Jellyfin Easy Metadata Manager (Also called as "JEMM") is a free and open-source tool created to help heavy users of Jellyfin Project to manage their instances. The main purpose of JEMM is to make it easier to fill in the metadata fields of library items and folders.
CesarBianchi/JellyfinEasyMetadataManager має індекс здоров’я 57 зі 100, що відповідає смузі «Помірний». Найвищий показник — Vitality (74/100), найнижчий — Sustainability & Governance (37/100). Останнє оновлення було 4 дні тому. Більшість нещодавньої роботи виконує один учасник.
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Цей репозиторій належить особистому обліковому запису. Проєкт з єдиним власником несе більший ризик безперервності, ніж підтримуваний організацією.
Чи живий проєкт — чи пишеться код і чи виходять релізи?
| 36/36 | Свіжість push — останній push 4 дн. тому |
| 4.8/36 | Ритм комітів — 7/52 тижнів із комітами |
| 17.3/18 | Обсяг комітів — 84 комітів за останній рік |
| 10/10 | OpenSSF Scorecard: Maintained — 21 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 |
| commits_last_year | 84 |
| human_commit_share | — |
| days_since_last_push | 4 |
| active_weeks_last_year | 7 |
| 27/27 | Випускає релізи — опубліковано 3 релізів |
| 36/36 | Свіжість релізів — останній реліз 4 дн. тому |
| 12.6/27 | Ритм релізів — реліз кожні ~140 дн. |
| 0/10 | OpenSSF Scorecard: Signed-Releases — немає даних |
| releases_count | 3 |
| latest_release_tag | v1.3.1 |
| releases_from_tags | ні |
| days_since_latest_release | 4 |
| mean_days_between_releases | 140 |
Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?
| 32.9/60 | Зірки — 107 зірок |
| 7.5/25 | Форки — 9 форків |
| 3.3/15 | Спостерігачі — 5 спостерігачів |
| forks | 9 |
| stars | 107 |
| watchers | 5 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
| 22.5/22.5 | README |
| 22.5/22.5 | Ліцензія — визнана ліцензія (GPL-2.0) |
| 0/18 | Настанови CONTRIBUTING |
| 0/13.5 | Кодекс поведінки |
| 0/7.2 | Шаблон issue |
| 0/6.3 | Шаблон PR |
| has_readme | так |
| has_license | так |
| has_contributing | ні |
| has_issue_template | ні |
| has_code_of_conduct | ні |
| has_pull_request_template | ні |
Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?
| 9/54 | Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів |
| 0.1/22.5 | Розподіл комітів — головний контриб’ютор — автор 100% комітів |
| 2.7/13.5 | Широта контриб’юторів — 2 контриб’юторів |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0,996 |
| 40.3/46.8 | Вирішення issue — закрито 86% issue |
| 24/38.3 | Прийняття PR — злито 27/43 вирішених PR |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
| merged_prs | 27 |
| open_issues | 4 |
| closed_issues | 25 |
| issue_closed_ratio | 0,862 |
| closed_unmerged_prs | 16 |
| 10/30 | Підтримка власника — особистий (користувацький) обліковий запис |
| 0/20 | Верифікований домен — не застосовно до користувацьких облікових записів |
| 5/25 | Охоплення власника — 4 підписників у CesarBianchi |
| 16.4/25 | Послужний список — 3 публічних репозиторіїв, вік облікового запису ~7 р. |
| followers | 4 |
| owner_type | User |
| is_verified | — |
| owner_login | CesarBianchi |
| public_repos | 3 |
| account_age_days | 2 845 |
Чи наявні базові інженерні практики та документація?
| 0/24 | Процеси CI |
| 24/24 | Наявні тести |
| 0/16 | Конфігурація лінтера |
| 0/9.6 | Pre-commit-хуки |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 5 out of 5 merged PRs checked by a CI test -- score normalized to 10 |
| has_ci | ні |
| has_tests | так |
| has_editorconfig | ні |
| has_linter_config | ні |
| has_precommit_config | ні |
| 30/30 | README |
| 25/25 | Каталог документації |
| 0/15 | Сайт документації / домашня сторінка |
| 10/10 | Опис репозиторію |
| 10/10 | Теми — 5 тем |
| 10/10 | Wiki |
| topics | jellyfin, jellyfin-client, jellyfin-metadata-manager, jellyfin-easy-metadata-manager, jemm |
| has_wiki | так |
| homepage | — |
| has_readme | так |
| has_docs_dir | так |
| has_description | так |
Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?
| 6/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — немає даних |
| 2.5/2.5 | CI-Tests — 5 out of 5 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 0/10 | Dangerous-Workflow — немає даних |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Ліцензія — license file detected |
| 7.5/7.5 | Maintained — 21 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — немає даних |
| 0/5 | Pinned-Dependencies — немає даних |
| 5/5 | SAST — SAST tool is run on all commits |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — немає даних |
| 0/7.5 | Token-Permissions — немає даних |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 7 |
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
| 0/45 | Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора |
| 0/15 | Машиночитана документація (llms.txt) |
| 0/40 | Читабельна історія комітів — немає даних |
| has_llms_txt | ні |
| legible_history_share | — |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
| 0/18 | Розгортання однією командою |
| 22/22 | Автоматизовані тести |
| 0/11 | Конфігурація лінтера / форматера |
| 11/11 | Статична перевірка типів — Java (статично типізована) |
| 0/10 | Відтворюване середовище |
| 0/10 | Підтверджена практика роботи з агентами — немає даних |
| 0/8 | Автоматизоване супроводження — немає даних |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — немає даних |
| has_nix | ні |
| has_tests | так |
| lockfiles | — |
| has_dockerfile | ні |
| typed_language | так |
| bootstrap_files | — |
| has_devcontainer | ні |
| has_linter_config | ні |
| typecheck_configs | — |
| agent_commit_share | — |
| toolchain_manifests | — |
| dependency_bot_commit_share | — |
| 45/45 | Типізований код — Java (статично типізована) |
| 53.1/55 | Керовані розміри файлів — 5/148 файлів вихідного коду понад 60 КБ |
| primary_language | Java |
| largest_source_bytes | 188 096 |
| source_files_sampled | 148 |
| oversized_source_files | 5 |
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).
| 8 | Binary-Artifacts | binaries present in source code |
| н/д | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 5 out of 5 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/7 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| н/д | Dangerous-Workflow | no workflows found |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 21 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 |
| н/д | Packaging | packaging workflow not detected |
| н/д | Pinned-Dependencies | no dependencies found |
| 10 | SAST | SAST tool is run on all commits |
| 10 | Security-Policy | security policy file detected |
| н/д | Signed-Releases | no releases found |
| н/д | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
| Реєстр | Пакет | Обмеження версії | Маніфест |
|---|---|---|---|
| Maven | dev.javatools:json-utils | 1.0.1 | pom.xml |
| Maven | com.googlecode:google-api-translate-java | 0.92 | pom.xml |
| Maven | org.json4s:json4s-native-core_3 | 4.1.0-M3 | pom.xml |
| Maven | com.googlecode.json-simple:json-simple | 1.1 | pom.xml |
| Maven | org.apache.httpcomponents:httpclient | 4.5.14 | pom.xml |
| Maven | com.formdev:flatlaf | 3.2.5 | pom.xml |
| Maven | commons-codec:commons-codec | 1.16.0 | pom.xml |
| Maven | com.formdev:flatlaf-intellij-themes | 3.2.5 | pom.xml |
| Maven | net.sf.jasperreports:jasperreports | 7.0.7 | pom.xml |
| Maven | commons-io:commons-io | 2.18.0 | pom.xml |
| Maven | com.fasterxml.jackson.core:jackson-annotations | 2.22 | pom.xml |
| Maven | com.fasterxml.jackson.core:jackson-core | 2.22.1 | pom.xml |
| Maven | commons-beanutils:commons-beanutils | 1.11.0 | pom.xml |
Повний розв'язаний набір залежностей із графа залежностей GitHub: 13 прямих і 49 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
| Реєстр | Пакет | Версія | Зв'язок |
|---|---|---|---|
| Maven | com.fasterxml.jackson.core:jackson-annotations | 2.22 | пряма |
| Maven | com.fasterxml.jackson.core:jackson-core | 2.22.1 | пряма |
| Maven | com.formdev:flatlaf | 3.2.5 | пряма |
| Maven | com.formdev:flatlaf-intellij-themes | 3.2.5 | пряма |
| Maven | com.googlecode.json-simple:json-simple | 1.1 | пряма |
| Maven | com.googlecode:google-api-translate-java | 0.92 | пряма |
| Maven | commons-beanutils:commons-beanutils | 1.11.0 | пряма |
| Maven | commons-codec:commons-codec | 1.16.0 | пряма |
| Maven | commons-io:commons-io | 2.18.0 | пряма |
| Maven | dev.javatools:json-utils | 1.0.1 | пряма |
| Maven | net.sf.jasperreports:jasperreports | 7.0.7 | пряма |
| Maven | org.apache.httpcomponents:httpclient | 4.5.14 | пряма |
| Maven | org.json4s:json4s-native-core_3 | 4.1.0-M3 | пряма |
| Maven | com.fasterxml.jackson.core:jackson-databind | 2.22.1 | непряма |
| Maven | com.fasterxml.jackson.dataformat:jackson-dataformat-xml | 2.18.6 | непряма |
| Maven | com.fasterxml.jackson.dataformat:jackson-dataformat-yaml | 2.22.1 | непряма |
| Maven | com.fasterxml.woodstox:woodstox-core | 7.0.0 | непряма |
| Maven | commons-collections:commons-collections | 3.2.2 | непряма |
| Maven | commons-logging:commons-logging | 1.2 | непряма |
| Maven | dev.javatools:map-utils | 1.0.1 | непряма |
| Maven | net.bytebuddy:byte-buddy | 1.10.20 | непряма |
| Maven | net.bytebuddy:byte-buddy-agent | 1.10.20 | непряма |
| Maven | org.apache.commons:commons-beanutils2 | 2.0.0-M2 | непряма |
| Maven | org.apache.commons:commons-collections4 | 4.5.0 | непряма |
| Maven | org.apache.commons:commons-lang3 | 3.20.0 | непряма |
| Maven | org.apache.httpcomponents:httpcore | 4.4.16 | непряма |
| Maven | org.apache.xmlgraphics:batik-anim | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-awt-util | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-bridge | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-constants | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-css | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-dom | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-ext | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-gvt | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-i18n | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-parser | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-script | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-shared-resources | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-svg-dom | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-util | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:batik-xml | 1.19 | непряма |
| Maven | org.apache.xmlgraphics:xmlgraphics-commons | 2.11 | непряма |
| Maven | org.apiguardian:apiguardian-api | 1.1.2 | непряма |
| Maven | org.codehaus.woodstox:stax2-api | 4.2.2 | непряма |
| Maven | org.json4s:json4s-ast_3 | 4.1.0-M3 | непряма |
| Maven | org.jspecify:jspecify | 1.0.0 | непряма |
| Maven | org.junit.jupiter:junit-jupiter | 6.1.2 | непряма |
| Maven | org.junit.jupiter:junit-jupiter-api | 6.1.2 | непряма |
| Maven | org.junit.jupiter:junit-jupiter-engine | 6.1.2 | непряма |
| Maven | org.junit.jupiter:junit-jupiter-params | 6.1.2 | непряма |
| Maven | org.junit.platform:junit-platform-commons | 6.1.2 | непряма |
| Maven | org.junit.platform:junit-platform-engine | 6.1.2 | непряма |
| Maven | org.mockito:mockito-core | 3.9.0 | непряма |
| Maven | org.objenesis:objenesis | 3.2 | непряма |
| Maven | org.opentest4j:opentest4j | 1.3.0 | непряма |
| Maven | org.projectlombok:lombok | 1.18.46 | непряма |
| Maven | org.scala-lang:scala-library | 2.13.10 | непряма |
| Maven | org.scala-lang:scala3-library_3 | 3.2.2 | непряма |
| Maven | org.slf4j:slf4j-api | 2.1.0-alpha1 | непряма |
| Maven | org.slf4j:slf4j-simple | 2.1.0-alpha1 | непряма |
| Maven | org.yaml:snakeyaml | 2.5 | непряма |
| Maven | xml-apis:xml-apis-ext | 1.3.04 | непряма |
{
"data": {
"repo": {
"topics": [
"jellyfin",
"jellyfin-client",
"jellyfin-metadata-manager",
"jellyfin-easy-metadata-manager",
"jemm"
],
"is_fork": false,
"size_kb": 237259,
"has_wiki": true,
"homepage": null,
"languages": {
"Java": 1003660
},
"pushed_at": "2026-07-13T01:09:24Z",
"created_at": "2023-10-01T21:01:07Z",
"owner_type": "User",
"updated_at": "2026-07-13T23:36:47Z",
"description": "Jellyfin Easy Metadata Manager (Also called as \"JEMM\") is a free and open-source tool created to help heavy users of Jellyfin Project to manage their instances. The main purpose of JEMM is to make it easier to fill in the metadata fields of library items and folders. ",
"is_archived": false,
"is_disabled": false,
"license_spdx": "GPL-2.0",
"default_branch": "main",
"primary_language": "Java",
"significant_languages": [
"Java"
]
},
"owner": {
"blog": null,
"name": "Cesar Bianchi",
"type": "User",
"login": "CesarBianchi",
"company": null,
"location": "São Paulo, Brazil",
"followers": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/43796102?v=4",
"created_at": "2018-10-02T20:49:57Z",
"is_verified": null,
"public_repos": 3,
"account_age_days": 2845
},
"activity": {
"releases_count": 3,
"commits_last_year": 84,
"latest_release_at": "2026-07-13T01:09:25Z",
"latest_release_tag": "v1.3.1",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 7,
"days_since_latest_release": 4,
"mean_days_between_releases": 140
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 9,
"stars": 107,
"watchers": 5,
"open_issues_and_prs": 4
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"largest_source_bytes": 188096,
"source_files_sampled": 148,
"oversized_source_files": 5,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pom.xml"
],
"ecosystems": [
"maven"
],
"dependencies": [
{
"name": "dev.javatools:json-utils",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "1.0.1"
},
{
"name": "com.googlecode:google-api-translate-java",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "0.92"
},
{
"name": "org.json4s:json4s-native-core_3",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "4.1.0-M3"
},
{
"name": "com.googlecode.json-simple:json-simple",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "1.1"
},
{
"name": "org.apache.httpcomponents:httpclient",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "4.5.14"
},
{
"name": "com.formdev:flatlaf",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "3.2.5"
},
{
"name": "commons-codec:commons-codec",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "1.16.0"
},
{
"name": "com.formdev:flatlaf-intellij-themes",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "3.2.5"
},
{
"name": "net.sf.jasperreports:jasperreports",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "7.0.7"
},
{
"name": "commons-io:commons-io",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "2.18.0"
},
{
"name": "com.fasterxml.jackson.core:jackson-annotations",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "2.22"
},
{
"name": "com.fasterxml.jackson.core:jackson-core",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "2.22.1"
},
{
"name": "commons-beanutils:commons-beanutils",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "1.11.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "com.fasterxml.jackson.core:jackson-annotations",
"direct": true,
"version": "2.22",
"ecosystem": "maven"
},
{
"name": "com.fasterxml.jackson.core:jackson-core",
"direct": true,
"version": "2.22.1",
"ecosystem": "maven"
},
{
"name": "com.formdev:flatlaf",
"direct": true,
"version": "3.2.5",
"ecosystem": "maven"
},
{
"name": "com.formdev:flatlaf-intellij-themes",
"direct": true,
"version": "3.2.5",
"ecosystem": "maven"
},
{
"name": "com.googlecode.json-simple:json-simple",
"direct": true,
"version": "1.1",
"ecosystem": "maven"
},
{
"name": "com.googlecode:google-api-translate-java",
"direct": true,
"version": "0.92",
"ecosystem": "maven"
},
{
"name": "commons-beanutils:commons-beanutils",
"direct": true,
"version": "1.11.0",
"ecosystem": "maven"
},
{
"name": "commons-codec:commons-codec",
"direct": true,
"version": "1.16.0",
"ecosystem": "maven"
},
{
"name": "commons-io:commons-io",
"direct": true,
"version": "2.18.0",
"ecosystem": "maven"
},
{
"name": "dev.javatools:json-utils",
"direct": true,
"version": "1.0.1",
"ecosystem": "maven"
},
{
"name": "net.sf.jasperreports:jasperreports",
"direct": true,
"version": "7.0.7",
"ecosystem": "maven"
},
{
"name": "org.apache.httpcomponents:httpclient",
"direct": true,
"version": "4.5.14",
"ecosystem": "maven"
},
{
"name": "org.json4s:json4s-native-core_3",
"direct": true,
"version": "4.1.0-M3",
"ecosystem": "maven"
},
{
"name": "com.fasterxml.jackson.core:jackson-databind",
"direct": false,
"version": "2.22.1",
"ecosystem": "maven"
},
{
"name": "com.fasterxml.jackson.dataformat:jackson-dataformat-xml",
"direct": false,
"version": "2.18.6",
"ecosystem": "maven"
},
{
"name": "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
"direct": false,
"version": "2.22.1",
"ecosystem": "maven"
},
{
"name": "com.fasterxml.woodstox:woodstox-core",
"direct": false,
"version": "7.0.0",
"ecosystem": "maven"
},
{
"name": "commons-collections:commons-collections",
"direct": false,
"version": "3.2.2",
"ecosystem": "maven"
},
{
"name": "commons-logging:commons-logging",
"direct": false,
"version": "1.2",
"ecosystem": "maven"
},
{
"name": "dev.javatools:map-utils",
"direct": false,
"version": "1.0.1",
"ecosystem": "maven"
},
{
"name": "net.bytebuddy:byte-buddy",
"direct": false,
"version": "1.10.20",
"ecosystem": "maven"
},
{
"name": "net.bytebuddy:byte-buddy-agent",
"direct": false,
"version": "1.10.20",
"ecosystem": "maven"
},
{
"name": "org.apache.commons:commons-beanutils2",
"direct": false,
"version": "2.0.0-M2",
"ecosystem": "maven"
},
{
"name": "org.apache.commons:commons-collections4",
"direct": false,
"version": "4.5.0",
"ecosystem": "maven"
},
{
"name": "org.apache.commons:commons-lang3",
"direct": false,
"version": "3.20.0",
"ecosystem": "maven"
},
{
"name": "org.apache.httpcomponents:httpcore",
"direct": false,
"version": "4.4.16",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-anim",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-awt-util",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-bridge",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-constants",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-css",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-dom",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-ext",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-gvt",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-i18n",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-parser",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-script",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-shared-resources",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-svg-dom",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-util",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:batik-xml",
"direct": false,
"version": "1.19",
"ecosystem": "maven"
},
{
"name": "org.apache.xmlgraphics:xmlgraphics-commons",
"direct": false,
"version": "2.11",
"ecosystem": "maven"
},
{
"name": "org.apiguardian:apiguardian-api",
"direct": false,
"version": "1.1.2",
"ecosystem": "maven"
},
{
"name": "org.codehaus.woodstox:stax2-api",
"direct": false,
"version": "4.2.2",
"ecosystem": "maven"
},
{
"name": "org.json4s:json4s-ast_3",
"direct": false,
"version": "4.1.0-M3",
"ecosystem": "maven"
},
{
"name": "org.jspecify:jspecify",
"direct": false,
"version": "1.0.0",
"ecosystem": "maven"
},
{
"name": "org.junit.jupiter:junit-jupiter",
"direct": false,
"version": "6.1.2",
"ecosystem": "maven"
},
{
"name": "org.junit.jupiter:junit-jupiter-api",
"direct": false,
"version": "6.1.2",
"ecosystem": "maven"
},
{
"name": "org.junit.jupiter:junit-jupiter-engine",
"direct": false,
"version": "6.1.2",
"ecosystem": "maven"
},
{
"name": "org.junit.jupiter:junit-jupiter-params",
"direct": false,
"version": "6.1.2",
"ecosystem": "maven"
},
{
"name": "org.junit.platform:junit-platform-commons",
"direct": false,
"version": "6.1.2",
"ecosystem": "maven"
},
{
"name": "org.junit.platform:junit-platform-engine",
"direct": false,
"version": "6.1.2",
"ecosystem": "maven"
},
{
"name": "org.mockito:mockito-core",
"direct": false,
"version": "3.9.0",
"ecosystem": "maven"
},
{
"name": "org.objenesis:objenesis",
"direct": false,
"version": "3.2",
"ecosystem": "maven"
},
{
"name": "org.opentest4j:opentest4j",
"direct": false,
"version": "1.3.0",
"ecosystem": "maven"
},
{
"name": "org.projectlombok:lombok",
"direct": false,
"version": "1.18.46",
"ecosystem": "maven"
},
{
"name": "org.scala-lang:scala-library",
"direct": false,
"version": "2.13.10",
"ecosystem": "maven"
},
{
"name": "org.scala-lang:scala3-library_3",
"direct": false,
"version": "3.2.2",
"ecosystem": "maven"
},
{
"name": "org.slf4j:slf4j-api",
"direct": false,
"version": "2.1.0-alpha1",
"ecosystem": "maven"
},
{
"name": "org.slf4j:slf4j-simple",
"direct": false,
"version": "2.1.0-alpha1",
"ecosystem": "maven"
},
{
"name": "org.yaml:snakeyaml",
"direct": false,
"version": "2.5",
"ecosystem": "maven"
},
{
"name": "xml-apis:xml-apis-ext",
"direct": false,
"version": "1.3.04",
"ecosystem": "maven"
}
],
"collected": true,
"truncated": false,
"total_count": 62,
"direct_count": 13,
"indirect_count": 49
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 27,
"open_issues": 4,
"closed_ratio": 0.862,
"closed_issues": 25,
"closed_unmerged_prs": 16
},
"bus_factor": 1,
"top_contributors": [
{
"type": "User",
"login": "CesarBianchi",
"commits": 240,
"avatar_url": "https://avatars.githubusercontent.com/u/43796102?u=c678ba52ede949bcd2ef6cc01229c408f87ac66a&v=4"
},
{
"type": "Bot",
"login": "dependabot[bot]",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/in/29110?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.996
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 8,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/7 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "21 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "e3e2c01414421d96b8cc5a63bc00b104af820c51",
"ran_at": "2026-07-17T23:59:47Z",
"aggregate_score": 7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/CesarBianchi/JellyfinEasyMetadataManager",
"host": "github.com",
"name": "JellyfinEasyMetadataManager",
"owner": "CesarBianchi"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 70,
"vitality": 74,
"community": 47,
"governance": 37,
"engineering": 60
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 74,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"commits_last_year": 84,
"human_commit_share": null,
"days_since_last_push": 4,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "84 commits in the last year",
"points": 17.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 84
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "21 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 84,
"inputs": {
"releases_count": 3,
"latest_release_tag": "v1.3.1",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 140
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "3 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 3
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~140 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 140
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "no_commit_sample",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 47,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"forks": 9,
"stars": 107,
"watchers": 5,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "107 stars",
"points": 32.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 107
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "9 forks",
"points": 7.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 9
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "5 watchers",
"points": 3.3,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 5
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (GPL-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "GPL-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 37,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 12,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.996
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"merged_prs": 27,
"open_issues": 4,
"closed_issues": 25,
"issue_closed_ratio": 0.862,
"closed_unmerged_prs": 16
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "86% of issues closed",
"points": 40.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 86
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "27/43 decided PRs merged",
"points": 24,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 27,
"decided": 43
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"followers": 4,
"owner_type": "User",
"is_verified": null,
"owner_login": "CesarBianchi",
"public_repos": 3,
"account_age_days": 2845
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "4 followers of CesarBianchi",
"points": 5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 4,
"login": "CesarBianchi"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "3 public repos, account ~7 yr old",
"points": 16.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 3
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 60,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"jellyfin",
"jellyfin-client",
"jellyfin-metadata-manager",
"jellyfin-easy-metadata-manager",
"jemm"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "5 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 5
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 70,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 70,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "21 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 39,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": "Excluded from scoring (no data or not applicable): Legible commit history. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"legible_commit_history"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"has_llms_txt": false,
"legible_history_share": null,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): Demonstrated agent practice, Automated maintenance, OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"demonstrated_agent_practice",
"automated_maintenance",
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 46,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": null,
"toolchain_manifests": [],
"dependency_bot_commit_share": null
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Java (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 188096,
"source_files_sampled": 148,
"oversized_source_files": 5
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "5/148 source files over 60KB",
"points": 53.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 148,
"oversized": 5
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Could not fetch maven package 'com.lariflix:jemm' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-18T00:00:06.394824Z",
"schema_version": "0.12.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/CesarBianchi/JellyfinEasyMetadataManager.svg",
"full_name": "CesarBianchi/JellyfinEasyMetadataManager",
"license_state": "standard",
"license_spdx": "GPL-2.0"
}Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.12.0 — повна методологія · вікі метрик.
Як окремий результат виглядає на тлі всього реєстру: сукупна статистика.