wso2/identity-api-server holds a health index of 87 out of 100, placing it in the Excellent band. It scores highest on Vitality (94/100) and lowest on AI Readiness (52/100). It was last updated 3 days ago. 8 contributors account for most of its recent work.
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 73 is calibrated to 87 on the published index scale (record calibration 2026-08-02).
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.common | 1.6.38 | - | 886 | 3 days ago |
Is the project alive — is code being written and are releases shipping?
| 36/36 | Push recency — last push 3 days ago |
| 33.9/36 | Commit cadence — 49/52 weeks with commits |
| 18/18 | Commit volume — 813 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| commits_last_year | 813 |
| human_commit_share | 1 |
| days_since_last_push | 3 |
| active_weeks_last_year | 49 |
| 16.2/27 | Ships releases — 100 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 3 days ago |
| 27/27 | Release cadence — a release every ~4.6 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
| releases_count | 100 |
| latest_release_tag | v1.6.38 |
| releases_from_tags | yes |
| days_since_latest_release | 3 |
| mean_days_between_releases | 4.6 |
Does the project have users, downloads, attention, and a welcoming setup for contributors?
| 29.3/60 | Stars — 65 stars |
| 19/25 | Forks — 190 forks |
| 9.7/15 | Watchers — 56 watchers |
| forks | 190 |
| stars | 65 |
| watchers | 56 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 7.2/7.2 | Issue template |
| 6.3/6.3 | PR template |
| has_readme | yes |
| has_license | yes |
| readme_badges | — |
| has_contributing | no |
| has_issue_template | yes |
| has_code_of_conduct | no |
| readme_badge_services | — |
| has_pull_request_template | yes |
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
| 54/54 | Bus factor — 8 contributor(s) cover half of all commits |
| 14.7/22.5 | Commit distribution — top contributor authored 35% of commits |
| 13.5/13.5 | Contributor breadth — 100 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 14 contributing companies or organizations |
| bus_factor | 8 |
| contributors_sampled | 100 |
| top_contributor_share | 0.347 |
| 42/42 | Issue resolution — 100% of issues closed |
| 26.3/30 | PR acceptance — 988/1,125 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 4.5/15 | OpenSSF Scorecard: Code-Review — Found 8/24 approved changesets -- score normalized to 3 |
| merged_prs | 988 |
| open_issues | 0 |
| closed_issues | 1 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 137 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 23.3/25 | Owner reach — 1,719 followers of wso2 |
| 25/25 | Track record — 383 public repos, account ~15 yr old |
| followers | 1,719 |
| owner_type | Organization |
| is_verified | — |
| owner_login | wso2 |
| public_repos | 383 |
| account_age_days | 5,694 |
| 25/25 | Published & resolvable — 1 package(s) on maven |
| 35/35 | Publish recency — latest publish 3 days ago |
| 20/20 | Version history — 886 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
| packages | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.common |
| ecosystems | maven |
| any_deprecated | no |
| min_days_since_publish | 3 |
Are baseline engineering and documentation practices in place?
| 24/24 | CI workflows — 3 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 8 out of 8 merged PRs checked by a CI test -- score normalized to 10 |
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 10/10 | Topics — 2 topics |
| 10/10 | Wiki |
| topics | identity, hacktoberfest |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | no |
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 2.5/2.5 | CI-Tests — 8 out of 8 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 2.2/7.5 | Code-Review — Found 8/24 approved changesets -- score normalized to 3 |
| 2.5/2.5 | Contributors — project has 14 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 5.8 |
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 1.6/25 | Indirect dependencies free of known advisories — 13 affected: org.apache.tomcat:tomcat-catalina 9.0.113 (critical 9.8), org.ops4j.pax.logging:pax-logging-log4j2 1.10.9 (critical), com.fasterxml.jackson.core:jackson-core 2.21.2 (high 7.5), +10 more |
| 13.1/40 | No advisories left outstanding — 11 advisory-carrying package(s) unaddressed past 90 days; oldest published 2,231 days ago |
| source | osv |
| advisories | 37 |
| affected_packages | 13 |
| assessed_packages | 280 |
| unassessed_packages | 0 |
| affected_by_severity | critical 2, high 8, moderate 3 |
| direct_affected_packages | 0 |
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 34.7/40 | Legible commit history — 65 of 100 human commits state their intent (structured subject or explanatory body) |
| has_llms_txt | no |
| legible_history_share | 0.65 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
| 12.6/18 | One-command bootstrap — components/org.wso2.carbon.identity.api.expired.password.identification/org.wso2.carbon.identity.api.expired.password.identification.common/pom.xml, components/org.wso2.carbon.identity.api.expired.password.identification/org.wso2.carbon.identity.api.expired.password.identification.v1/pom.xml, components/org.wso2.carbon.identity.api.expired.password.identification/pom.xml (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Java (statically typed) |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | components/org.wso2.carbon.identity.api.expired.password.identification/org.wso2.carbon.identity.api.expired.password.identification.common/pom.xml, components/org.wso2.carbon.identity.api.expired.password.identification/org.wso2.carbon.identity.api.expired.password.identification.v1/pom.xml, components/org.wso2.carbon.identity.api.expired.password.identification/pom.xml, components/org.wso2.carbon.identity.api.idle.account.identification/org.wso2.carbon.identity.api.idle.account.identification.common/pom.xml, components/org.wso2.carbon.identity.api.idle.account.identification/org.wso2.carbon.identity.api.idle.account.identification.v1/pom.xml, components/org.wso2.carbon.identity.api.idle.account.identification/pom.xml, components/org.wso2.carbon.identity.api.server.action.management/org.wso2.carbon.identity.api.server.action.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.action.management/org.wso2.carbon.identity.api.server.action.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.action.management/pom.xml, components/org.wso2.carbon.identity.api.server.admin.advisory.management/org.wso2.carbon.identity.api.server.admin.advisory.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.admin.advisory.management/org.wso2.carbon.identity.api.server.admin.advisory.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.admin.advisory.management/pom.xml, components/org.wso2.carbon.identity.api.server.api.resource/org.wso2.carbon.identity.api.server.api.resource.common/pom.xml, components/org.wso2.carbon.identity.api.server.api.resource/org.wso2.carbon.identity.api.server.api.resource.v1/pom.xml, components/org.wso2.carbon.identity.api.server.api.resource/pom.xml, components/org.wso2.carbon.identity.api.server.application.management/org.wso2.carbon.identity.api.server.application.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.application.management/org.wso2.carbon.identity.api.server.application.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.application.management/pom.xml, components/org.wso2.carbon.identity.api.server.asynchronous.operation.status.management/org.wso2.carbon.identity.api.server.asynchronous.operation.status.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.asynchronous.operation.status.management/org.wso2.carbon.identity.api.server.asynchronous.operation.status.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.asynchronous.operation.status.management/pom.xml, components/org.wso2.carbon.identity.api.server.authenticators/org.wso2.carbon.identity.api.server.authenticators.common/pom.xml, components/org.wso2.carbon.identity.api.server.authenticators/org.wso2.carbon.identity.api.server.authenticators.v1/pom.xml, components/org.wso2.carbon.identity.api.server.authenticators/pom.xml, components/org.wso2.carbon.identity.api.server.branding.preference.management/org.wso2.carbon.identity.api.server.branding.preference.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.branding.preference.management/org.wso2.carbon.identity.api.server.branding.preference.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.branding.preference.management/pom.xml, components/org.wso2.carbon.identity.api.server.certificate.validation.management/org.wso2.carbon.identity.api.server.certificate.validation.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.certificate.validation.management/org.wso2.carbon.identity.api.server.certificate.validation.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.certificate.validation.management/pom.xml, components/org.wso2.carbon.identity.api.server.claim.management/org.wso2.carbon.identity.api.server.claim.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.claim.management/org.wso2.carbon.identity.rest.api.server.claim.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.claim.management/pom.xml, components/org.wso2.carbon.identity.api.server.common/pom.xml, components/org.wso2.carbon.identity.api.server.configs/org.wso2.carbon.identity.api.server.configs.common/pom.xml, components/org.wso2.carbon.identity.api.server.configs/org.wso2.carbon.identity.api.server.configs.v1/pom.xml, components/org.wso2.carbon.identity.api.server.configs/pom.xml, components/org.wso2.carbon.identity.api.server.consent.management/org.wso2.carbon.identity.api.server.consent.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.consent.management/org.wso2.carbon.identity.api.server.consent.management.v2/pom.xml, components/org.wso2.carbon.identity.api.server.consent.management/pom.xml, components/org.wso2.carbon.identity.api.server.cors/org.wso2.carbon.identity.api.server.cors.common/pom.xml, components/org.wso2.carbon.identity.api.server.cors/org.wso2.carbon.identity.api.server.cors.v1/pom.xml, components/org.wso2.carbon.identity.api.server.cors/pom.xml, components/org.wso2.carbon.identity.api.server.credential.management/org.wso2.carbon.identity.api.server.credential.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.credential.management/org.wso2.carbon.identity.api.server.credential.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.credential.management/pom.xml, components/org.wso2.carbon.identity.api.server.email.template/org.wso2.carbon.identity.api.server.email.template.common/pom.xml, components/org.wso2.carbon.identity.api.server.email.template/org.wso2.carbon.identity.rest.api.server.email.template.v1/pom.xml, components/org.wso2.carbon.identity.api.server.email.template/org.wso2.carbon.identity.rest.api.server.email.template.v2/pom.xml, components/org.wso2.carbon.identity.api.server.email.template/pom.xml, components/org.wso2.carbon.identity.api.server.extension.management/org.wso2.carbon.identity.api.server.extension.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.extension.management/org.wso2.carbon.identity.api.server.extension.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.extension.management/pom.xml, components/org.wso2.carbon.identity.api.server.fetch.remote/org.wso2.carbon.identity.api.server.fetch.remote.common/pom.xml, components/org.wso2.carbon.identity.api.server.fetch.remote/org.wso2.carbon.identity.api.server.fetch.remote.v1/pom.xml, components/org.wso2.carbon.identity.api.server.fetch.remote/pom.xml, components/org.wso2.carbon.identity.api.server.flow.execution/org.wso2.carbon.identity.api.server.flow.execution.common/pom.xml, components/org.wso2.carbon.identity.api.server.flow.execution/org.wso2.carbon.identity.api.server.flow.execution.v1/pom.xml, components/org.wso2.carbon.identity.api.server.flow.execution/pom.xml, components/org.wso2.carbon.identity.api.server.flow.management/org.wso2.carbon.identity.api.server.flow.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.flow.management/org.wso2.carbon.identity.api.server.flow.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.flow.management/pom.xml, components/org.wso2.carbon.identity.api.server.identity.governance/org.wso2.carbon.identity.api.server.identity.governance.common/pom.xml, components/org.wso2.carbon.identity.api.server.identity.governance/org.wso2.carbon.identity.api.server.identity.governance.v1/pom.xml, components/org.wso2.carbon.identity.api.server.identity.governance/pom.xml, components/org.wso2.carbon.identity.api.server.idp/org.wso2.carbon.identity.api.server.idp.common/pom.xml, components/org.wso2.carbon.identity.api.server.idp/org.wso2.carbon.identity.api.server.idp.v1/pom.xml, components/org.wso2.carbon.identity.api.server.idp/pom.xml, components/org.wso2.carbon.identity.api.server.idv.provider/org.wso2.carbon.identity.api.server.idv.provider.common/pom.xml, components/org.wso2.carbon.identity.api.server.idv.provider/org.wso2.carbon.identity.api.server.idv.provider.v1/pom.xml, components/org.wso2.carbon.identity.api.server.idv.provider/pom.xml, components/org.wso2.carbon.identity.api.server.input.validation/org.wso2.carbon.identity.api.server.input.validation.common/pom.xml, components/org.wso2.carbon.identity.api.server.input.validation/org.wso2.carbon.identity.api.server.input.validation.v1/pom.xml, components/org.wso2.carbon.identity.api.server.input.validation/pom.xml, components/org.wso2.carbon.identity.api.server.keystore.management/org.wso2.carbon.identity.api.server.keystore.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.keystore.management/org.wso2.carbon.identity.api.server.keystore.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.keystore.management/pom.xml, components/org.wso2.carbon.identity.api.server.moesif.publisher/org.wso2.carbon.identity.api.server.moesif.publisher.common/pom.xml, components/org.wso2.carbon.identity.api.server.moesif.publisher/org.wso2.carbon.identity.api.server.moesif.publisher.v1/pom.xml, components/org.wso2.carbon.identity.api.server.moesif.publisher/pom.xml, components/org.wso2.carbon.identity.api.server.notification.sender/org.wso2.carbon.identity.api.server.notification.sender.common/pom.xml, components/org.wso2.carbon.identity.api.server.notification.sender/org.wso2.carbon.identity.api.server.notification.sender.v1/pom.xml, components/org.wso2.carbon.identity.api.server.notification.sender/org.wso2.carbon.identity.api.server.notification.sender.v2/pom.xml, components/org.wso2.carbon.identity.api.server.notification.sender/pom.xml, components/org.wso2.carbon.identity.api.server.notification.template/org.wso2.carbon.identity.api.server.notification.template.common/pom.xml, components/org.wso2.carbon.identity.api.server.notification.template/org.wso2.carbon.identity.rest.api.server.notification.template.v1/pom.xml, components/org.wso2.carbon.identity.api.server.notification.template/pom.xml, components/org.wso2.carbon.identity.api.server.oidc.scope.management/org.wso2.carbon.identity.api.server.oidc.scope.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.oidc.scope.management/org.wso2.carbon.identity.api.server.oidc.scope.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.oidc.scope.management/pom.xml, components/org.wso2.carbon.identity.api.server.organization.agent.sharing.management/org.wso2.carbon.identity.api.server.organization.agent.sharing.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.organization.agent.sharing.management/org.wso2.carbon.identity.api.server.organization.agent.sharing.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.organization.agent.sharing.management/pom.xml, components/org.wso2.carbon.identity.api.server.organization.capability.governance/org.wso2.carbon.identity.api.server.organization.capability.governance.common/pom.xml, components/org.wso2.carbon.identity.api.server.organization.capability.governance/org.wso2.carbon.identity.api.server.organization.capability.governance.v1/pom.xml, components/org.wso2.carbon.identity.api.server.organization.capability.governance/pom.xml, components/org.wso2.carbon.identity.api.server.organization.configs/org.wso2.carbon.identity.api.server.organization.configs.common/pom.xml, components/org.wso2.carbon.identity.api.server.organization.configs/org.wso2.carbon.identity.api.server.organization.configs.v1/pom.xml, components/org.wso2.carbon.identity.api.server.organization.configs/pom.xml, components/org.wso2.carbon.identity.api.server.organization.management/org.wso2.carbon.identity.api.server.organization.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.organization.management/org.wso2.carbon.identity.api.server.organization.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.organization.management/pom.xml, components/org.wso2.carbon.identity.api.server.organization.role.management/org.wso2.carbon.identity.api.server.organization.role.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.organization.role.management/org.wso2.carbon.identity.api.server.organization.role.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.organization.role.management/pom.xml, components/org.wso2.carbon.identity.api.server.organization.selfservice/org.wso2.carbon.identity.api.server.organization.selfservice.common/pom.xml, components/org.wso2.carbon.identity.api.server.organization.selfservice/org.wso2.carbon.identity.api.server.organization.selfservice.v1/pom.xml, components/org.wso2.carbon.identity.api.server.organization.selfservice/pom.xml, components/org.wso2.carbon.identity.api.server.organization.user.invitation.management/org.wso2.carbon.identity.api.server.organization.user.invitation.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.organization.user.invitation.management/org.wso2.carbon.identity.api.server.organization.user.invitation.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.organization.user.invitation.management/pom.xml, components/org.wso2.carbon.identity.api.server.organization.user.sharing.management/org.wso2.carbon.identity.api.server.organization.user.sharing.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.organization.user.sharing.management/org.wso2.carbon.identity.api.server.organization.user.sharing.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.organization.user.sharing.management/org.wso2.carbon.identity.api.server.organization.user.sharing.management.v2/pom.xml, components/org.wso2.carbon.identity.api.server.organization.user.sharing.management/pom.xml, components/org.wso2.carbon.identity.api.server.permission.management/org.wso2.carbon.identity.api.server.permission.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.permission.management/org.wso2.carbon.identity.api.server.permission.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.permission.management/pom.xml, components/org.wso2.carbon.identity.api.server.rule.metadata/org.wso2.carbon.identity.api.server.rule.metadata.common/pom.xml, components/org.wso2.carbon.identity.api.server.rule.metadata/org.wso2.carbon.identity.api.server.rule.metadata.v1/pom.xml, components/org.wso2.carbon.identity.api.server.rule.metadata/pom.xml, components/org.wso2.carbon.identity.api.server.script.library/org.wso2.carbon.identity.api.server.script.library.common/pom.xml, components/org.wso2.carbon.identity.api.server.script.library/org.wso2.carbon.identity.api.server.script.library.v1/pom.xml, components/org.wso2.carbon.identity.api.server.script.library/pom.xml, components/org.wso2.carbon.identity.api.server.secret.management/org.wso2.carbon.identity.api.server.secret.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.secret.management/org.wso2.carbon.identity.api.server.secret.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.secret.management/pom.xml, components/org.wso2.carbon.identity.api.server.tenant.management/org.wso2.carbon.identity.api.server.tenant.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.tenant.management/org.wso2.carbon.identity.api.server.tenant.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.tenant.management/pom.xml, components/org.wso2.carbon.identity.api.server.userstore/org.wso2.carbon.identity.api.server.userstore.common/pom.xml, components/org.wso2.carbon.identity.api.server.userstore/org.wso2.carbon.identity.api.server.userstore.v1/pom.xml, components/org.wso2.carbon.identity.api.server.userstore/pom.xml, components/org.wso2.carbon.identity.api.server.vc.template.management/org.wso2.carbon.identity.api.server.vc.template.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.vc.template.management/org.wso2.carbon.identity.api.server.vc.template.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.vc.template.management/pom.xml, components/org.wso2.carbon.identity.api.server.webhook.management/org.wso2.carbon.identity.api.server.webhook.management.common/pom.xml, components/org.wso2.carbon.identity.api.server.webhook.management/org.wso2.carbon.identity.api.server.webhook.management.v1/pom.xml, components/org.wso2.carbon.identity.api.server.webhook.management/pom.xml, components/org.wso2.carbon.identity.api.server.webhook.metadata/org.wso2.carbon.identity.api.server.webhook.metadata.common/pom.xml, components/org.wso2.carbon.identity.api.server.webhook.metadata/org.wso2.carbon.identity.api.server.webhook.metadata.v1/pom.xml, components/org.wso2.carbon.identity.api.server.webhook.metadata/pom.xml, components/org.wso2.carbon.identity.api.server.workflow/org.wso2.carbon.identity.api.server.workflow.common/pom.xml, components/org.wso2.carbon.identity.api.server.workflow/org.wso2.carbon.identity.rest.api.server.workflow.v1/pom.xml, components/org.wso2.carbon.identity.api.server.workflow/pom.xml, pom.xml |
| dependency_bot_commit_share | 0 |
| 45/45 | Type-checkable code — Java (statically typed) |
| 54.6/55 | Manageable file sizes — 9/1,355 source files over 60KB |
| primary_language | Java |
| largest_source_bytes | 204,538 |
| source_files_sampled | 1,355 |
| oversized_source_files | 9 |
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Each point covers 7 days.
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 8 out of 8 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 3 | Code-Review | Found 8/24 approved changesets -- score normalized to 3 |
| 10 | Contributors | project has 14 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Maven | org.apache.cxf:cxf-rt-frontend-jaxrs | ${cxf-bundle.version} | pom.xml |
| Maven | org.apache.cxf:cxf-rt-rs-service-description | ${cxf-bundle.version} | pom.xml |
| Maven | javax.ws.rs:javax.ws.rs-api | ${javax.ws.rs-api.version} | pom.xml |
| Maven | org.wso2.orbit.javax.xml.bind:jaxb-api | ${version.org.wso2.orbit.javax.xml.bind} | pom.xml |
| Maven | io.swagger:swagger-jaxrs | ${swagger-jaxrs.version} | pom.xml |
| Maven | com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider | ${jackson-jaxrs-json-provider.version} | pom.xml |
| Maven | commons-beanutils:commons-beanutils | ${commons.beanutils.version} | pom.xml |
| Maven | org.wso2.carbon.consent.mgt:org.wso2.carbon.consent.mgt.core | ${carbon.consent.mgt.version} | pom.xml |
| Maven | org.wso2.carbon.identity.workflow:org.wso2.carbon.identity.workflow.engine | ${carbon.workflow.engine.version} | pom.xml |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.rule.management | ${carbon.identity.framework.version} | pom.xml |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.workflow.common | ${project.version} | pom.xml |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.application.management.common | ${project.version} | pom.xml |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.tenant.resource.manager | ${tenant.resource.manager.version} | pom.xml |
| Maven | org.wso2.carbon.identity.moesif:org.wso2.carbon.identity.moesif.configuration | ${org.wso2.carbon.identity.moesif.version} | pom.xml |
| Maven | org.wso2.carbon.extension.identity.verification:org.wso2.carbon.extension.identity.verification.provider | ${identity.verification.version} | pom.xml |
| Maven | org.wso2.carbon.extension.identity.verification:org.wso2.carbon.extension.identity.verification.mgt | ${identity.verification.version} | pom.xml |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.idv.provider.common | ${project.version} | pom.xml |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.expired.password.identification.common | ${project.version} | pom.xml |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.idle.account.identification.common | ${project.version} | pom.xml |
| Maven | org.wso2.carbon.identity.server.api:common | ${project.version} | pom.xml |
| Maven | org.wso2.carbon.identity.server.api:v1 | ${project.version} | pom.xml |
| Maven | org.apache.felix:org.apache.felix.scr.ds-annotations | ${apache.felix.scr.ds.annotations.version} | pom.xml |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.flow.management.common | ${project.version} | pom.xml |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.flow.execution.common | ${project.version} | pom.xml |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.asynchronous.operation.status.management.common | ${project.version} | pom.xml |
| Maven | org.wso2.carbon.identity.notification.push:org.wso2.carbon.identity.notification.push.device.handler | ${identity.notification.push.version} | pom.xml |
| Maven | org.wso2.carbon.identity.local.auth.fido:org.wso2.carbon.identity.application.authenticator.fido2 | ${identity.local.auth.fido.version} | pom.xml |
| Maven | io.swagger:swagger-jaxrs | — | components/org.wso2.carbon.identity.api.server.common/pom.xml |
Full resolved dependency set from the GitHub dependency graph: 50 direct and 262 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Maven | com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider | — | direct |
| Maven | com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider | 2.21.2 | direct |
| Maven | commons-beanutils:commons-beanutils | — | direct |
| Maven | commons-beanutils:commons-beanutils | 1.9.4 | direct |
| Maven | io.swagger:swagger-jaxrs | — | direct |
| Maven | io.swagger:swagger-jaxrs | 1.6.2 | direct |
| Maven | javax.ws.rs:javax.ws.rs-api | — | direct |
| Maven | javax.ws.rs:javax.ws.rs-api | 2.1.1 | direct |
| Maven | org.apache.cxf:cxf-rt-frontend-jaxrs | — | direct |
| Maven | org.apache.cxf:cxf-rt-frontend-jaxrs | 3.5.9 | direct |
| Maven | org.apache.cxf:cxf-rt-rs-service-description | — | direct |
| Maven | org.apache.cxf:cxf-rt-rs-service-description | 3.5.9 | direct |
| Maven | org.apache.felix:org.apache.felix.scr.ds-annotations | 1.2.4 | direct |
| Maven | org.wso2.carbon.consent.mgt:org.wso2.carbon.consent.mgt.core | — | direct |
| Maven | org.wso2.carbon.consent.mgt:org.wso2.carbon.consent.mgt.core | 2.9.10 | direct |
| Maven | org.wso2.carbon.extension.identity.verification:org.wso2.carbon.extension.identity.verification.mgt | — | direct |
| Maven | org.wso2.carbon.extension.identity.verification:org.wso2.carbon.extension.identity.verification.mgt | 1.0.15 | direct |
| Maven | org.wso2.carbon.extension.identity.verification:org.wso2.carbon.extension.identity.verification.provider | — | direct |
| Maven | org.wso2.carbon.extension.identity.verification:org.wso2.carbon.extension.identity.verification.provider | 1.0.15 | direct |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.rule.management | — | direct |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.rule.management | 7.11.160 | direct |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.tenant.resource.manager | 1.5.55 | direct |
| Maven | org.wso2.carbon.identity.local.auth.fido:org.wso2.carbon.identity.application.authenticator.fido2 | — | direct |
| Maven | org.wso2.carbon.identity.local.auth.fido:org.wso2.carbon.identity.application.authenticator.fido2 | 6.0.3 | direct |
| Maven | org.wso2.carbon.identity.moesif:org.wso2.carbon.identity.moesif.configuration | — | direct |
| Maven | org.wso2.carbon.identity.moesif:org.wso2.carbon.identity.moesif.configuration | 1.0.7 | direct |
| Maven | org.wso2.carbon.identity.notification.push:org.wso2.carbon.identity.notification.push.device.handler | — | direct |
| Maven | org.wso2.carbon.identity.notification.push:org.wso2.carbon.identity.notification.push.device.handler | 1.2.2 | direct |
| Maven | org.wso2.carbon.identity.server.api:common | 1.6.39-SNAPSHOT | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.expired.password.identification.common | — | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.expired.password.identification.common | 1.6.39-SNAPSHOT | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.idle.account.identification.common | — | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.idle.account.identification.common | 1.6.39-SNAPSHOT | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.application.management.common | — | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.application.management.common | 1.6.39-SNAPSHOT | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.asynchronous.operation.status.management.common | — | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.asynchronous.operation.status.management.common | 1.6.39-SNAPSHOT | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.flow.execution.common | — | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.flow.execution.common | 1.6.39-SNAPSHOT | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.flow.management.common | — | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.flow.management.common | 1.6.39-SNAPSHOT | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.idv.provider.common | — | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.idv.provider.common | 1.6.39-SNAPSHOT | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.workflow.common | — | direct |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.workflow.common | 1.6.39-SNAPSHOT | direct |
| Maven | org.wso2.carbon.identity.server.api:v1 | 1.6.39-SNAPSHOT | direct |
| Maven | org.wso2.carbon.identity.workflow:org.wso2.carbon.identity.workflow.engine | — | direct |
| Maven | org.wso2.carbon.identity.workflow:org.wso2.carbon.identity.workflow.engine | 1.0.18 | direct |
| Maven | org.wso2.orbit.javax.xml.bind:jaxb-api | — | direct |
| Maven | org.wso2.orbit.javax.xml.bind:jaxb-api | 2.3.1.wso2v1 | direct |
| Maven | com.github.spotbugs:spotbugs-annotations | 4.9.8 | indirect |
| Maven | com.github.spotbugs:spotbugs-maven-plugin | — | indirect |
| Maven | com.github.spotbugs:spotbugs-maven-plugin | 4.9.8.2 | indirect |
| Maven | com.h2database:h2 | — | indirect |
| Maven | com.h2database:h2 | 2.2.220 | indirect |
| Maven | com.h3xstream.findsecbugs:findsecbugs-plugin | — | indirect |
| Maven | com.h3xstream.findsecbugs:findsecbugs-plugin | 1.13.0 | indirect |
| Maven | commons-lang.wso2:commons-lang | 2.6.0.wso2v1 | indirect |
| Maven | commons-lang:commons-lang | 20030203.000129 | indirect |
| Maven | org.apache.cxf:cxf-rt-rs-extension-search | — | indirect |
| Maven | org.apache.cxf:cxf-rt-rs-extension-search | 3.5.9 | indirect |
| Maven | org.apache.maven.plugins:maven-compiler-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-deploy-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-javadoc-plugin | — | indirect |
| Maven | org.apache.maven.plugins:maven-release-plugin | — | indirect |
| Maven | org.codehaus.mojo:build-helper-maven-plugin | 1.8 | indirect |
| Maven | org.codehaus.mojo:build-helper-maven-plugin | 3.0.0 | indirect |
| Maven | org.codehaus.mojo:buildnumber-maven-plugin | — | indirect |
| Maven | org.codehaus.mojo:buildnumber-maven-plugin | 1.4 | indirect |
| Maven | org.codehaus.mojo:findbugs-maven-plugin | 3.0.5 | indirect |
| Maven | org.jacoco:org.jacoco.agent | — | indirect |
| Maven | org.jacoco:org.jacoco.agent | 0.8.12 | indirect |
| Maven | org.mockito:mockito-core | — | indirect |
| Maven | org.mockito:mockito-core | 5.14.2 | indirect |
| Maven | org.mockito:mockito-testng | — | indirect |
| Maven | org.mockito:mockito-testng | 0.5.2 | indirect |
| Maven | org.testng:testng | — | indirect |
| Maven | org.testng:testng | 6.9.10 | indirect |
| Maven | org.wso2.carbon.analytics-common:org.wso2.carbon.event.publisher.core | — | indirect |
| Maven | org.wso2.carbon.analytics-common:org.wso2.carbon.event.publisher.core | 5.2.61 | indirect |
| Maven | org.wso2.carbon.commons:org.wso2.carbon.logging.service | — | indirect |
| Maven | org.wso2.carbon.commons:org.wso2.carbon.logging.service | 4.11.0 | indirect |
| Maven | org.wso2.carbon.extension.identity.oauth.addons:org.wso2.carbon.identity.oauth2.token.handler.clientauth.jwt | — | indirect |
| Maven | org.wso2.carbon.extension.identity.oauth.addons:org.wso2.carbon.identity.oauth2.token.handler.clientauth.jwt | 2.5.18 | indirect |
| Maven | org.wso2.carbon.extension.identity.x509certificate:org.wso2.carbon.extension.identity.x509Certificate.validation | — | indirect |
| Maven | org.wso2.carbon.extension.identity.x509certificate:org.wso2.carbon.extension.identity.x509Certificate.validation | 1.1.19 | indirect |
| Maven | org.wso2.carbon.identity.branding.preference.management:org.wso2.carbon.identity.branding.preference.management.core | — | indirect |
| Maven | org.wso2.carbon.identity.branding.preference.management:org.wso2.carbon.identity.branding.preference.management.core | 1.1.22 | indirect |
| Maven | org.wso2.carbon.identity.event.handler.notification:org.wso2.carbon.email.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.event.handler.notification:org.wso2.carbon.email.mgt | 1.12.4 | indirect |
| Maven | org.wso2.carbon.identity.event.handler.notification:org.wso2.carbon.identity.notification.sender.tenant.config | — | indirect |
| Maven | org.wso2.carbon.identity.event.handler.notification:org.wso2.carbon.identity.notification.sender.tenant.config | 1.12.4 | indirect |
| Maven | org.wso2.carbon.identity.fetch.remote:org.wso2.carbon.identity.remotefetch.common | — | indirect |
| Maven | org.wso2.carbon.identity.fetch.remote:org.wso2.carbon.identity.remotefetch.common | 0.7.12 | indirect |
| Maven | org.wso2.carbon.identity.fetch.remote:org.wso2.carbon.identity.remotefetch.core | — | indirect |
| Maven | org.wso2.carbon.identity.fetch.remote:org.wso2.carbon.identity.remotefetch.core | 0.7.12 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.action.management | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.action.management | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.ai.service.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.ai.service.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.api.resource.collection.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.api.resource.collection.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.api.resource.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.api.resource.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.framework | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.framework | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.common | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.common | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.authorization.common | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.authorization.common | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.base | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.base | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.claim.metadata.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.claim.metadata.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.compatibility.settings.core | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.compatibility.settings.core | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.configuration.mgt.core | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.configuration.mgt.core | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.core | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.core | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.cors.mgt.core | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.cors.mgt.core | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.extension.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.extension.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.flow.execution.engine | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.flow.execution.engine | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.flow.extension | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.flow.extension | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.flow.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.flow.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.framework.async.operation.status.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.framework.async.operation.status.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.fraud.detection.core | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.fraud.detection.core | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.functions.library.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.functions.library.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.input.validation.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.input.validation.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.rule.metadata | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.rule.metadata | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.secret.mgt.core | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.secret.mgt.core | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.subscription.management | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.subscription.management | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.template.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.template.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.pre.update.password.action | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.pre.update.password.action | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.pre.update.profile.action | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.pre.update.profile.action | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.webhook.management | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.webhook.management | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.webhook.metadata | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.webhook.metadata | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.workflow.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.workflow.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.idp.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.idp.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.security.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.security.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.user.mgt | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.user.mgt | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.user.mgt.common | — | indirect |
| Maven | org.wso2.carbon.identity.framework:org.wso2.carbon.user.mgt.common | 7.11.160 | indirect |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.auth.attribute.handler | — | indirect |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.auth.attribute.handler | 1.11.103 | indirect |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.governance | — | indirect |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.governance | 1.11.103 | indirect |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.idle.account.identification | — | indirect |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.idle.account.identification | 1.11.103 | indirect |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.password.expiry | — | indirect |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.password.expiry | 1.11.103 | indirect |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.recovery | — | indirect |
| Maven | org.wso2.carbon.identity.governance:org.wso2.carbon.identity.recovery | 1.11.103 | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth | — | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth | 7.5.59 | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ciba | — | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ciba | 7.5.59 | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.common | — | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.common | 7.5.59 | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.dcr | — | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.dcr | 7.5.59 | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.rar | — | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.rar | 7.5.59 | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.saml2:org.wso2.carbon.identity.sso.saml | — | indirect |
| Maven | org.wso2.carbon.identity.inbound.auth.saml2:org.wso2.carbon.identity.sso.saml | 5.11.51 | indirect |
| Maven | org.wso2.carbon.identity.inbound.provisioning.scim2:org.wso2.carbon.identity.scim2.common | — | indirect |
| Maven | org.wso2.carbon.identity.inbound.provisioning.scim2:org.wso2.carbon.identity.scim2.common | 3.4.146 | indirect |
| Maven | org.wso2.carbon.identity.openid4vc:org.wso2.carbon.identity.openid4vc.template.management | — | indirect |
| Maven | org.wso2.carbon.identity.openid4vc:org.wso2.carbon.identity.openid4vc.template.management | 1.1.5 | indirect |
| Maven | org.wso2.carbon.identity.organization.management.core:org.wso2.carbon.identity.organization.management.service | — | indirect |
| Maven | org.wso2.carbon.identity.organization.management.core:org.wso2.carbon.identity.organization.management.service | 1.5.1 | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.config.service | — | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.config.service | 2.5.10 | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.discovery.service | — | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.discovery.service | 2.5.10 | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.management.application | — | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.management.application | 2.5.10 | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.management.capability.governance | — | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.management.capability.governance | 2.5.10 | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.management.organization.agent.sharing | — | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.management.organization.agent.sharing | 2.5.10 | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.management.organization.user.sharing | — | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.management.organization.user.sharing | 2.5.10 | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.management.role.management.service | — | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.management.role.management.service | 2.5.10 | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.resource.sharing.policy.management | — | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.resource.sharing.policy.management | 2.5.10 | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.user.invitation.management | — | indirect |
| Maven | org.wso2.carbon.identity.organization.management:org.wso2.carbon.identity.organization.user.invitation.management | 2.5.10 | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.action.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.action.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.admin.advisory.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.admin.advisory.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.api.resource.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.api.resource.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.application.management.v1 | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.application.management.v1 | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.authenticators.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.authenticators.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.branding.preference.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.branding.preference.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.certificate.validation.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.certificate.validation.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.claim.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.claim.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.configs.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.configs.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.consent.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.cors.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.cors.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.credential.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.credential.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.email.template.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.email.template.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.extension.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.extension.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.fetch.remote.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.fetch.remote.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.identity.governance.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.identity.governance.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.idp.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.idp.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.input.validation.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.input.validation.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.keystore.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.keystore.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.moesif.publisher.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.notification.sender.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.notification.sender.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.notification.template.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.notification.template.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.oidc.scope.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.oidc.scope.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.agent.sharing.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.agent.sharing.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.agent.sharing.management.v1 | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.capability.governance.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.capability.governance.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.capability.governance.v1 | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.configs.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.configs.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.role.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.role.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.selfservice.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.selfservice.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.user.invitation.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.user.invitation.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.user.invitation.management.v1 | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.user.sharing.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.user.sharing.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.organization.user.sharing.management.v1 | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.permission.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.rule.metadata.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.rule.metadata.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.script.library.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.script.library.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.secret.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.secret.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.tenant.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.tenant.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.userstore.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.userstore.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.userstore.v1 | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.userstore.v1 | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.vc.template.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.vc.template.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.webhook.management.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.webhook.management.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.webhook.metadata.common | — | indirect |
| Maven | org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.webhook.metadata.common | 1.6.39-SNAPSHOT | indirect |
| Maven | org.wso2.carbon.identity.workflow.impl.bps:org.wso2.carbon.identity.workflow.impl | — | indirect |
| Maven | org.wso2.carbon.identity.workflow.impl.bps:org.wso2.carbon.identity.workflow.impl | 5.5.21 | indirect |
| Maven | org.wso2.carbon.multitenancy:org.wso2.carbon.tenant.mgt | — | indirect |
| Maven | org.wso2.carbon.multitenancy:org.wso2.carbon.tenant.mgt | 4.11.31 | indirect |
| Maven | org.wso2.carbon:org.wso2.carbon.admin.advisory.mgt | — | indirect |
| Maven | org.wso2.carbon:org.wso2.carbon.admin.advisory.mgt | 4.10.99 | indirect |
| Maven | org.wso2.carbon:org.wso2.carbon.user.api | — | indirect |
| Maven | org.wso2.carbon:org.wso2.carbon.user.api | 4.10.99 | indirect |
| Maven | org.wso2.carbon:org.wso2.carbon.user.core | — | indirect |
| Maven | org.wso2.carbon:org.wso2.carbon.user.core | 4.10.99 | indirect |
| Maven | org.wso2.carbon:org.wso2.carbon.utils | — | indirect |
| Maven | org.wso2.carbon:org.wso2.carbon.utils | 4.10.99 | indirect |
Installing maven:org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.common@1.6.38 pulls in 280 packages, direct and transitive: 13 carry known advisories, of which 0 are direct dependencies.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| org.apache.tomcat:tomcat-catalina | 9.0.113 | indirect | critical | 9 | 11.0.22 |
| org.ops4j.pax.logging:pax-logging-log4j2 | 1.10.9 | indirect | critical | 1 | 2.0.11 |
| com.fasterxml.jackson.core:jackson-core | 2.21.2 | indirect | high | 1 | 3.2.1 |
| com.fasterxml.jackson.core:jackson-databind | 2.21.2 | indirect | high | 10 | 3.2.1 |
| org.apache.cxf:cxf-core | 3.5.9 | indirect | high | 2 | 4.1.1 |
| org.apache.httpcomponents.client5:httpclient5 | 5.4.1 | indirect | high | 1 | 5.4.3 |
| org.apache.tomcat:tomcat-tribes | 9.0.113 | indirect | high | 2 | 11.0.21 |
| org.bouncycastle:bcpg-jdk18on | 1.77 | indirect | high | 1 | 1.84 |
| org.codehaus.plexus:plexus-utils | 3.0.24 | indirect | high | 1 | 4.0.3 |
| xerces:xercesImpl | 2.6.2 | indirect | high | 5 | 2.12.2 |
| commons-lang:commons-lang | 2.6 | indirect | moderate | 1 | 3.18.0 |
| org.apache.commons:commons-lang3 | 3.2.1 | indirect | moderate | 1 | 3.18.0 |
| org.bouncycastle:bcpkix-jdk18on | 1.78.1 | indirect | moderate | 2 | 2.0.8 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Maven.