io.smallrye.common:smallrye-common-bom",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${version.smallrye.common}"
        },
        {
          "name": "io.smallrye.testing:smallrye-testing-bom",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${version.smallrye.testing}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-common",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.config:smallrye-config",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.smallrye.testing:smallrye-testing-bom-tck",
          "manifest": "testsuite/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${version.smallrye.testing}"
        },
        {
          "name": "io.smallrye.config:smallrye-config",
          "manifest": "validator/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.junit.jupiter:junit-jupiter",
          "manifest": "validator/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "io.smallrye.common:smallrye-common-annotation",
            "direct": true,
            "version": "2.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.common:smallrye-common-classloader",
            "direct": true,
            "version": "2.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.common:smallrye-common-constraint",
            "direct": true,
            "version": "2.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.common:smallrye-common-expression",
            "direct": true,
            "version": "2.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-common",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-core",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-crypto",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-events",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-microprofile",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-source-file-system",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-source-hocon",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-source-injection",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-source-keystore",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-source-yaml",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-source-zookeeper",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-tck",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-test-extra",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.config:smallrye-config-validator",
            "direct": true,
            "version": "3.18.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.testing:smallrye-testing-utilities",
            "direct": true,
            "version": "2.5.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.annotation:jakarta.annotation-api",
            "direct": true,
            "version": "2.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.microprofile.config:microprofile-config-api",
            "direct": true,
            "version": "3.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.logging:jboss-logging",
            "direct": true,
            "version": "3.6.3.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.logging:jboss-logging-annotations",
            "direct": true,
            "version": "3.0.4.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.logging:jboss-logging-processor",
            "direct": true,
            "version": "3.0.4.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-junit5",
            "direct": true,
            "version": "4.0.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-junit5",
            "direct": true,
            "version": "4.0.5.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter",
            "direct": true,
            "version": "6.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.ow2.asm:asm",
            "direct": true,
            "version": "9.10.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.beust:jcommander",
            "direct": false,
            "version": "1.82",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml:classmate",
            "direct": false,
            "version": "1.7.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs-annotations",
            "direct": false,
            "version": "4.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs-annotations",
            "direct": false,
            "version": "4.8.5",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.code.findbugs:jsr305",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.errorprone:error_prone_annotations",
            "direct": false,
            "version": "2.18.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.guava:failureaccess",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.guava:guava",
            "direct": false,
            "version": "32.0.0-jre",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.guava:listenablefuture",
            "direct": false,
            "version": "9999.0-empty-to-avoid-conflict-with-guava",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.j2objc:j2objc-annotations",
            "direct": false,
            "version": "2.8",
            "ecosystem": "maven"
          },
          {
            "name": "com.typesafe:config",
            "direct": false,
            "version": "1.4.9",
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": false,
            "version": "2.17.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.dropwizard.metrics:metrics-core",
            "direct": false,
            "version": "3.2.5",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-buffer",
            "direct": false,
            "version": "4.1.113.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-codec",
            "direct": false,
            "version": "4.1.113.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-common",
            "direct": false,
            "version": "4.1.113.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-handler",
            "direct": false,
            "version": "4.1.113.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-resolver",
            "direct": false,
            "version": "4.1.113.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-tcnative-boringssl-static",
            "direct": false,
            "version": "2.0.66.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-tcnative-classes",
            "direct": false,
            "version": "2.0.66.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-transport",
            "direct": false,
            "version": "4.1.113.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-transport-classes-epoll",
            "direct": false,
            "version": "4.1.113.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-transport-native-epoll",
            "direct": false,
            "version": "4.1.113.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-transport-native-unix-common",
            "direct": false,
            "version": "4.1.113.Final",
            "ecosystem": "maven"
          },
          {
            "name": "io.smallrye.common:smallrye-common-function",
            "direct": false,
            "version": "2.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.ejb:jakarta.ejb-api",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.el:jakarta.el-api",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.el:jakarta.el-api",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.enterprise:jakarta.enterprise.cdi-api",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.enterprise:jakarta.enterprise.cdi-el-api",
            "direct": false,
            "version": "4.1.0-M1",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.enterprise:jakarta.enterprise.lang-model",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.inject:jakarta.inject-api",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.interceptor:jakarta.interceptor-api",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.persistence:jakarta.persistence-api",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.transaction:jakarta.transaction-api",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.validation:jakarta.validation-api",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "net.bytebuddy:byte-buddy",
            "direct": false,
            "version": "1.18.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.curator:curator-client",
            "direct": false,
            "version": "5.9.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.curator:curator-framework",
            "direct": false,
            "version": "5.9.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.curator:curator-recipes",
            "direct": false,
            "version": "5.9.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.curator:curator-test",
            "direct": false,
            "version": "5.9.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.openwebbeans.arquillian:owb-arquillian-standalone",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.openwebbeans:openwebbeans-impl",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.openwebbeans:openwebbeans-spi",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.xbean:xbean-asm9-shaded",
            "direct": false,
            "version": "4.26",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.xbean:xbean-finder-shaded",
            "direct": false,
            "version": "4.26",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.yetus:audience-annotations",
            "direct": false,
            "version": "0.12.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.zookeeper:zookeeper",
            "direct": false,
            "version": "3.9.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.zookeeper:zookeeper-jute",
            "direct": false,
            "version": "3.9.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apiguardian:apiguardian-api",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.assertj:assertj-core",
            "direct": false,
            "version": "3.27.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.checkerframework:checker-qual",
            "direct": false,
            "version": "3.33.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.microprofile.config:microprofile-config-tck",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish.expressly:expressly",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.hamcrest:hamcrest-all",
            "direct": false,
            "version": "1.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.hibernate.validator:hibernate-validator",
            "direct": false,
            "version": "9.1.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.config:arquillian-config-api",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.config:arquillian-config-impl-base",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.config:arquillian-config-spi",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.container:arquillian-container-impl-base",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.container:arquillian-container-spi",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.container:arquillian-container-test-api",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.container:arquillian-container-test-impl-base",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.container:arquillian-container-test-spi",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.container:arquillian-weld-embedded",
            "direct": false,
            "version": "4.0.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.core:arquillian-core-api",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.core:arquillian-core-impl-base",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.core:arquillian-core-spi",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.junit5:arquillian-junit5-container",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.junit5:arquillian-junit5-core",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.test:arquillian-test-api",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.test:arquillian-test-impl-base",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.test:arquillian-test-spi",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.testenricher:arquillian-testenricher-cdi-jakarta",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.testng:arquillian-testng-container",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.arquillian.testng:arquillian-testng-core",
            "direct": false,
            "version": "1.8.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.classfilewriter:jboss-classfilewriter",
            "direct": false,
            "version": "1.2.5.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.classfilewriter:jboss-classfilewriter",
            "direct": false,
            "version": "1.3.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.jdeparser:jdeparser",
            "direct": false,
            "version": "2.0.3.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-api-base",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.shrinkwrap.descriptors:shrinkwrap-descriptors-spi",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.shrinkwrap:shrinkwrap-api",
            "direct": false,
            "version": "1.2.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.shrinkwrap:shrinkwrap-impl-base",
            "direct": false,
            "version": "1.2.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.shrinkwrap:shrinkwrap-spi",
            "direct": false,
            "version": "1.2.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld.environment:weld-environment-common",
            "direct": false,
            "version": "5.0.0.SP1",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld.environment:weld-environment-common",
            "direct": false,
            "version": "5.1.6.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld.probe:weld-probe-core",
            "direct": false,
            "version": "5.0.0.SP1",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld.se:weld-se-core",
            "direct": false,
            "version": "5.0.0.SP1",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld.se:weld-se-core",
            "direct": false,
            "version": "5.1.6.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-api",
            "direct": false,
            "version": "5.0.SP3",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-core-impl",
            "direct": false,
            "version": "5.1.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-core-impl",
            "direct": false,
            "version": "5.1.6.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-junit-common",
            "direct": false,
            "version": "4.0.0.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-junit-common",
            "direct": false,
            "version": "4.0.5.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-lite-extension-translator",
            "direct": false,
            "version": "5.0.0.SP1",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-lite-extension-translator",
            "direct": false,
            "version": "5.1.6.Final",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-lite-extension-translator",
            "direct": false,
            "version": "6.0.0.Alpha1",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-spi",
            "direct": false,
            "version": "5.0.SP3",
            "ecosystem": "maven"
          },
          {
            "name": "org.jetbrains.kotlin:kotlin-stdlib",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.jetbrains.kotlin:kotlin-stdlib-jdk7",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.jetbrains.kotlin:kotlin-stdlib-jdk8",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.jetbrains.kotlin:kotlin-test",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.jetbrains:annotations",
            "direct": false,
            "version": "13.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-api",
            "direct": false,
            "version": "5.11.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-api",
            "direct": false,
            "version": "5.14.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-engine",
            "direct": false,
            "version": "5.11.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-engine",
            "direct": false,
            "version": "5.14.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-params",
            "direct": false,
            "version": "5.11.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-params",
            "direct": false,
            "version": "5.14.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.platform:junit-platform-commons",
            "direct": false,
            "version": "1.11.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.platform:junit-platform-commons",
            "direct": false,
            "version": "1.14.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.platform:junit-platform-engine",
            "direct": false,
            "version": "1.11.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.platform:junit-platform-engine",
            "direct": false,
            "version": "1.14.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.platform:junit-platform-launcher",
            "direct": false,
            "version": "1.14.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.platform:junit-platform-testkit",
            "direct": false,
            "version": "1.14.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.opentest4j:opentest4j",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": false,
            "version": "1.7.25",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": false,
            "version": "1.7.30",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": false,
            "version": "2.0.17",
            "ecosystem": "maven"
          },
          {
            "name": "org.testng:testng",
            "direct": false,
            "version": "7.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.webjars:jquery",
            "direct": false,
            "version": "3.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.xerial.snappy:snappy-java",
            "direct": false,
            "version": "1.1.10.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.yaml:snakeyaml",
            "direct": false,
            "version": "2.6",
            "ecosystem": "maven"
          },
          {
            "name": "babel",
            "direct": false,
            "version": "2.18.0",
            "ecosystem": "pypi"
          },
          {
            "name": "backrefs",
            "direct": false,
            "version": "6.2",
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": false,
            "version": "2026.2.25",
            "ecosystem": "pypi"
          },
          {
            "name": "charset-normalizer",
            "direct": false,
            "version": "3.4.7",
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.3.2",
            "ecosystem": "pypi"
          },
          {
            "name": "colorama",
            "direct": false,
            "version": "0.4.6",
            "ecosystem": "pypi"
          },
          {
            "name": "ghp-import",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "hjson",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.15",
            "ecosystem": "pypi"
          },
          {
            "name": "jinja2",
            "direct": false,
            "version": "3.1.6",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown",
            "direct": false,
            "version": "3.10.2",
            "ecosystem": "pypi"
          },
          {
            "name": "markupsafe",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "mergedeep",
            "direct": false,
            "version": "1.3.4",
            "ecosystem": "pypi"
          },
          {
            "name": "mike",
            "direct": false,
            "version": "2.1.4",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs",
            "direct": false,
            "version": "1.6.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-get-deps",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-macros-plugin",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-material",
            "direct": false,
            "version": "9.7.6",
            "ecosystem": "pypi"
          },
          {
            "name": "mkdocs-material-extensions",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "packaging",
            "direct": false,
            "version": "26.0",
            "ecosystem": "pypi"
          },
          {
            "name": "paginate",
            "direct": false,
            "version": "0.5.7",
            "ecosystem": "pypi"
          },
          {
            "name": "pathspec",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "pypi"
          },
          {
            "name": "platformdirs",
            "direct": false,
            "version": "4.9.6",
            "ecosystem": "pypi"
          },
          {
            "name": "pygments",
            "direct": false,
            "version": "2.20.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pymdown-extensions",
            "direct": false,
            "version": "10.21.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pyparsing",
            "direct": false,
            "version": "3.3.2",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dateutil",
            "direct": false,
            "version": "2.9.0.post0",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml-env-tag",
            "direct": false,
            "version": "1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": false,
            "version": "2.33.1",
            "ecosystem": "pypi"
          },
          {
            "name": "six",
            "direct": false,
            "version": "1.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "super-collections",
            "direct": false,
            "version": "0.6.2",
            "ecosystem": "pypi"
          },
          {
            "name": "termcolor",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "urllib3",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "verspec",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "watchdog",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 188,
        "direct_count": 29,
        "indirect_count": 159
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 8,
        "merged_prs": 1093,
        "open_issues": 26,
        "closed_ratio": 0.914,
        "closed_issues": 276,
        "closed_unmerged_prs": 146
      },
      "bus_factor": 1,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "radcortez",
          "commits": 867,
          "avatar_url": "https://avatars.githubusercontent.com/u/5796305?v=4"
        },
        {
          "type": "User",
          "login": "kenfinnigan",
          "commits": 127,
          "avatar_url": "https://avatars.githubusercontent.com/u/441240?v=4"
        },
        {
          "type": "User",
          "login": "dmlloyd",
          "commits": 125,
          "avatar_url": "https://avatars.githubusercontent.com/u/124581?v=4"
        },
        {
          "type": "User",
          "login": "jmesnil",
          "commits": 43,
          "avatar_url": "https://avatars.githubusercontent.com/u/6193?v=4"
        },
        {
          "type": "User",
          "login": "dependabot-support",
          "commits": 23,
          "avatar_url": "https://avatars.githubusercontent.com/u/112581971?v=4"
        },
        {
          "type": "User",
          "login": "gsmet",
          "commits": 18,
          "avatar_url": "https://avatars.githubusercontent.com/u/1279749?v=4"
        },
        {
          "type": "User",
          "login": "geoand",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/4374975?v=4"
        },
        {
          "type": "User",
          "login": "gastaldi",
          "commits": 10,
          "avatar_url": "https://avatars.githubusercontent.com/u/54133?v=4"
        },
        {
          "type": "User",
          "login": "phillip-kruger",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/6836179?v=4"
        },
        {
          "type": "User",
          "login": "tevans78",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/22099681?v=4"
        }
      ],
      "contributors_sampled": 69,
      "top_contributor_share": 0.657
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build.yml",
        "prepare-release.yml",
        "publish-docs.yml",
        "publish-tck.yml",
        "release.yml",
        "review-release.yml",
        "update-milestone.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Pipfile.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 8,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "22 out of 22 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 2,
            "reason": "Found 5/21 approved changesets -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 46 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "8a8abf701f1f4901c35fc70ff9896fbc1d37bfa9",
        "ran_at": "2026-07-25T02:55:47Z",
        "aggregate_score": 5.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T06:12:39Z",
      "oldest_open_prs": [
        {
          "number": 983,
          "created_at": "2023-08-24T16:16:10Z",
          "last_comment_at": "2023-08-24T16:55:44Z",
          "last_comment_author": "gastaldi"
        },
        {
          "number": 1021,
          "created_at": "2023-10-03T19:51:08Z",
          "last_comment_at": "2025-09-18T19:42:41Z",
          "last_comment_author": "dmlloyd"
        },
        {
          "number": 1194,
          "created_at": "2024-07-04T16:27:41Z",
          "last_comment_at": "2024-07-12T14:42:32Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 1467,
          "created_at": "2026-01-26T10:10:37Z",
          "last_comment_at": "2026-01-29T12:47:27Z",
          "last_comment_author": "damianorenfer"
        },
        {
          "number": 1521,
          "created_at": "2026-05-12T09:02:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1542,
          "created_at": "2026-06-26T16:40:29Z",
          "last_comment_at": "2026-06-26T16:41:04Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 1545,
          "created_at": "2026-07-15T06:21:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1549,
          "created_at": "2026-07-20T06:21:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-22T18:21:38Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 40,
          "created_at": "2018-10-25T08:09:20Z",
          "last_comment_at": "2019-09-27T14:04:33Z",
          "last_comment_author": "dmlloyd"
        },
        {
          "number": 162,
          "created_at": "2019-09-12T20:05:10Z",
          "last_comment_at": "2020-04-14T09:37:51Z",
          "last_comment_author": "svenhaag"
        },
        {
          "number": 277,
          "created_at": "2020-04-12T12:12:01Z",
          "last_comment_at": "2020-04-13T11:08:06Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 746,
          "created_at": "2022-04-29T07:39:33Z",
          "last_comment_at": "2022-05-05T00:04:26Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 844,
          "created_at": "2022-11-10T05:42:40Z",
          "last_comment_at": "2023-07-05T19:38:44Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 845,
          "created_at": "2022-11-17T07:01:24Z",
          "last_comment_at": "2024-06-27T20:11:42Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 981,
          "created_at": "2023-08-23T03:25:37Z",
          "last_comment_at": "2023-09-01T13:35:02Z",
          "last_comment_author": "dmlloyd"
        },
        {
          "number": 990,
          "created_at": "2023-09-02T01:10:44Z",
          "last_comment_at": "2023-09-06T21:07:19Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 1001,
          "created_at": "2023-09-21T16:57:35Z",
          "last_comment_at": "2023-11-03T15:30:21Z",
          "last_comment_author": "dmlloyd"
        },
        {
          "number": 1002,
          "created_at": "2023-09-21T20:53:29Z",
          "last_comment_at": "2023-09-29T15:04:22Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 1005,
          "created_at": "2023-09-22T14:48:08Z",
          "last_comment_at": "2023-09-22T15:10:05Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 1006,
          "created_at": "2023-09-22T15:13:07Z",
          "last_comment_at": "2023-09-22T15:25:22Z",
          "last_comment_author": "dmlloyd"
        },
        {
          "number": 1037,
          "created_at": "2023-11-02T20:20:21Z",
          "last_comment_at": "2023-11-17T15:59:00Z",
          "last_comment_author": "dmlloyd"
        },
        {
          "number": 1056,
          "created_at": "2023-11-29T16:20:17Z",
          "last_comment_at": "2025-06-09T10:16:55Z",
          "last_comment_author": "rtmolnar"
        },
        {
          "number": 1057,
          "created_at": "2023-12-04T09:34:22Z",
          "last_comment_at": "2023-12-15T10:26:36Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 1077,
          "created_at": "2024-01-03T17:25:05Z",
          "last_comment_at": "2024-01-17T14:29:11Z",
          "last_comment_author": "dmlloyd"
        },
        {
          "number": 1081,
          "created_at": "2024-01-08T22:33:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1098,
          "created_at": "2024-01-29T00:50:53Z",
          "last_comment_at": "2024-01-30T18:15:48Z",
          "last_comment_author": "radcortez"
        },
        {
          "number": 1105,
          "created_at": "2024-02-02T10:52:30Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1115,
          "created_at": "2024-02-09T10:38:06Z",
          "last_comment_at": "2024-02-09T13:06:03Z",
          "last_comment_author": "radcortez"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/smallrye/smallrye-config",
    "host": "github.com",
    "name": "smallrye-config",
    "owner": "smallrye"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 72,
      "inputs": {
        "security": 63,
        "vitality": 94,
        "community": 55,
        "governance": 70,
        "engineering": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 94,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 96,
            "inputs": {
              "commits_last_year": 178,
              "human_commit_share": 0.55,
              "days_since_last_push": 2,
              "active_weeks_last_year": 46
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "46/52 weeks with commits",
                "points": 31.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 46
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "178 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 178
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "3.18.1",
              "releases_from_tags": false,
              "days_since_latest_release": 9,
              "mean_days_between_releases": 33.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 9 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~33.2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 33.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 2,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 2 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 55,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "forks": 140,
              "stars": 204,
              "watchers": 9,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "204 stars",
                "points": 37.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 204
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "140 forks",
                "points": 17.9,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 140
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "9 watchers",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 70,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 69,
              "top_contributor_share": 0.657
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 66% of commits",
                "points": 7.7,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 66
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "69 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 69
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 46 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "merged_prs": 1093,
              "open_issues": 26,
              "closed_issues": 276,
              "issue_closed_ratio": 0.914,
              "closed_unmerged_prs": 146
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "91% of issues closed",
                "points": 42.7,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 91
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1093/1239 decided PRs merged",
                "points": 33.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1093,
                      "decided": 1239
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 5/21 approved changesets -- score normalized to 2",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "followers": 175,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "smallrye",
              "public_repos": 53,
              "account_age_days": 3006
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "175 followers of smallrye",
                "points": 16.1,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 175,
                      "login": "smallrye"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "53 public repos, account ~8 yr old",
                "points": 24.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 53
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 8
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "io.smallrye.config:smallrye-config",
                "io.smallrye.config:smallrye-config-common",
                "io.smallrye.config:smallrye-config-validator",
                "io.smallrye.config:smallrye-config-microprofile",
                "io.smallrye.config:smallrye-config-core"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 9
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "5 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 5,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 9 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "129 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 129
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "7 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "22 out of 22 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "microprofile",
                "microservices",
                "config",
                "configuration",
                "java"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 63,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 54,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 5.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "22 out of 22 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 5/21 approved changesets -- score normalized to 2",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 46 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:io.smallrye.config:smallrye-config@3.18.1 runtime dependency closure — what installing the published package pulls in — 20 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:io.smallrye.config:smallrye-config@3.18.1",
                  "assessed": 20
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 20,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 20,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 28
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 56,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 31,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.582,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "32 of 55 human commits state their intent (structured subject or explanatory body)",
                "points": 31,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 32,
                      "sampled": 55
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Pipfile.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "cdi/pom.xml",
                "common/pom.xml",
                "coverage/pom.xml",
                "documentation/pom.xml",
                "examples/configmap/pom.xml",
                "examples/expansion/pom.xml",
                "examples/interceptors/pom.xml",
                "examples/mapping/pom.xml",
                "examples/pom.xml",
                "examples/profiles/pom.xml",
                "implementation/pom.xml",
                "microprofile/pom.xml",
                "pom.xml",
                "sources/file-system/pom.xml",
                "sources/hocon/pom.xml",
                "sources/keystore/pom.xml",
                "sources/yaml/pom.xml",
                "sources/zookeeper/pom.xml",
                "testsuite/extra/pom.xml",
                "testsuite/pom.xml",
                "testsuite/tck/pom.xml",
                "utils/cdi-provider/pom.xml",
                "utils/crypto/pom.xml",
                "utils/events/pom.xml",
                "validator/pom.xml"
              ],
              "dependency_bot_commit_share": 0.33
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "cdi/pom.xml, common/pom.xml, coverage/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "cdi/pom.xml, common/pom.xml, coverage/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "33 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 33,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 101429,
              "source_files_sampled": 279,
              "oversized_source_files": 5
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "5/279 source files over 60KB",
                "points": 54,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 279,
                      "oversized": 5
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T02:56:12.421239Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/smallrye/smallrye-config.svg",
  "full_name": "smallrye/smallrye-config",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsMaven.