uyuni-project / tetra

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

Each point covers 11 days.

Full resolved dependency set from the GitHub dependency graph: 11 direct and 222 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 211 packages, which also include development and test pins that never ship: 14 carry known advisories, of which 0 are direct. 22 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 68517,
      "has_wiki": true,
      "homepage": "https://rubygems.org/gems/tetra",
      "languages": {
        "CSS": 35438,
        "HTML": 40789405,
        "Java": 303,
        "Perl": 9744,
        "Ruby": 137682,
        "XSLT": 239276,
        "Shell": 23636,
        "Python": 3344,
        "Batchfile": 31678,
        "JavaScript": 37695
      },
      "pushed_at": "2026-08-01T15:38:57Z",
      "created_at": "2013-05-20T06:18:45Z",
      "owner_type": "Organization",
      "updated_at": "2026-08-01T15:38:24Z",
      "description": "A tool to ease Java software packaging",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "master",
      "license_spdx_raw": "MIT",
      "primary_language": "HTML",
      "significant_languages": [
        "HTML"
      ]
    },
    "owner": {
      "blog": "https://www.uyuni-project.org/",
      "name": null,
      "type": "Organization",
      "login": "uyuni-project",
      "company": null,
      "location": null,
      "followers": 114,
      "avatar_url": "https://avatars.githubusercontent.com/u/39272261?v=4",
      "created_at": "2018-05-14T15:16:17Z",
      "is_verified": null,
      "public_repos": 40,
      "account_age_days": 3001
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.0.10",
          "kind": "patch",
          "published_at": "2026-08-01T15:29:36Z"
        },
        {
          "tag": "v2.0.9",
          "kind": "patch",
          "published_at": "2026-05-03T12:17:05Z"
        },
        {
          "tag": "v2.0.8",
          "kind": "patch",
          "published_at": "2026-01-18T14:22:48Z"
        },
        {
          "tag": "v2.0.7",
          "kind": "patch",
          "published_at": "2026-01-15T14:58:11Z"
        },
        {
          "tag": "v2.0.6",
          "kind": "patch",
          "published_at": "2020-02-18T08:51:23Z"
        },
        {
          "tag": "v2.0.5",
          "kind": "patch",
          "published_at": "2018-05-25T14:39:40Z"
        },
        {
          "tag": "v2.0.4",
          "kind": "patch",
          "published_at": "2018-01-19T09:01:28Z"
        },
        {
          "tag": "v2.0.3",
          "kind": "patch",
          "published_at": "2017-09-20T08:32:24Z"
        },
        {
          "tag": "v2.0.2",
          "kind": "patch",
          "published_at": "2016-09-08T09:31:36Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2015-07-13T14:28:44Z"
        },
        {
          "tag": "v1.2.2",
          "kind": "patch",
          "published_at": "2015-06-08T07:15:29Z"
        },
        {
          "tag": "v1.2.1",
          "kind": "patch",
          "published_at": "2015-06-08T06:36:36Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2015-06-08T06:19:45Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2015-06-05T15:20:40Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2015-04-17T16:21:33Z"
        },
        {
          "tag": "v0.54.0",
          "kind": "minor",
          "published_at": "2015-04-15T14:58:47Z"
        },
        {
          "tag": "v0.53.0",
          "kind": "minor",
          "published_at": "2015-03-20T17:28:53Z"
        },
        {
          "tag": "v0.52.0",
          "kind": "minor",
          "published_at": "2015-03-06T15:10:38Z"
        },
        {
          "tag": "v0.51.0",
          "kind": "minor",
          "published_at": "2015-02-27T07:39:46Z"
        },
        {
          "tag": "v0.50.0",
          "kind": "minor",
          "published_at": "2015-02-06T09:51:28Z"
        },
        {
          "tag": "v0.49.0",
          "kind": "minor",
          "published_at": "2015-02-04T09:51:13Z"
        },
        {
          "tag": "v0.48.0",
          "kind": "minor",
          "published_at": "2015-01-22T09:15:46Z"
        },
        {
          "tag": "v0.47.0",
          "kind": "minor",
          "published_at": "2015-01-21T17:27:01Z"
        },
        {
          "tag": "v0.46.0",
          "kind": "minor",
          "published_at": "2014-12-31T11:48:40Z"
        },
        {
          "tag": "v0.45.0",
          "kind": "minor",
          "published_at": "2014-10-24T15:28:52Z"
        },
        {
          "tag": "v0.44.0",
          "kind": "minor",
          "published_at": "2014-10-16T07:54:11Z"
        },
        {
          "tag": "v0.43.0",
          "kind": "minor",
          "published_at": "2014-10-14T16:56:36Z"
        },
        {
          "tag": "v0.42.0",
          "kind": "minor",
          "published_at": "2014-10-14T10:37:19Z"
        },
        {
          "tag": "v0.41.0",
          "kind": "minor",
          "published_at": "2014-10-13T15:32:26Z"
        },
        {
          "tag": "v0.40.0",
          "kind": "minor",
          "published_at": "2014-07-11T10:40:47Z"
        },
        {
          "tag": "v0.39.0",
          "kind": "minor",
          "published_at": "2014-05-30T17:01:29Z"
        },
        {
          "tag": "v0.38.0",
          "kind": "minor",
          "published_at": "2014-05-26T14:49:05Z"
        },
        {
          "tag": "v0.37.0",
          "kind": "minor",
          "published_at": "2014-05-26T07:41:28Z"
        },
        {
          "tag": "v0.36.0",
          "kind": "minor",
          "published_at": "2014-05-02T07:29:55Z"
        },
        {
          "tag": "v0.35.0",
          "kind": "minor",
          "published_at": "2014-01-14T11:41:49Z"
        },
        {
          "tag": "v0.34.0",
          "kind": "minor",
          "published_at": "2014-01-08T13:36:19Z"
        },
        {
          "tag": "v0.33.0",
          "kind": "minor",
          "published_at": "2014-01-07T16:11:56Z"
        },
        {
          "tag": "v0.32.0",
          "kind": "minor",
          "published_at": "2013-12-31T08:33:40Z"
        },
        {
          "tag": "v0.31.0",
          "kind": "minor",
          "published_at": "2013-12-30T16:44:12Z"
        },
        {
          "tag": "v0.30.0",
          "kind": "minor",
          "published_at": "2013-12-27T15:16:04Z"
        },
        {
          "tag": "v0.29.0",
          "kind": "minor",
          "published_at": "2013-12-24T14:53:27Z"
        },
        {
          "tag": "v0.28.0",
          "kind": "minor",
          "published_at": "2013-12-24T13:43:39Z"
        },
        {
          "tag": "v0.27.0",
          "kind": "minor",
          "published_at": "2013-11-28T15:33:32Z"
        },
        {
          "tag": "v0.26.0",
          "kind": "minor",
          "published_at": "2013-11-28T08:35:22Z"
        },
        {
          "tag": "v0.25.0",
          "kind": "minor",
          "published_at": "2013-11-28T07:51:23Z"
        },
        {
          "tag": "v0.24.0",
          "kind": "minor",
          "published_at": "2013-11-28T07:39:40Z"
        },
        {
          "tag": "v0.23.0",
          "kind": "minor",
          "published_at": "2013-11-25T14:14:05Z"
        },
        {
          "tag": "v0.22.0",
          "kind": "minor",
          "published_at": "2013-10-11T14:43:07Z"
        },
        {
          "tag": "v0.21.0",
          "kind": "minor",
          "published_at": "2013-10-09T17:23:09Z"
        },
        {
          "tag": "v0.20.0",
          "kind": "minor",
          "published_at": "2013-10-09T09:47:00Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2013-10-07T15:33:48Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2013-10-07T09:40:56Z"
        },
        {
          "tag": "v0.17.1",
          "kind": "patch",
          "published_at": "2013-10-04T14:19:16Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2013-10-04T13:54:48Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "f4035465556cc57d021dad4b97f97dcb4c5ddf9f",
          "body": null,
          "is_bot": false,
          "headline": "Bump version to 2.0.10 and release",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T15:29:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ff9b72c3d1c06d78e63083c338db3f3444d9e468",
          "body": "Add VCR cassettes for Maven Central HTTP tests",
          "is_bot": false,
          "headline": "Merge pull request #523 from nodeg/maven_vcr_mock",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T15:24:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a94dedce32d6af698080569e4f96c1ac0e0ba36",
          "body": "This will speedup the tests. Before we hit some rate limit with Central\nMaven.",
          "is_bot": false,
          "headline": "Add VCR cassettes for Maven Central HTTP tests",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T15:15:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8349a7330129be0b21bd54f77cd86ec41dc1213d",
          "body": "Remove `rubocop_todo.yaml` and fix all cops",
          "is_bot": false,
          "headline": "Merge pull request #522 from nodeg/rubocop_todo",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T14:58:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "984dfdfeb4911539b5642f74e692fb9f01000b15",
          "body": "Signed-off-by: Dominik Gedon <dominik.gedon@suse.com>",
          "is_bot": false,
          "headline": "Remove `rubocop_todo.yaml` and fix all cops",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T14:46:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67ae301ece3fe5b277a5e43387dbeae9fec54774",
          "body": "Multiple changes. See commit messages.",
          "is_bot": false,
          "headline": "Merge pull request #521 from nodeg/tests_speed",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T12:52:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7667683c3fcf178b431e186d198690ca62dcb98d",
          "body": null,
          "is_bot": false,
          "headline": "Add more examples for running tests",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T12:43:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f93cd2fe8c3e8528cd4c4d095b86ea098a48672d",
          "body": null,
          "is_bot": false,
          "headline": "Bump minimal Ruby version to 3.4",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T12:43:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97e3e71d90dd075418c0b86634bf8e08ec77c581",
          "body": "With this we have a parallel execution of both which should bring faster\nresults. This also adds a minimal macOS pipeline.\n\ntmp\n\ntmp",
          "is_bot": false,
          "headline": "CI: Split fine and coarse tests",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T12:43:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbd67524457b14a715decf3b201633a2b0f5c0b7",
          "body": "Moving from `-9e` to the default `-6` and including `-T0` which splits\nwork across multiple cores. See `xz --help`.",
          "is_bot": false,
          "headline": "Update `xz` compression parameter",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T11:45:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d086d71fa3bfa65556027e3927c66859d4a31d94",
          "body": null,
          "is_bot": false,
          "headline": "CI: Add debug timing messages",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-08-01T11:45:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50594e701b5330956a4617b1f8bc0dd83a1741e6",
          "body": "Fix a couple of minor issues",
          "is_bot": false,
          "headline": "Merge pull request #520 from nodeg/fixups",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-31T14:53:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb94fd241333028ff367b3728e3911acfebf7b84",
          "body": null,
          "is_bot": false,
          "headline": "Correct the misleading \"Zip Slip\" comment",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-31T14:33:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62c5af34fc7dac03cd67bc17c4c4db2deb100f99",
          "body": null,
          "is_bot": false,
          "headline": "Fix URL location - absolute vs. relative",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-31T14:33:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d572043ecd38ce86d9740ce2ac68b0c59fc7fd9",
          "body": null,
          "is_bot": false,
          "headline": "Remove the dead alias",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-31T14:32:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0d40a88d811bdc8f44ef1b09c3b159e83e97028",
          "body": null,
          "is_bot": false,
          "headline": "Write stdin and read stdout/stderr concurrently",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-31T14:32:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "582099565fcbd2b19b1f2520dc1fb42d4b783d9d",
          "body": "CI: Lock Ruby Gems to verified versions",
          "is_bot": false,
          "headline": "Merge pull request #519 from nodeg/bundle_install_dev",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-31T14:01:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad33e44e47b67c9818a3716fae867e260535e1af",
          "body": "See\n- https://github.com/uyuni-project/tetra/security/code-scanning/13\n- https://github.com/uyuni-project/tetra/security/code-scanning/14",
          "is_bot": false,
          "headline": "CI: Lock Ruby Gems to verified versions",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-31T13:39:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ec9795946bb2f9bc96ab4f6950fa2e528a414ba",
          "body": "Build(deps): Bump `codeql-action/*` 4.37.4",
          "is_bot": false,
          "headline": "Merge pull request #518 from nodeg/codeql",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-31T13:31:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80b7d14b3e6285baf6d4b54bab145f5c038dfa32",
          "body": null,
          "is_bot": false,
          "headline": "Build(deps): Bump `codeql-action/*` 4.37.4",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-31T13:28:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d233400d9d6757100a429950741c0f8af37f385e",
          "body": "…actions/checkout-7.0.1\n\nBuild(deps): Bump actions/checkout from 7.0.0 to 7.0.1",
          "is_bot": false,
          "headline": "Merge pull request #510 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-29T14:53:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7be39676b4227b79c057f536f1d6f59a9813d705",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb9\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 7.0.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump actions/checkout from 7.0.0 to 7.0.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-29T14:36:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f84441f2018273a103b8e0a148b3c0fb5c459976",
          "body": "Update gems and regenerate RuboCop todo",
          "is_bot": false,
          "headline": "Merge pull request #508 from nodeg/update_bundles_rubocop",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-29T14:35:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a704a7038ba9363622d76149cb87d6daa4234baf",
          "body": "…reviewdog/action-actionlint-1.73.0\n\nBuild(deps): Bump reviewdog/action-actionlint from 1.72.0 to 1.73.0",
          "is_bot": false,
          "headline": "Merge pull request #512 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-29T14:10:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82c9a00e67c137edeec7a3774a695e8f60341860",
          "body": "Bumps [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) from 1.72.0 to 1.73.0.\n- [Release notes](https://github.com/reviewdog/action-actionlint/releases)\n- [Commits](https://github.com/reviewdog/action-actionlint/compare/6fb7acc99f4a1008869fa8a0f09cfca740837d9d...50842263\n[…]\n-name: reviewdog/action-actionlint\n  dependency-version: 1.73.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump reviewdog/action-actionlint from 1.72.0 to 1.73.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-29T11:42:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8f51e2421e77e950dfc8bfea9801073eef3bb03a",
          "body": null,
          "is_bot": false,
          "headline": "Update `Gemfile.lock`",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-29T08:40:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b297681327610a97320e29c9504f8b96b6407e42",
          "body": null,
          "is_bot": false,
          "headline": "Update gems and regenerate RuboCop todo",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-29T08:40:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1122c8e0ba23618f8e37f77d38ec21db6e589e94",
          "body": "…ruby/setup-ruby-1.316.0\n\nBuild(deps): Bump ruby/setup-ruby from 1.310.0 to 1.321.0",
          "is_bot": false,
          "headline": "Merge pull request #504 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-29T08:12:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3900b82fb41560dcf129806df845eadd10e5b70",
          "body": "…DavidAnson/markdownlint-cli2-action-24.0.0\n\nBuild(deps): Bump DavidAnson/markdownlint-cli2-action from 23.1.0 to 24.1.0",
          "is_bot": false,
          "headline": "Merge pull request #505 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-29T07:40:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c8da9b91cb14924c441553c389a72c4ab76e4900",
          "body": "Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 23.1.0 to 24.1.0.\n- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)\n- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/6b51ade7a9e4a75a7ad\n[…]\navidAnson/markdownlint-cli2-action\n  dependency-version: 24.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump DavidAnson/markdownlint-cli2-action",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-29T07:28:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "010147d239bead7655ac4c593eeb0415f66d59bd",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.310.0 to 1.321.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/afeafc3d1ab54a631816aba4\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.316.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump ruby/setup-ruby from 1.310.0 to 1.321.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-29T07:28:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1d7ffab6180219cc2bce8eea3d23badcf757d40a",
          "body": "…actions/checkout-7.0.0\n\nBuild(deps): Bump actions/checkout from 6.0.2 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #506 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-29T07:27:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac2a4f77a6b3f13c321585c2532a41668611f482",
          "body": "…/commons-logging/ch.qos.logback-logback-core-1.5.35\n\nBuild(deps): Bump ch.qos.logback:logback-core from 1.5.33 to 1.5.35 in /spec/data/commons-logging",
          "is_bot": false,
          "headline": "Merge pull request #507 from uyuni-project/dependabot/maven/spec/data…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-13T06:39:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d18789a86417bc1e75b5e9893d94c827b08982ba",
          "body": "Bumps [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) from 1.5.33 to 1.5.35.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.33...v_1.5.35)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-core\n  dependency-version: 1.5.35\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump ch.qos.logback:logback-core",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-10T20:21:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23778e37dd2d70a06f0a34100d11e4edc3467ab3",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump actions/checkout from 6.0.2 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-06T11:43:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0b2a68e3590c6cd29762853f8888f69f53ea9f55",
          "body": "…github/codeql-action-4.36.2\n\nBuild(deps): Bump github/codeql-action from 4.35.4 to 4.36.2",
          "is_bot": false,
          "headline": "Merge pull request #498 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-06T08:03:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a46e8bbe478a705cb38838c4765b6c478f16bb3",
          "body": "…codecov/codecov-action-7.0.0\n\nBuild(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0",
          "is_bot": false,
          "headline": "Merge pull request #499 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-06T08:02:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "264fae9f209cfff06232d725a31e910737347173",
          "body": "…/commons-logging/ch.qos.logback-logback-core-1.5.33\n\nBuild(deps): Bump ch.qos.logback:logback-core from 1.5.25 to 1.5.33 in /spec/data/commons-logging",
          "is_bot": false,
          "headline": "Merge pull request #501 from uyuni-project/dependabot/maven/spec/data…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-07-06T08:02:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37aea3252d34c0d439e26b9dea62f3b9dcfa2b47",
          "body": "Bumps [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) from 1.5.25 to 1.5.33.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.25...v_1.5.33)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-core\n  dependency-version: 1.5.33\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump ch.qos.logback:logback-core",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-05T23:22:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bb66d7d3e0eeaea8a895aecea35c28b5f5ce60a",
          "body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.1 to 7.0.0.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/c\n[…]\nndency-name: codecov/codecov-action\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-08T11:42:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cfc710ea22e11deabc6ac99d4b4637ec77c8903a",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.4 to 4.36.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/6\n[…]\nendency-name: github/codeql-action\n  dependency-version: 4.36.2\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump github/codeql-action from 4.35.4 to 4.36.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-05T11:42:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7145de00425952d9405b0dcc4f0ab202304a02cc",
          "body": "…ruby/setup-ruby-1.310.0\n\nBuild(deps): Bump ruby/setup-ruby from 1.307.0 to 1.310.0",
          "is_bot": false,
          "headline": "Merge pull request #494 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-22T07:20:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe524b3ab63d9051a2788635c024c5fa1c0919eb",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.307.0 to 1.310.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/6aaa311d81eba98ae12eaffb\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.310.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump ruby/setup-ruby from 1.307.0 to 1.310.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-21T12:18:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3311051cd7d2046e9e279fa8a3fb515a6391895c",
          "body": "…codecov/codecov-action-6.0.1\n\nBuild(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1",
          "is_bot": false,
          "headline": "Merge pull request #493 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-19T20:42:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9c809b3f9bb997dd9b343b5eafd33b0a94623f3",
          "body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6.0.0 to 6.0.1.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/c\n[…]\nndency-name: codecov/codecov-action\n  dependency-version: 6.0.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-18T21:07:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5f33f25ba2a41285ff14d906ec3ab202dc94b147",
          "body": "…ruby/setup-ruby-1.307.0\n\nBuild(deps): Bump ruby/setup-ruby from 1.306.0 to 1.307.0",
          "is_bot": false,
          "headline": "Merge pull request #490 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-14T14:25:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9361a4f64f7852b11a329ac618a808826c2011c6",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.306.0 to 1.307.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/c4e5b1316158f92e3d49443a\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.307.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump ruby/setup-ruby from 1.306.0 to 1.307.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T17:44:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eb9b5c3ff39cb428d2699c228a161ff7be9167a6",
          "body": "…github/codeql-action-4.35.4\n\nBuild(deps): Bump github/codeql-action from 4.35.2 to 4.35.4",
          "is_bot": false,
          "headline": "Merge pull request #488 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-11T19:26:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "952f12a0a34c977904d49e3a0201f706b4954cc7",
          "body": "…actions/dependency-review-action-5.0.0\n\nBuild(deps): Bump actions/dependency-review-action from 4.9.0 to 5.0.0",
          "is_bot": false,
          "headline": "Merge pull request #489 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-11T19:25:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99396157671cb56860cc031c182ee939aaf3d068",
          "body": "Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.9.0 to 5.0.0.\n- [Release notes](https://github.com/actions/dependency-review-action/releases)\n- [Commits](https://github.com/actions/dependency-review-action/compare/2031cfc080254a8a887f58cffee85186f\n[…]\ne: actions/dependency-review-action\n  dependency-version: 5.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump actions/dependency-review-action from 4.9.0 to 5.0.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-11T18:24:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "21b3702f92b635add2ba181001de3954bc137624",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.35.4.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/9\n[…]\nendency-name: github/codeql-action\n  dependency-version: 4.35.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump github/codeql-action from 4.35.2 to 4.35.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-08T11:41:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76887674a5ac5bb804c2ef8ae82c81dcfee169ee",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #485 from nodeg/badges",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T13:27:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a38f6d96d35c0cf2cf42188cf81afb1fd92bb2c9",
          "body": null,
          "is_bot": false,
          "headline": "Update badges in README.md",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T13:25:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dad42e09fe6f314f51de50de1163ce663cc45c19",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #484 from nodeg/update_gh_actions",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T13:04:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd0d7900e19e8a76a1fdc7317cb8e1930c0ef931",
          "body": null,
          "is_bot": false,
          "headline": "chore: Update `codecov-action` to 6.0.0.",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T12:50:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a5fce92a4011506d538110c67d8e4f07b274742a",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #483 from nodeg/update_contributors_release",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T12:42:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb711130932747dc659b2de4101433f5c8fd6f73",
          "body": null,
          "is_bot": false,
          "headline": "docs: Update release guide in CONTRIBUTING.md",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T12:33:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b045aeca950f8d1f250069243c33dbeff4438e62",
          "body": null,
          "is_bot": false,
          "headline": "Bump tetra to 2.0.9",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T12:17:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f3ba3c5f2e728669f20d70bff4340133ae2741b",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #482 from nodeg/fix_missing_template_folder",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T12:11:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d30147103962a7f7ff6091a08a99f00f63950590",
          "body": null,
          "is_bot": false,
          "headline": "feat: Add minimal template checks to gemspec file",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T11:59:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44be30287f31aaf5a4ca7ebf2cdbd62f347a7fb6",
          "body": null,
          "is_bot": false,
          "headline": "chore: Update Ruby Gems",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T11:43:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53fe83825d7defdc6ddefe58d66d482e8ce75177",
          "body": "Fixes https://github.com/uyuni-project/tetra/issues/478",
          "is_bot": false,
          "headline": "fix: Missing folder under template",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T11:36:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d20b1b0f8b539192836d222e1043077c576e3136",
          "body": "…DavidAnson/markdownlint-cli2-action-6b51ade7a9e4a75a7ad929842dd298a3804ebe8b",
          "is_bot": false,
          "headline": "Merge pull request #481 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T11:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "888a0a57e46750d23c9317f9e5ab485617ecd913",
          "body": "…reviewdog/action-actionlint-1.72.0",
          "is_bot": false,
          "headline": "Merge pull request #471 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T11:02:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b80fab5ecd3b39f3954ef8cdad751681822d3759",
          "body": "…actions/dependency-review-action-4.9.0",
          "is_bot": false,
          "headline": "Merge pull request #472 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T11:02:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47898b91610fb605c0ade5a49ae09d1a5d678def",
          "body": "…ruby/setup-ruby-1.306.0",
          "is_bot": false,
          "headline": "Merge pull request #479 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T11:02:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e09bb8bdd1ad73a3201d260f1e2432529d2c673",
          "body": "…github/codeql-action-4.35.2",
          "is_bot": false,
          "headline": "Merge pull request #480 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-05-03T11:01:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "def6da1a56f9e4e17962e8c922c59d2b98fb961e",
          "body": "Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 04ca5eb2d365b74e6c6488b62ca16d0d555c7534 to 6b51ade7a9e4a75a7ad929842dd298a3804ebe8b.\n- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)\n- [Commits](https://github\n[…]\ny-name: DavidAnson/markdownlint-cli2-action\n  dependency-version: 6b51ade7a9e4a75a7ad929842dd298a3804ebe8b\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump DavidAnson/markdownlint-cli2-action",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-30T11:43:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8bdf7cd4ab1b3fd058c09ea1ab0cb722792e22e0",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.11 to 4.35.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/\n[…]\nendency-name: github/codeql-action\n  dependency-version: 4.35.2\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump github/codeql-action from 4.31.11 to 4.35.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-30T11:43:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "747854af28affb6e1b49a7a74ec4323fb14f1533",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.301.0 to 1.306.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/4c56a21280b36d862b5fc313\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.306.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump ruby/setup-ruby from 1.301.0 to 1.306.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-30T11:42:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ed26b919b4f484d2e1035fe1fa99d9c6d7aedded",
          "body": "…ruby/setup-ruby-1.301.0",
          "is_bot": false,
          "headline": "Merge pull request #475 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-04-30T09:23:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "450806df24cbd7ac271bfbf876a4c9b420bf344d",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.286.0 to 1.301.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/90be1154f987f4dc0fe0dd0f\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.301.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump ruby/setup-ruby from 1.286.0 to 1.301.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-13T12:26:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2c8f5e40554c8e15889f684b0a2849e18fe8153",
          "body": "Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.8.2 to 4.9.0.\n- [Release notes](https://github.com/actions/dependency-review-action/releases)\n- [Commits](https://github.com/actions/dependency-review-action/compare/3c4e3dcb1aa7874d2c16be7d79418e9b7\n[…]\ne: actions/dependency-review-action\n  dependency-version: 4.9.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump actions/dependency-review-action from 4.8.2 to 4.9.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-13T12:26:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e7d9b5a3e4db7419ef81efa58904663c1feef26",
          "body": "Bumps [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) from 1.69.1 to 1.72.0.\n- [Release notes](https://github.com/reviewdog/action-actionlint/releases)\n- [Commits](https://github.com/reviewdog/action-actionlint/compare/83e4ed25b168066ad8f62f5afbb29ebd8641d982...6fb7acc9\n[…]\n-name: reviewdog/action-actionlint\n  dependency-version: 1.72.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump reviewdog/action-actionlint from 1.69.1 to 1.72.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-13T12:26:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3eff2839145c3e55190b7542258d070f2223045f",
          "body": "…actions/checkout-6.0.2",
          "is_bot": false,
          "headline": "Merge pull request #455 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-04-13T06:42:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe74fc23e29bbb864a70669afe19619b75722b47",
          "body": "…able-2.9.0",
          "is_bot": false,
          "headline": "Merge pull request #468 from uyuni-project/dependabot/bundler/address…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-04-13T06:42:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa1b28b87d4f2175b939e3ac67293e0040fbddcd",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #467 from uyuni-project/dependabot/bundler/mcp-0.9.2",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-04-13T06:41:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f54d3b4e1a024542f131d00199f138a8d70096d1",
          "body": "…/commons-logging/org.apache.logging.log4j-log4j-core-2.25.4",
          "is_bot": false,
          "headline": "Merge pull request #470 from uyuni-project/dependabot/maven/spec/data…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-04-13T06:41:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92c3263c95156b2fd8a7e89da26eb460aecbfce7",
          "body": "Bumps org.apache.logging.log4j:log4j-core from 2.23.1 to 2.25.4.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.logging.log4j:log4j-core\n  dependency-version: 2.25.4\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps-dev): Bump org.apache.logging.log4j:log4j-core",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-10T23:44:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0a8e6b072d89a334c06cf5b0aa8495e77b3fdfb",
          "body": "Bumps [addressable](https://github.com/sporkmonger/addressable) from 2.8.9 to 2.9.0.\n- [Changelog](https://github.com/sporkmonger/addressable/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/sporkmonger/addressable/compare/addressable-2.8.9...addressable-2.9.0)\n\n---\nupdated-dependencies:\n- dependency-name: addressable\n  dependency-version: 2.9.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps-dev): Bump addressable from 2.8.9 to 2.9.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-08T09:04:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "192b94cc0a02af83ea580795ad84c4ef4ff024b7",
          "body": "Bumps [mcp](https://github.com/modelcontextprotocol/ruby-sdk) from 0.8.0 to 0.9.2.\n- [Release notes](https://github.com/modelcontextprotocol/ruby-sdk/releases)\n- [Changelog](https://github.com/modelcontextprotocol/ruby-sdk/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/modelcontextprotocol/ruby-sdk/compare/v0.8.0...v0.9.2)\n\n---\nupdated-dependencies:\n- dependency-name: mcp\n  dependency-version: 0.9.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps-dev): Bump mcp from 0.8.0 to 0.9.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-27T20:40:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fcc7a12fd2bf00a69205b4ec81b8f9b68eaffd7b",
          "body": "…19.2",
          "is_bot": false,
          "headline": "Merge pull request #464 from uyuni-project/dependabot/bundler/json-2.…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-03-19T13:19:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e70a4947bd9d96d941a07349b24ee039b19fb807",
          "body": null,
          "is_bot": false,
          "headline": "Update `Gemfile.lock`",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-03-19T13:06:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4986562d1da70940d4d70779c74bec4f3dd41e8",
          "body": "Bumps [json](https://github.com/ruby/json) from 2.18.1 to 2.19.2.\n- [Release notes](https://github.com/ruby/json/releases)\n- [Changelog](https://github.com/ruby/json/blob/master/CHANGES.md)\n- [Commits](https://github.com/ruby/json/compare/v2.18.1...v2.19.2)\n\n---\nupdated-dependencies:\n- dependency-name: json\n  dependency-version: 2.19.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps-dev): Bump json from 2.18.1 to 2.19.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-19T12:52:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c670d74004bec553ea52863215a8a43ef5d83fa4",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #463 from nodeg/update_deps",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-03-05T19:48:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e70d7ba05593c1236c0ab43284a5e96005f1cae3",
          "body": "- bump clamp\n- bump RuboCop\n- regenerate `Gemfile.lock`",
          "is_bot": false,
          "headline": "chore: Update Ruby Dependencies",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-03-05T15:05:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c840025fb86c5e6a9c2fa63e8275a84b86ff84fc",
          "body": "Update dependencies",
          "is_bot": false,
          "headline": "Merge pull request #462 from nodeg/dependencies",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-02-09T21:39:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b4244ee5d2fa043325b5aae5268f665adff0e9cd",
          "body": null,
          "is_bot": false,
          "headline": "Update dependencies",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-02-09T21:21:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc97f8132a8e50020bb4d40749910fa822632b4c",
          "body": "…github/codeql-action-4.31.11",
          "is_bot": false,
          "headline": "Merge pull request #456 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-01-26T14:36:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b154a6ea0222c13591d0c6cba2da8eac0b5ee6a",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.10 to 4.31.11.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare\n[…]\nndency-name: github/codeql-action\n  dependency-version: 4.31.11\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump github/codeql-action from 4.31.10 to 4.31.11",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-26T12:41:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3df1c25be0efb2a69116d364257364b1119bdeff",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.1 to 6.0.2.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/8e8c483db84b4bee98b60c0\n[…]\n- dependency-name: actions/checkout\n  dependency-version: 6.0.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump actions/checkout from 6.0.1 to 6.0.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-23T11:43:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c99269e7fd6525f5a7a75beeb2408c87197bae64",
          "body": "…ruby/setup-ruby-1.286.0",
          "is_bot": false,
          "headline": "Merge pull request #453 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-01-23T08:45:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3327c7cf75f2f31ade3a8dafa4e53eeface7bd3",
          "body": "…/commons-logging/ch.qos.logback-logback-core-1.5.25",
          "is_bot": false,
          "headline": "Merge pull request #454 from uyuni-project/dependabot/maven/spec/data…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-01-23T08:44:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4293451f01564905c44673f0bc606a75c46efbd",
          "body": null,
          "is_bot": false,
          "headline": "CI: Run tests when test example files change",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-01-23T08:30:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20b33bb2bd63b2567c7dd6204cdb01848525f69b",
          "body": "Bumps [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) from 1.5.13 to 1.5.25.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.13...v_1.5.25)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-core\n  dependency-version: 1.5.25\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump ch.qos.logback:logback-core",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-22T18:24:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b858088997a845dc7a1e27f5e655e916629cc33",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.284.0 to 1.286.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/80740b3b13bf9857e2885448\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.286.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump ruby/setup-ruby from 1.284.0 to 1.286.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-22T11:42:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ac6f5654e5140c7faa2d70818ef5a41a05ff9058",
          "body": "…ruby/setup-ruby-1.284.0",
          "is_bot": false,
          "headline": "Merge pull request #451 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-01-19T20:46:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a40ad78b2680097ef9999e3fcc2f52ec40bba954",
          "body": "…DavidAnson/markdownlint-cli2-action-04ca5eb2d365b74e6c6488b62ca16d0d555c7534",
          "is_bot": false,
          "headline": "Merge pull request #439 from uyuni-project/dependabot/github_actions/…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-01-19T20:46:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1df5850ccfba81b18ee3448ae8e2ad064c7b3760",
          "body": "Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby) from 1.282.0 to 1.284.0.\n- [Release notes](https://github.com/ruby/setup-ruby/releases)\n- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)\n- [Commits](https://github.com/ruby/setup-ruby/compare/4fc31e1c823882afd7ef5598\n[…]\n dependency-name: ruby/setup-ruby\n  dependency-version: 1.284.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Build(deps): Bump ruby/setup-ruby from 1.282.0 to 1.284.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-19T13:15:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f904bbbbe1008a52d4056767068a1cf0be8de6d8",
          "body": "…ib-coarse-version_spec.rb",
          "is_bot": false,
          "headline": "Merge pull request #450 from uyuni-project/ai-findings-autofix/spec-l…",
          "author_name": "Dominik Gedon",
          "author_login": "nodeg",
          "committed_at": "2026-01-18T17:12:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 54,
      "commits_last_year": 217,
      "latest_release_at": "2026-08-01T15:29:36Z",
      "latest_release_tag": "v2.0.10",
      "releases_from_tags": true,
      "days_since_last_push": 0,
      "active_weeks_last_year": 34,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 448.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 100,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "tetra",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "rubygems",
          "matches_repo": true,
          "registry_url": "https://rubygems.org/gems/tetra",
          "is_deprecated": false,
          "latest_version": "2.0.10",
          "repository_url": "https://github.com/uyuni-project/tetra",
          "versions_count": 30,
          "total_downloads": 65460,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2014-07-11T10:41:16.610000Z",
          "latest_published_at": "2026-08-01T15:42:32.450000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 11,
      "stars": 20,
      "watchers": 22,
      "fork_history": {
        "days": [
          {
            "date": "2014-10-07",
            "count": 1
          },
          {
            "date": "2015-03-02",
            "count": 1
          },
          {
            "date": "2016-03-18",
            "count": 1
          },
          {
            "date": "2017-11-08",
            "count": 1
          },
          {
            "date": "2018-01-26",
            "count": 1
          },
          {
            "date": "2018-04-10",
            "count": 1
          },
          {
            "date": "2018-05-17",
            "count": 1
          },
          {
            "date": "2020-09-28",
            "count": 1
          },
          {
            "date": "2022-04-11",
            "count": 1
          },
          {
            "date": "2022-12-08",
            "count": 1
          },
          {
            "date": "2025-12-08",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 11,
        "total_forks": 11
      },
      "star_history": null,
      "open_issues_and_prs": 7
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "spec/data/antlr/pom.xml",
        "spec/data/commons-logging/pom.xml",
        "spec/data/nailgun/pom.xml",
        "spec/data/struts-apps/pom.xml",
        "spec/data/tomcat/pom.xml"
      ],
      "largest_source_bytes": 1262977,
      "source_files_sampled": 73,
      "oversized_source_files": 3,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "Gemfile"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "net.sourceforge.htmlunit:htmlunit",
            "direct": false,
            "version": "2.70.0",
            "severity": "critical",
            "ecosystem": "maven",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-3xrr-7m6p-p7xh"
            ],
            "fixed_version": "3.0.0",
            "advisory_count": 1,
            "oldest_advisory_days": 1121
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-core",
            "direct": false,
            "version": "2.18.0",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-72hv-8253-57qq",
              "GHSA-r7wm-3cxj-wff9"
            ],
            "fixed_version": "3.2.1",
            "advisory_count": 2,
            "oldest_advisory_days": 154
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": false,
            "version": "2.18.0",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-3pjw-73gf-8qr5",
              "GHSA-5gvw-p9qm-jgwh",
              "GHSA-5jmj-h7xm-6q6v",
              "GHSA-hgj6-7826-r7m5",
              "GHSA-j3rv-43j4-c7qm",
              "GHSA-mhm7-754m-9p8w",
              "GHSA-rmj7-2vxq-3g9f"
            ],
            "fixed_version": "3.2.1",
            "advisory_count": 7,
            "oldest_advisory_days": 38
          },
          {
            "name": "commons-beanutils:commons-beanutils",
            "direct": false,
            "version": "1.9.4",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-wxr5-93ph-8wr9"
            ],
            "fixed_version": "2.0.0-M2",
            "advisory_count": 1,
            "oldest_advisory_days": 430
          },
          {
            "name": "commons-fileupload:commons-fileupload",
            "direct": false,
            "version": "1.5",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-vv7r-c36w-3prj"
            ],
            "fixed_version": "2.0.0-M4",
            "advisory_count": 1,
            "oldest_advisory_days": 411
          },
          {
            "name": "org.apache.struts:struts2-core",
            "direct": false,
            "version": "6.7.0",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 8.2,
            "advisory_ids": [
              "GHSA-rg58-xhh7-mqjw",
              "GHSA-xx7v-hqxh-cjr9"
            ],
            "fixed_version": "7.1.1",
            "advisory_count": 2,
            "oldest_advisory_days": 242
          },
          {
            "name": "org.springframework:spring-core",
            "direct": false,
            "version": "6.2.1",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-659m-px2c-25wj",
              "GHSA-jmp9-x22r-554x"
            ],
            "fixed_version": "7.0.8",
            "advisory_count": 2,
            "oldest_advisory_days": 319
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": false,
            "version": "3.16.0",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-j288-q9x7-2f5v"
            ],
            "fixed_version": "3.18.0",
            "advisory_count": 1,
            "oldest_advisory_days": 386
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": false,
            "version": "3.17.0",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-j288-q9x7-2f5v"
            ],
            "fixed_version": "3.18.0",
            "advisory_count": 1,
            "oldest_advisory_days": 386
          },
          {
            "name": "org.assertj:assertj-core",
            "direct": false,
            "version": "3.26.3",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 6.1,
            "advisory_ids": [
              "GHSA-rqfh-9r24-8c9r"
            ],
            "fixed_version": "3.27.7",
            "advisory_count": 1,
            "oldest_advisory_days": 186
          },
          {
            "name": "org.glassfish:javax.el",
            "direct": false,
            "version": "3.0.1-b12",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-v6w3-2prq-h95f"
            ],
            "fixed_version": "3.0.4",
            "advisory_count": 1,
            "oldest_advisory_days": 1759
          },
          {
            "name": "org.springframework:spring-web",
            "direct": false,
            "version": "6.2.1",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-6r3c-xf4w-jxjm"
            ],
            "fixed_version": "6.2.8",
            "advisory_count": 1,
            "oldest_advisory_days": 414
          },
          {
            "name": "org.apache.logging.log4j:log4j-core",
            "direct": false,
            "version": "2.24.1",
            "severity": "low",
            "ecosystem": "maven",
            "cvss_score": 3.7,
            "advisory_ids": [
              "GHSA-3pxv-7cmr-fjr4",
              "GHSA-445c-vh5m-36rj",
              "GHSA-6hg6-v5c8-fphq",
              "GHSA-vc5p-v9hr-52mj"
            ],
            "fixed_version": "2.25.4",
            "advisory_count": 4,
            "oldest_advisory_days": 225
          },
          {
            "name": "org.springframework:spring-context",
            "direct": false,
            "version": "6.2.1",
            "severity": "low",
            "ecosystem": "maven",
            "cvss_score": 3.1,
            "advisory_ids": [
              "GHSA-4wp7-92pw-q264"
            ],
            "fixed_version": "6.2.7",
            "advisory_count": 1,
            "oldest_advisory_days": 441
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 2,
          "high": 6,
          "critical": 1,
          "moderate": 5
        },
        "advisory_count": 26,
        "affected_count": 14,
        "assessed_count": 211,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 22,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "rubygems"
      ],
      "dependencies": [
        {
          "name": "aruba",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 2.4"
        },
        {
          "name": "rake",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 13.4"
        },
        {
          "name": "rspec",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 3.13"
        },
        {
          "name": "rubocop",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 1.88"
        },
        {
          "name": "rubocop-performance",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 1.26"
        },
        {
          "name": "rubocop-rake",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 0.7"
        },
        {
          "name": "rubocop-rspec",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 3.10"
        },
        {
          "name": "simplecov",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 1.0"
        },
        {
          "name": "simplecov-cobertura",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 4.0"
        },
        {
          "name": "vcr",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 6.4"
        },
        {
          "name": "webmock",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": "~> 3.26"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "aruba",
            "direct": true,
            "version": "2.4.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rake",
            "direct": true,
            "version": "13.4.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec",
            "direct": true,
            "version": "3.13.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop",
            "direct": true,
            "version": "1.88.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-performance",
            "direct": true,
            "version": "1.26.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-rake",
            "direct": true,
            "version": "0.7.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-rspec",
            "direct": true,
            "version": "3.10.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "simplecov",
            "direct": true,
            "version": "1.0.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "simplecov-cobertura",
            "direct": true,
            "version": "4.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "vcr",
            "direct": true,
            "version": "6.4.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "webmock",
            "direct": true,
            "version": "3.26.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "avalon-framework:avalon-framework",
            "direct": false,
            "version": "4.1.5",
            "ecosystem": "maven"
          },
          {
            "name": "ch.qos.logback:logback-classic",
            "direct": false,
            "version": "1.5.35",
            "ecosystem": "maven"
          },
          {
            "name": "ch.qos.logback:logback-core",
            "direct": false,
            "version": "1.5.35",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-core",
            "direct": false,
            "version": "2.18.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": false,
            "version": "2.18.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-xml",
            "direct": false,
            "version": "2.18.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.github.ben-manes.caffeine:caffeine",
            "direct": false,
            "version": "2.9.3",
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs-maven-plugin",
            "direct": false,
            "version": "1.13.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.h3xstream.findsecbugs:findsecbugs-plugin",
            "direct": false,
            "version": "1.13.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.thoughtworks.xstream:xstream",
            "direct": false,
            "version": "1.4.21",
            "ecosystem": "maven"
          },
          {
            "name": "commons-beanutils:commons-beanutils",
            "direct": false,
            "version": "1.9.4",
            "ecosystem": "maven"
          },
          {
            "name": "commons-el:commons-el",
            "direct": false,
            "version": "1.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-fileupload:commons-fileupload",
            "direct": false,
            "version": "1.5",
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": false,
            "version": "2.15.1",
            "ecosystem": "maven"
          },
          {
            "name": "commons-logging:commons-logging",
            "direct": false,
            "version": "1.3.4",
            "ecosystem": "maven"
          },
          {
            "name": "commons-validator:commons-validator",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.github.x-stream:mxparser",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "javax.enterprise:cdi-api",
            "direct": false,
            "version": "1.2",
            "ecosystem": "maven"
          },
          {
            "name": "javax.persistence:persistence-api",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "javax.portlet:portlet-api",
            "direct": false,
            "version": "2.0",
            "ecosystem": "maven"
          },
          {
            "name": "javax.servlet.jsp:jsp-api",
            "direct": false,
            "version": "2.1",
            "ecosystem": "maven"
          },
          {
            "name": "javax.servlet:javax.servlet-api",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "javax.servlet:javax.servlet-api",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "javax.servlet:jstl",
            "direct": false,
            "version": "1.2",
            "ecosystem": "maven"
          },
          {
            "name": "jmock:jmock",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "jmock:jmock-cglib",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": false,
            "version": "4.13.2",
            "ecosystem": "maven"
          },
          {
            "name": "logkit:logkit",
            "direct": false,
            "version": "2.0",
            "ecosystem": "maven"
          },
          {
            "name": "mockobjects:mockobjects-alt-jdk1.3",
            "direct": false,
            "version": "0.09",
            "ecosystem": "maven"
          },
          {
            "name": "mockobjects:mockobjects-alt-jdk1.3-j2ee1.3",
            "direct": false,
            "version": "0.09",
            "ecosystem": "maven"
          },
          {
            "name": "mockobjects:mockobjects-core",
            "direct": false,
            "version": "0.09",
            "ecosystem": "maven"
          },
          {
            "name": "mockobjects:mockobjects-jdk1.3",
            "direct": false,
            "version": "0.09",
            "ecosystem": "maven"
          },
          {
            "name": "mockobjects:mockobjects-jdk1.3-j2ee1.3",
            "direct": false,
            "version": "0.09",
            "ecosystem": "maven"
          },
          {
            "name": "net.sf.oval:oval",
            "direct": false,
            "version": "3.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "net.sourceforge.htmlunit:htmlunit",
            "direct": false,
            "version": "2.70.0",
            "ecosystem": "maven"
          },
          {
            "name": "ognl:ognl",
            "direct": false,
            "version": "3.3.5",
            "ecosystem": "maven"
          },
          {
            "name": "opensymphony:sitemesh",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-collections4",
            "direct": false,
            "version": "4.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-compress",
            "direct": false,
            "version": "1.27.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-digester3",
            "direct": false,
            "version": "3.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-jci-fam",
            "direct": false,
            "version": "1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": false,
            "version": "3.16.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": false,
            "version": "3.17.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-text",
            "direct": false,
            "version": "1.12.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:maven-bundle-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:maven-bundle-plugin",
            "direct": false,
            "version": "5.1.9",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:org.apache.felix.framework",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:org.apache.felix.main",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:org.apache.felix.shell",
            "direct": false,
            "version": "1.4.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:org.apache.felix.shell.tui",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.juneau:juneau-marshall",
            "direct": false,
            "version": "8.1.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-1.2-api",
            "direct": false,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-api",
            "direct": false,
            "version": "2.24.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-api",
            "direct": false,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-core",
            "direct": false,
            "version": "2.24.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-core",
            "direct": false,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-core-test",
            "direct": false,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-jcl",
            "direct": false,
            "version": "2.24.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-slf4j-impl",
            "direct": false,
            "version": "2.24.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.doxia:doxia-core",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.doxia:doxia-module-markdown",
            "direct": false,
            "version": "1.12.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-antrun-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-assembly-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-checkstyle-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": "3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-dependency-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-dependency-plugin",
            "direct": false,
            "version": "3.8.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": "3.5.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-failsafe-plugin",
            "direct": false,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-gpg-plugin",
            "direct": false,
            "version": "1.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": "2.9",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-pmd-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-project-info-reports-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-project-info-reports-plugin",
            "direct": false,
            "version": "3.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-release-plugin",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-release-plugin",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-scm-publish-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-site-plugin",
            "direct": false,
            "version": "3.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": "3.5.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-war-plugin",
            "direct": false,
            "version": "3.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-wrapper-plugin",
            "direct": false,
            "version": "3.3.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.surefire:surefire-junit47",
            "direct": false,
            "version": "3.5.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.rat:apache-rat-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.rat:apache-rat-plugin",
            "direct": false,
            "version": "0.15",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts-annotations",
            "direct": false,
            "version": "1.0.8",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-async-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-bean-validation-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-cdi-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-config-browser-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-convention-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-core",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-dwr-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-embeddedjsp-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-gxp-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-jasperreports-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-javatemplates-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-jfreechart-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-json-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-junit-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-osgi-admin-bundle",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-osgi-demo-bundle",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-osgi-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-oval-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-pell-multipart-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-plexus-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-portlet-mocks-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-portlet-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-portlet-tiles-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-rest-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-sitemesh-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-spring-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-testng-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-tiles-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-velocity-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.struts:struts2-xslt-plugin",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.tomcat:tomcat-api",
            "direct": false,
            "version": "8.5.53",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.tomcat:tomcat-jasper",
            "direct": false,
            "version": "8.5.53",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.tomcat:tomcat-juli",
            "direct": false,
            "version": "8.5.53",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.velocity.tools:velocity-tools-view",
            "direct": false,
            "version": "3.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.velocity.tools:velocity-tools-view-jsp",
            "direct": false,
            "version": "3.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.velocity:velocity-engine-core",
            "direct": false,
            "version": "2.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.assertj:assertj-core",
            "direct": false,
            "version": "3.26.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.awaitility:awaitility",
            "direct": false,
            "version": "4.2.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:cobertura-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:versions-maven-plugin",
            "direct": false,
            "version": "2.17.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.directwebremoting:dwr",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.easymock:easymock",
            "direct": false,
            "version": "5.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.freemarker:freemarker",
            "direct": false,
            "version": "2.3.33",
            "ecosystem": "maven"
          },
          {
            "name": "org.glassfish:javax.el",
            "direct": false,
            "version": "3.0.1-b12",
            "ecosystem": "maven"
          },
          {
            "name": "org.jacoco:jacoco-maven-plugin",
            "direct": false,
            "version": "0.8.12",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld.se:weld-se",
            "direct": false,
            "version": "2.4.8",
            "ecosystem": "maven"
          },
          {
            "name": "org.jboss.weld:weld-core",
            "direct": false,
            "version": "2.4.8",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.vintage:junit-vintage-engine",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-core",
            "direct": false,
            "version": "4.3.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.moditect:moditect-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.mortbay.jetty:jetty",
            "direct": false,
            "version": "6.1.26",
            "ecosystem": "maven"
          },
          {
            "name": "org.mortbay.jetty:jsp-2.1",
            "direct": false,
            "version": "6.1.26",
            "ecosystem": "maven"
          },
          {
            "name": "org.ow2.asm:asm",
            "direct": false,
            "version": "9.7.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.ow2.asm:asm-commons",
            "direct": false,
            "version": "9.7.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.owasp:dependency-check-maven",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.owasp:dependency-check-maven",
            "direct": false,
            "version": "10.0.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": false,
            "version": "2.0.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-simple",
            "direct": false,
            "version": "2.0.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-aop",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-aspects",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-beans",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-context",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-context-support",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-core",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-test",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-web",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.testng:testng",
            "direct": false,
            "version": "7.5.1",
            "ecosystem": "maven"
          },
          {
            "name": "taglibs:request",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "taglibs:standard",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "maven"
          },
          {
            "name": "xerces:xercesImpl",
            "direct": false,
            "version": "2.12.2",
            "ecosystem": "maven"
          },
          {
            "name": "addressable",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "ast",
            "direct": false,
            "version": "2.4.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "base64",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "bigdecimal",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "builder",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "clamp",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "clamp",
            "direct": false,
            "version": "1.5.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "contracts",
            "direct": false,
            "version": "0.17.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "crack",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "cucumber",
            "direct": false,
            "version": "11.1.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "cucumber-ci-environment",
            "direct": false,
            "version": "11.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "cucumber-core",
            "direct": false,
            "version": "16.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "cucumber-cucumber-expressions",
            "direct": false,
            "version": "19.0.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "cucumber-gherkin",
            "direct": false,
            "version": "39.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "cucumber-html-formatter",
            "direct": false,
            "version": "23.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "cucumber-messages",
            "direct": false,
            "version": "32.3.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "cucumber-tag-expressions",
            "direct": false,
            "version": "8.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "diff-lcs",
            "direct": false,
            "version": "1.6.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "erb",
            "direct": false,
            "version": "6.0.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "ffi",
            "direct": false,
            "version": "1.17.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "hashdiff",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "io-console",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "irb",
            "direct": false,
            "version": "1.18.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "json",
            "direct": false,
            "version": "2.21.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "json_pure",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "json_pure",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "language_server-protocol",
            "direct": false,
            "version": "3.17.0.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "lint_roller",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "logger",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "memoist3",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "mini_mime",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "multi_test",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "parallel",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "parser",
            "direct": false,
            "version": "3.3.12.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "pp",
            "direct": false,
            "version": "0.6.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "prettyprint",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "prism",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "public_suffix",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "racc",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rainbow",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rbs",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "rdoc",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "regexp_parser",
            "direct": false,
            "version": "2.12.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "reline",
            "direct": false,
            "version": "0.6.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "rexml",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rexml",
            "direct": false,
            "version": "3.4.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-core",
            "direct": false,
            "version": "3.13.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-expectations",
            "direct": false,
            "version": "3.13.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-mocks",
            "direct": false,
            "version": "3.13.8",
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-support",
            "direct": false,
            "version": "3.13.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-ast",
            "direct": false,
            "version": "1.50.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "ruby-progressbar",
            "direct": false,
            "version": "1.13.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubyzip",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rubyzip",
            "direct": false,
            "version": "3.4.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "sys-uname",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "text",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "text",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "thor",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "tsort",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "unicode-display_width",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "unicode-emoji",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "rubygems"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 233,
        "direct_count": 11,
        "indirect_count": 222
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 292,
        "open_issues": 7,
        "closed_ratio": 0.774,
        "closed_issues": 24,
        "closed_unmerged_prs": 200
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "moio",
          "commits": 652,
          "avatar_url": "https://avatars.githubusercontent.com/u/250541?v=4"
        },
        {
          "type": "User",
          "login": "nodeg",
          "commits": 333,
          "avatar_url": "https://avatars.githubusercontent.com/u/12104291?v=4"
        },
        {
          "type": "User",
          "login": "dmacvicar",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/15332?v=4"
        },
        {
          "type": "User",
          "login": "sbluhm",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/1790211?v=4"
        },
        {
          "type": "User",
          "login": "aduffeck",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/203813?v=4"
        },
        {
          "type": "User",
          "login": "mbologna",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/530992?v=4"
        },
        {
          "type": "User",
          "login": "cbosdo",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/397931?v=4"
        },
        {
          "type": "User",
          "login": "juliogonzalez",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/4226070?v=4"
        },
        {
          "type": "User",
          "login": "brejoc",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/34246?v=4"
        },
        {
          "type": "User",
          "login": "kkaempf",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/37742?v=4"
        }
      ],
      "contributors_sampled": 11,
      "top_contributor_share": 0.651
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "action-lint.yml",
        "codeql-analysis.yml",
        "dependency-review.yml",
        "markdown.yml",
        "rubocop.yml",
        "test_coarse.yml",
        "test_fine.yml",
        "test_min_macos.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".rubocop.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Gemfile.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 0,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 5,
            "reason": "badge detected: Passing",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/8 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 6 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 10,
            "reason": "all dependencies are pinned",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 5,
            "reason": "5 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "f4035465556cc57d021dad4b97f97dcb4c5ddf9f",
        "ran_at": "2026-08-01T15:48:23Z",
        "aggregate_score": 5.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-08-01T15:44:33Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-08-01T15:24:13Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 7,
          "created_at": "2015-06-18T09:05:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 8,
          "created_at": "2015-07-21T07:30:31Z",
          "last_comment_at": "2015-07-21T08:20:03Z",
          "last_comment_author": "moio"
        },
        {
          "number": 11,
          "created_at": "2015-10-16T08:20:48Z",
          "last_comment_at": "2015-11-10T07:12:37Z",
          "last_comment_author": "moio"
        },
        {
          "number": 51,
          "created_at": "2022-08-25T15:27:26Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 155,
          "created_at": "2024-02-06T12:38:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 443,
          "created_at": "2026-01-17T08:10:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 444,
          "created_at": "2026-01-17T08:14:49Z",
          "last_comment_at": "2026-07-31T16:22:32Z",
          "last_comment_author": "nodeg"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/uyuni-project/tetra",
    "host": "github.com",
    "name": "tetra",
    "owner": "uyuni-project"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "excellent",
      "name": "Overall health",
      "note": "The weighted overall 69 is calibrated to 81 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 69,
            "calibrated": 81,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 81,
      "inputs": {
        "security": 67,
        "vitality": 78,
        "community": 60,
        "governance": 64,
        "calibration": "2026-08-02",
        "engineering": 76,
        "ai_readiness": 58,
        "weighted_overall_raw": 69
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 78,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 88,
            "inputs": {
              "commits_last_year": 217,
              "human_commit_share": 0.71,
              "days_since_last_push": 0,
              "active_weeks_last_year": 34
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "34/52 weeks with commits",
                "points": 23.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 34
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "217 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 217
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "moderate",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "releases_count": 54,
              "latest_release_tag": "v2.0.10",
              "releases_from_tags": true,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 448.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "54 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 54
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~448.6 days",
                "points": 5.4,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 448.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 1 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 60,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "weak",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 36,
            "inputs": {
              "forks": 11,
              "stars": 20,
              "watchers": 22,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "20 stars",
                "points": 20.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "11 forks",
                "points": 8.3,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "22 watchers",
                "points": 7.4,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 22
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "packages": [
                "tetra"
              ],
              "dependents": null,
              "ecosystems": "rubygems",
              "total_downloads": 65460,
              "monthly_downloads": null
            },
            "components": [
              {
                "key": "total_downloads",
                "name": "Total downloads",
                "detail": "65,460 downloads all-time across rubygems",
                "points": 50,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_total",
                    "params": {
                      "count": 65460,
                      "ecosystems": "rubygems"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 64,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "weak",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 11,
              "top_contributor_share": 0.651
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 65% of commits",
                "points": 7.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 65
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "11 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "merged_prs": 292,
              "open_issues": 7,
              "closed_issues": 24,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 0.774,
              "closed_unmerged_prs": 200,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "77% of issues closed",
                "points": 32.5,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 77
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "292/492 decided PRs merged",
                "points": 17.8,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 292,
                      "decided": 492
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/8 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "followers": 114,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "uyuni-project",
              "public_repos": 40,
              "account_age_days": 3001
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "114 followers of uyuni-project",
                "points": 14.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 114,
                      "login": "uyuni-project"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "40 public repos, account ~8 yr old",
                "points": 23.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 40
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 8
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "tetra"
              ],
              "ecosystems": "rubygems",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on rubygems",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "rubygems"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "30 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 30
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".rubocop.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".rubocop.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "https://rubygems.org/gems/tetra",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://rubygems.org/gems/tetra",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 67,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 59,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 5.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "badge detected: Passing",
                "points": 1.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/8 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "5 existing vulnerabilities detected",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "exceptional",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 211 resolved dependencies against OSV; 22 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 211
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 22
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 26,
              "affected_packages": 14,
              "assessed_packages": 211,
              "unassessed_packages": 22,
              "affected_by_severity": "critical 1, high 6, moderate 5, low 2",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "exceptional",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 211,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 20
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 58,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "weak",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.746,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "53 of 71 human commits state their intent (structured subject or explanatory body)",
                "points": 39.8,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 53,
                      "sampled": 71
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Gemfile.lock"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "spec/data/antlr/pom.xml",
                "spec/data/commons-logging/pom.xml",
                "spec/data/nailgun/pom.xml",
                "spec/data/struts-apps/pom.xml",
                "spec/data/tomcat/pom.xml"
              ],
              "dependency_bot_commit_share": 0.29
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "spec/data/antlr/pom.xml, spec/data/commons-logging/pom.xml, spec/data/nailgun/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "spec/data/antlr/pom.xml, spec/data/commons-logging/pom.xml, spec/data/nailgun/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".rubocop.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".rubocop.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "29 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 29,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "primary_language": "HTML",
              "largest_source_bytes": 1262977,
              "source_files_sampled": 73,
              "oversized_source_files": 3
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "HTML without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "HTML"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "3/73 source files over 60KB",
                "points": 52.7,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 73,
                      "oversized": 3
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "labels": [
        "library"
      ],
      "scores": {
        "library": 6
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:rubygems",
          "weight": 6
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": false,
      "consumed_by_code": true
    },
    "metrics_version": "2.3.1"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-01T15:48:43.418213Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/u/uyuni-project/tetra.svg",
  "full_name": "uyuni-project/tetra",
  "license_state": "standard",
  "license_spdx": "MIT"
}