Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-28 14:11 UTC

apache / maven-jar-plugin

Apache Maven JAR Plugin

Java · GroovyApache-2.0★ 89 зірок⑂ 84 форкиз груд. 2017 р.Переглянути на GitHub ↗

apache/maven-jar-plugin має індекс здоров’я 72 зі 100, що відповідає смузі «Добрий». Найвищий показник — Sustainability & Governance (86/100), найнижчий — Security (59/100). Останнє оновлення було 5 днів тому. Більшість нещодавньої роботи виконують 5 учасників.

72
загалом / 100
Добрий

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

72
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

The Apache Software FoundationОрганізація
23 594 підписники3 148 публічних репозиторіївз січ. 2009 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікація
Mavenorg.apache.maven.plugins:maven-jar-plugin4.0.0-beta-1-275 днів тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

78Добрий · 22% загального індексу
Як обчислюється оцінка
36/36Свіжість push — останній push 5 дн. тому
14.5/36Ритм комітів — 21/52 тижнів із комітами
13.9/18Обсяг комітів — 34 комітів за останній рік
10/10OpenSSF Scorecard: Maintained — 14 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Використані вхідні дані
commits_last_year34
human_commit_share0,66
days_since_last_push5
active_weeks_last_year21
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 8 релізів
36/36Свіжість релізів — останній реліз 5 дн. тому
12.6/27Ритм релізів — реліз кожні ~231,9 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count8
latest_release_tagmaven-jar-plugin-3.5.1
releases_from_tagsні
days_since_latest_release5
mean_days_between_releases231,9
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

63Помірний · 18% загального індексу
Як обчислюється оцінка
31.5/60Зірки — 89 зірок
16/25Форки — 84 форків
8/15Спостерігачі — 28 спостерігачів
Використані вхідні дані
forks84
stars89
watchers28
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (Apache-2.0)
0/18Настанови CONTRIBUTING
13.5/13.5Кодекс поведінки
0/7.2Шаблон issue
6.3/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingні
has_issue_templateні
has_code_of_conductтак
has_pull_request_templateтак

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

86Відмінний · 24% загального індексу
Як обчислюється оцінка
45.9/54Бас-фактор — на 5 контриб’ютор(ів) припадає половина всіх комітів
18.4/22.5Розподіл комітів — головний контриб’ютор — автор 18% комітів
13.5/13.5Широта контриб’юторів — 43 контриб’юторів
10/10OpenSSF Scorecard: Contributors — project has 47 contributing companies or organizations
Використані вхідні дані
bus_factor5
contributors_sampled43
top_contributor_share0,184
Як обчислюється оцінка
45/46.8Вирішення issue — закрито 96% issue
24.7/38.3Прийняття PR — злито 152/235 вирішених PR
7.5/15OpenSSF Scorecard: Code-Review — Found 10/17 approved changesets -- score normalized to 5
Використані вхідні дані
merged_prs152
open_issues12
closed_issues306
issue_closed_ratio0,962
closed_unmerged_prs83
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
25/25Охоплення власника — 23 594 підписників у apache
25/25Послужний список — 3 148 публічних репозиторіїв, вік облікового запису ~17 р.
Використані вхідні дані
followers23 594
owner_typeOrganization
is_verified
owner_loginapache
public_repos3 148
account_age_days6 400

Супровід пакетів

100Відмінний
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у maven
35/35Свіжість публікацій — остання публікація 5 дн. тому
20/20Історія версій — 27 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesorg.apache.maven.plugins:maven-jar-plugin
ecosystemsmaven
any_deprecatedні
min_days_since_publish5

Інженерна якість

Чи наявні базові інженерні практики та документація?

67Помірний · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 4 процес(ів) CI
24/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 26 out of 26 merged PRs checked by a CI test -- score normalized to 10
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configні
has_precommit_configні

Документація

65Помірний
Як обчислюється оцінка
30/30README
0/25Каталог документації
15/15Сайт документації / домашня сторінка — https://maven.apache.org/plugins/maven-jar-plugin/
10/10Опис репозиторію
10/10Теми — 5 тем
0/10Wiki
Використані вхідні дані
topicsjava, build-management, maven, maven-plugins, maven-jar-plugin
has_wikiні
homepagehttps://maven.apache.org/plugins/maven-jar-plugin/
has_readmeтак
has_docs_dirні
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

59Помірний · 16% загального індексу

Стан безпеки

57Помірний
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — немає даних
2.5/2.5CI-Tests — 26 out of 26 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
3.8/7.5Code-Review — Found 10/17 approved changesets -- score normalized to 5
2.5/2.5Contributors — project has 47 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
7.5/7.5Maintained — 14 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — немає даних
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 11 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate5,7
Виключено з оцінювання (немає даних або не застосовно): branch_protection, packaging, signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
35/35Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
6.8/25Непрямі залежності без відомих сповіщень — уражено 4: commons-io:commons-io 2.11.0 (high 7.5), org.codehaus.plexus:plexus-utils 4.0.1 (high), org.apache.commons:commons-lang3 3.14.0 (moderate 6.5), ще +1
24.1/40Немає задавнених сповіщень — 4 пакет(ів) зі сповіщеннями без реакції понад 90 дн.; найдавніше опубліковано 783 дн. тому
Використані вхідні дані
sourceosv
advisories4
affected_packages4
assessed_packages24
unassessed_packages0
affected_by_severityhigh 2, moderate 2
direct_affected_packages0
Звірено з runtime-замиканням залежностей maven:org.apache.maven.plugins:maven-jar-plugin@4.0.0-beta-1 — тим, що тягне за собою встановлення опублікованого пакета, — 24 пакетів. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

60Помірний · 0% загального індексу
Як обчислюється оцінка
45/45Інструкції для агентів — AGENTS.md
0/15Машиночитана документація (llms.txt)
13.7/40Читабельна історія комітів — намір зазначено у 17 з 66 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,258
agent_instruction_filesAGENTS.md
agent_instruction_max_bytes1 157
Як обчислюється оцінка
12.6/18Розгортання однією командою — pom.xml, src/it/MJAR-162/pom.xml, src/it/MJAR-183/pom.xml (домовленість інструментарію, без раннера задач)
22/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
11/11Статична перевірка типів — Java (статично типізована)
0/10Відтворюване середовище
0/10Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом
8/8Автоматизоване супроводження — 34 з останніх 100 комітів — автоматичні оновлення залежностей
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsтак
lockfiles
has_dockerfileні
typed_languageтак
bootstrap_files
has_devcontainerні
has_linter_configні
typecheck_configs
agent_commit_share0
toolchain_manifestspom.xml, src/it/MJAR-162/pom.xml, src/it/MJAR-183/pom.xml, src/it/MJAR-198/pom.xml, src/it/MJAR-199-change-classifier/pom.xml, src/it/MJAR-199/pom.xml, src/it/MJAR-228/pom.xml, src/it/MJAR-238-modular-jar-main-class/pom.xml, src/it/MJAR-260-invalid-automatic-module-name/pom.xml, src/it/MJAR-260-valid-automatic-module-name/pom.xml, src/it/MJAR-275-reproducible-module-info/pom.xml, src/it/MJAR-292-detect-mjar-no-versions/pom.xml, src/it/MJAR-292-detect-mjar/pom.xml, src/it/MJAR-292-disable-detect-mjar/pom.xml, src/it/MJAR-30-excludes/pom.xml, src/it/MJAR-30-fullcontent/pom.xml, src/it/MJAR-30-include/pom.xml, src/it/MJAR-539-build-environment-entries/pom.xml, src/it/MJAR-60/pom.xml, src/it/MJAR-70-no-recreation/pom.xml, src/it/MJAR-70-recreation/pom.xml, src/it/MJAR-75/client/pom.xml, src/it/MJAR-75/model/pom.xml, src/it/MJAR-75/pom.xml, src/it/MJAR-80-exclude/pom.xml, src/it/MJAR-80-fullcontent/pom.xml, src/it/MJAR-80-include/pom.xml, src/it/MJAR-82/pom.xml, src/it/manifest-content/pom.xml, src/it/mjar-139/pom.xml, src/it/mjar-71-01/pom.xml, src/it/mjar-71-02/pom.xml, src/it/mjar-90/pom.xml, src/it/project-004/pom.xml, src/it/test-jar-attach/pom.xml, src/test/resources/unit/jar-basic-test/pom.xml
dependency_bot_commit_share0,34
Як обчислюється оцінка
45/45Типізований код — Java (статично типізована)
55/55Керовані розміри файлів — 0/61 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageJava
largest_source_bytes13 928
source_files_sampled61
oversized_source_files0
Як обчислюється оцінка
0/40Схема API (OpenAPI/GraphQL/proto)
0/20Сервер MCP
40/40Придатні до запуску приклади — examples
Використані вхідні дані
example_dirsexamples
has_mcp_signalні
api_schema_files

Ключові факти

89зірок GitHub
43контриб'юторів
34комітів за останні 12 місяців
5днів від останнього пушу
8релізів
5бас-фактор
12відкритих issue
Mavenпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Докладніше

Історія зірок і форків 0 ★ / 84 ⇿
0Зірки
84Форки
7Релізи

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

01325385063757422018-042022-052026-07
Мажорні 0Мінорні 0Патчі 0

Кожна точка охоплює 8 днів.

OpenSSF Scorecard 5.7 / 10
5.7сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-28 14:11 UTC

10Binary-Artifactsno binaries found in the repo
н/дBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests26 out of 26 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
5Code-ReviewFound 10/17 approved changesets -- score normalized to 5
10Contributorsproject has 47 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained14 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
н/дPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities11 existing vulnerabilities detected
Прямі залежності 5
РеєстрПакетОбмеження версіїМаніфест
Mavencom.google.guava:guava33.6.0-jrepom.xml
Mavenorg.junit:junit-bom${junitVersion}pom.xml
Mavenorg.apache.maven.shared:file-management${mavenFileManagementVersion}pom.xml
Mavenorg.apache.maven.shared:maven-archiver${mavenArchiverVersion}pom.xml
Mavenorg.codehaus.plexus:plexus-archiver${plexusArchiverVersion}pom.xml
Усі залежності 28

Повний розв'язаний набір залежностей із графа залежностей GitHub: 5 прямих і 23 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
Mavencom.google.guava:guava33.6.0-jreпряма
Mavenorg.apache.maven.shared:file-management3.2.0пряма
Mavenorg.apache.maven.shared:maven-archiver4.0.0-beta-5пряма
Mavenorg.codehaus.plexus:plexus-archiver4.12.0пряма
Mavenorg.junit:junit-bom5.14.4пряма
Mavencom.diffplug.spotless:spotless-maven-pluginнепряма
Mavencom.google.inject:guice5.1.0непряма
Mavencommons-lang:commons-lang2.3непряма
Mavenjunit:junit3.8.1непряма
Mavenjunit:junit4.13.2непряма
Mavenorg.apache.maven.its.it0126:model1.0-SNAPSHOTнепряма
Mavenorg.apache.maven.plugins:maven-antrun-plugin1.2непряма
Mavenorg.apache.maven.plugins:maven-compiler-plugin3.11.0непряма
Mavenorg.apache.maven.plugins:maven-dependency-pluginнепряма
Mavenorg.apache.maven.plugins:maven-install-pluginнепряма
Mavenorg.apache.maven.plugins:maven-invoker-pluginнепряма
Mavenorg.apache.maven.plugins:maven-jar-pluginнепряма
Mavenorg.apache.maven.plugins:maven-resources-plugin3.3.0непряма
Mavenorg.apache.maven:maven-api-annotations4.0.0-rc-4непряма
Mavenorg.apache.maven:maven-api-core4.0.0-rc-4непряма
Mavenorg.apache.maven:maven-api-di4.0.0-rc-4непряма
Mavenorg.apache.maven:maven-api-model4.0.0-rc-4непряма
Mavenorg.apache.maven:maven-testing4.0.0-rc-4непряма
Mavenorg.apache.rat:apache-rat-pluginнепряма
Mavenorg.codehaus.plexus:plexus-component-api1.0-alpha-15непряма
Mavenorg.codehaus.plexus:plexus-container-default1.0-alpha-15непряма
Mavenorg.junit.jupiter:junit-jupiter-apiнепряма
Mavenorg.slf4j:slf4j-log4j121.4.3непряма
Сповіщення про залежності 4

Встановлення maven:org.apache.maven.plugins:maven-jar-plugin@4.0.0-beta-1 тягне 24 пакетів, прямих і транзитивних: 4 мають відомі сповіщення, з них 0 — прямі залежності.

ПакетВерсіяЗв'язокКритичністьСповіщеньВиправлено в
commons-io:commons-io2.11.0непрямависока12.14.0
org.codehaus.plexus:plexus-utils4.0.1непрямависока14.0.3
org.apache.commons:commons-lang33.14.0непрямапомірна13.18.0
org.iq80.snappy:snappy0.4непрямапомірна10.5

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [
        "java",
        "build-management",
        "maven",
        "maven-plugins",
        "maven-jar-plugin"
      ],
      "is_fork": false,
      "size_kb": 707,
      "has_wiki": false,
      "homepage": "https://maven.apache.org/plugins/maven-jar-plugin/",
      "languages": {
        "Java": 107610,
        "Shell": 948,
        "Groovy": 39835
      },
      "pushed_at": "2026-07-23T10:21:44Z",
      "created_at": "2017-12-09T15:09:23Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T09:46:29Z",
      "description": "Apache Maven JAR Plugin",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "master",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Java",
      "significant_languages": [
        "Java",
        "Groovy"
      ]
    },
    "owner": {
      "blog": "https://www.apache.org/",
      "name": "The Apache Software Foundation",
      "type": "Organization",
      "login": "apache",
      "company": null,
      "location": null,
      "followers": 23594,
      "avatar_url": "https://avatars.githubusercontent.com/u/47359?v=4",
      "created_at": "2009-01-17T20:14:40Z",
      "is_verified": null,
      "public_repos": 3148,
      "account_age_days": 6400
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "maven-jar-plugin-3.5.1",
          "kind": "other",
          "published_at": "2026-07-22T16:21:29Z"
        },
        {
          "tag": "maven-jar-plugin-3.5.0",
          "kind": "other",
          "published_at": "2025-11-15T08:51:27Z"
        },
        {
          "tag": "maven-jar-plugin-4.0.0-beta-1",
          "kind": "other",
          "published_at": "2024-07-01T16:11:11Z"
        },
        {
          "tag": "maven-jar-plugin-3.4.2",
          "kind": "other",
          "published_at": "2024-06-19T18:10:17Z"
        },
        {
          "tag": "maven-jar-plugin-3.4.1",
          "kind": "other",
          "published_at": "2024-04-20T07:08:03Z"
        },
        {
          "tag": "maven-jar-plugin-3.4.0",
          "kind": "other",
          "published_at": "2024-04-13T07:05:28Z"
        },
        {
          "tag": "maven-jar-plugin-3.3.0",
          "kind": "other",
          "published_at": "2022-09-16T07:14:04Z"
        },
        {
          "tag": "maven-jar-plugin-3.2.2",
          "kind": "other",
          "published_at": "2022-02-10T08:14:15Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "7c80d856fbbc86c6e810c020f36e7de4ffd9b338",
          "body": "…e (#556)\n\nmaven-dependency-plugin:analyze reports 4 unused declared dependencies.\nThree are genuinely unused and can be removed:\n\n- maven-api-xml (provided): no code references; already transitive via\n  maven-api-core\n- maven-xml (provided): no code references; already transitive via\n  maven-testin\n[…]\nfor DI).\nTest-scope transitive deps at provided scope are excluded per Maven's\nscope table, so guice must be declared explicitly. Added it to\nignoredUnusedDeclaredDependencies to suppress the warning.",
          "is_bot": false,
          "headline": "Remove unused declared dependencies, suppress false positive for guic…",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2026-07-23T09:46:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "08d2091b720ed3737825c6fe4796f1ef4ec51002",
          "body": null,
          "is_bot": false,
          "headline": "configure ATR project",
          "author_name": "Hervé Boutemy",
          "author_login": "hboutemy",
          "committed_at": "2026-07-19T21:26:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b0ea6b24806ef5c4bdb0b88389b01d42702395b",
          "body": "…erability\n\nGenerated-by: Claude Code",
          "is_bot": false,
          "headline": "Add AGENTS.md + SECURITY.md security-model pointer for scanner discov…",
          "author_name": "Jarek Potiuk",
          "author_login": "potiuk",
          "committed_at": "2026-07-08T12:47:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df1257c1a48d30fe731aeef6d3cb562de9719eaa",
          "body": "Disable the Maven Archiver Build-Jdk-Spec default entry when archive manifest build environment entries are disabled.\n\nAdd an MJAR-539 integration test covering the modular jar path and verifying build environment manifest entries stay absent.",
          "is_bot": false,
          "headline": "Respect build environment manifest entry setting (#544)",
          "author_name": "Goutam Adwant",
          "author_login": "goutamadwant",
          "committed_at": "2026-07-02T11:34:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a23740d2cce4ccfba43c022305f1be440a3d10b",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 48 to 49.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-version: '49'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 48 to 49",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T17:27:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65c411be8e0197ce56dd5e44c94dec4f7a21038e",
          "body": null,
          "is_bot": false,
          "headline": "Replace maven-plugin-testing-harness with maven-testing from Maven 4",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2026-06-14T12:58:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "475af579c568a3708c425a519f70b6ce625de81c",
          "body": null,
          "is_bot": false,
          "headline": "Downgrade Guice version to 5.1.0",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2026-06-14T11:19:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58f46a5aef0ab7df17cbc0981c50bc98bc7abc1d",
          "body": null,
          "is_bot": false,
          "headline": "Fix javadoc",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2026-06-14T10:27:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03a2b66899e2c436bf1c27572b872385f97bb8f8",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.5.0-jre to 33.6.0-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-version: 33.6.0-jre\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.5.0-jre to 33.6.0-jre",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-13T19:35:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27809081c02308ba7050bdc3fc1a38e7d72ed396",
          "body": "Bumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.11.0 to 4.12.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)\n- [Commi\n[…]\nrg.codehaus.plexus:plexus-archiver\n  dependency-version: 4.12.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-13T19:35:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f631e64ea719dabfea36f6e6730c8763260aabb7",
          "body": "…oper injection in Maven 4",
          "is_bot": false,
          "headline": "MJAR: Increase visibility of @Inject fields to protected to ensure pr…",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2026-06-13T19:13:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b28cf109184b9836458a12d35eb9d22f3bca8395",
          "body": "… visibility and adding fallbacks",
          "is_bot": false,
          "headline": "MJAR: Fix NullPointerException in AbstractJarMojo by increasing field…",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2026-06-13T19:13:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c6ea2dba598159fccf2bb32eecc1b4d590c3b57",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 47 to 48.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-version: '48'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 47 to 48",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-13T17:50:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86eee28427c4b823207da105edab4d5a8b923e8e",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.14.1 to 5.14.4.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.14.1...r5.14.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  dependency-version: 5.14.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.14.1 to 5.14.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-13T17:50:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acfc912db115001cf57d829b31b7526af04aabc7",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 45 to 47.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-version: '47'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 45 to 47",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-19T19:28:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db9e2aeba7a6d429593d2065db2eab4f723e029a",
          "body": "Bumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.10.4 to 4.11.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)\n- [Commi\n[…]\nrg.codehaus.plexus:plexus-archiver\n  dependency-version: 4.11.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-19T19:27:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "737b8fe3e8fa8deb6fa3c9170460d0737c4f6358",
          "body": null,
          "is_bot": false,
          "headline": "Update site descriptor to 2.0.0 and download page",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-11-15T09:09:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb9c48daf0be8c17ffb39380a3961d09388bcf13",
          "body": "Bumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.10.2 to 4.10.4.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)\n- [Commi\n[…]\nrg.codehaus.plexus:plexus-archiver\n  dependency-version: 4.10.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-archiver from 4.10.2 to 4.10.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-10T12:26:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "080a2981810477335a8598c9e44dcec3f79f4530",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.13.4 to 5.14.1.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.13.4...r5.14.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  dependency-version: 5.14.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.13.4 to 5.14.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-10T12:25:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b9bf165015e3bed7ad783c24754d42ed20064ba",
          "body": null,
          "is_bot": false,
          "headline": "Add tag-template to release-drafter configuration",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-11-09T20:34:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22d531c201ddc60b6ca686f8b2b4cf32fa7f31d4",
          "body": "Co-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "JUnit Jupiter best practices (#489)",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-11-09T11:51:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d751f10f068c421fdee162ae1b123b01240709c5",
          "body": "This matches the `attach` parameter from the source plugin\n\nSetting this parameter to `false` will skip attaching the generated jar\nartifact to the build. It will not be picked up by the install and\ndeploy goals.\n\nOmitting or setting this parameter to `true` will attach the jar to the\nbuild. This is the default behavior.\n\nThe use case for this is generating test jars as part of a build to be\nused in integration tests while they should not actually be deployed to\na repository.",
          "is_bot": false,
          "headline": "Add new \"attach\" configuration parameter (#482)",
          "author_name": "Henning Schmiedehausen",
          "author_login": "hgschmie",
          "committed_at": "2025-10-28T01:11:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c75fc9f84b2bfd49624e67a8faa099686184d3d",
          "body": "* chore: remove junit3 references\n\nalso update surefire version in it-tests\n\n* refactor: replace hardcoded surefire version by property",
          "is_bot": false,
          "headline": "chore: remove junit3 references (#487)",
          "author_name": "Sandra Parsick",
          "author_login": "sparsick",
          "committed_at": "2025-10-27T10:21:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e61e6fe5433b053356f3f5232b22ab695844c652",
          "body": null,
          "is_bot": false,
          "headline": "Update Invokerplugin to 3.9.1 to support Java 25 (#486)",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2025-10-19T06:27:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f63b2660971c1c802034e33fa0b0b85e1299d509",
          "body": "This commit should not change the behaviour of the Maven JAR plugin,\nexcept when a null argument is given to `getJarFile` in which case the\n`IllegalArgumentException` has been replaced by `NullPointerException`.",
          "is_bot": false,
          "headline": "Edition in Javadoc (mostly formatting) and minor code simplifications.",
          "author_name": "Martin Desruisseaux",
          "author_login": "desruisseaux",
          "committed_at": "2025-10-17T08:38:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "671bfd086eb83e3b439b7379d415942110b60522",
          "body": "…s deprecated since Maven 3.0.0.",
          "is_bot": false,
          "headline": "Remove the `useDefaultManifestFile` configuration parameter, which wa…",
          "author_name": "Martin Desruisseaux",
          "author_login": "desruisseaux",
          "committed_at": "2025-10-17T08:38:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c62548d732d804f1c0bfc79a7a019cb2c1aaa0b",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade to Maven 4.0.0-rc-4.",
          "author_name": "Martin Desruisseaux",
          "author_login": "desruisseaux",
          "committed_at": "2025-10-17T08:38:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd9056d81e74c8b5c206ecd7c3708157bc9f94e4",
          "body": "cherry-picked from 3.x branch #465\nrequires https://github.com/apache/maven-archiver/issues/299",
          "is_bot": false,
          "headline": "[MJAR-323] add Java-Version to MANIFEST.MF (#468)",
          "author_name": "Hervé Boutemy",
          "author_login": "hboutemy",
          "committed_at": "2025-10-10T05:17:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93b74ce043d16aade3d63314f4a46246f0eca904",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.8-jre to 33.5.0-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-version: 3\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre (#469)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-18T15:30:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9bb48c346410cc54ffbf03702db1aecd944dae5b",
          "body": "Signed-off-by: Olivier Lamy <olamy@apache.org>",
          "is_bot": false,
          "headline": "fix non existing anymore informations (#467)",
          "author_name": "Olivier Lamy",
          "author_login": "olamy",
          "committed_at": "2025-08-26T01:02:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ac222b6f6860ca0edca268603add062a217be11",
          "body": "Signed-off-by: Olivier Lamy <olamy@apache.org>",
          "is_bot": false,
          "headline": "fix link to issues tracker (#466)",
          "author_name": "Olivier Lamy",
          "author_login": "olamy",
          "committed_at": "2025-08-26T01:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47253393914c0e5677f99dfbfe590654ff232e0d",
          "body": "* Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1\n\nBumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.10.0 to 4.10.1.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/cod\n[…]\ns\n\n---------\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Guillaume Nodet <gnodet@gmail.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1 (#463)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-08-25T11:04:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bcc2b8f119489068d8ba0af2be67306922c2409e",
          "body": "* feat: enable prevent branch protection rules\n\n- also refactor deprecated config",
          "is_bot": false,
          "headline": "Enable prevent branch protection rules (#462)",
          "author_name": "Sandra Parsick",
          "author_login": "sparsick",
          "committed_at": "2025-08-13T05:22:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "789b24d4dc5d54f50665fcf52dded21fc94f0072",
          "body": "Bumps [org.apache.maven.shared:maven-archiver](https://github.com/apache/maven-archiver) from 4.0.0-beta-3 to 4.0.0-beta-4.\n- [Release notes](https://github.com/apache/maven-archiver/releases)\n- [Commits](https://github.com/apache/maven-archiver/compare/maven-archiver-4.0.0-beta-3...maven-archiver-4\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.shared:maven-archiver (#460)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-08-11T15:27:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "56dc89dcb1715a446ef0cac5401f74e01e68db95",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.13.3 to 5.13.4.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.13.3...r5.13.4)\n\n---\nupdated-dependencies:\n- dependency-nam\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.13.3 to 5.13.4 (#459)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-23T05:47:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b7cca918192abfbdebeae4d8346c75599756c4d",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.13.2 to 5.13.3.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.13.2...r5.13.3)\n\n---\nupdated-dependencies:\n- dependency-nam\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.13.2 to 5.13.3 (#455)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-07T03:57:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "667cc02bd9deb03341f4dfa8fd92ea35fa74935e",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 44 to 45.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-version: '45'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 44 to 45",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-02T21:24:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9259a390b0817061e4390873ac77ce9ce224283d",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 5.13.1 to 5.13.2.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r5.13.1...r5.13.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  dependency-version: 5.13.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.13.1 to 5.13.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-02T21:24:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbe898d7742f8c4c67f5f746c5a7c4038fc17f29",
          "body": null,
          "is_bot": false,
          "headline": "Remove old JIRA issues link and re-enable notifications (#450)",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2025-06-14T08:50:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32f4a316bfd0660e19e480577d2978a5f1570e09",
          "body": null,
          "is_bot": false,
          "headline": "Disable notifications before issue migration",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2025-06-09T18:50:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0886cbe54e2bc965aa3ea89809060e4126576cf",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.13.0 to 5.13.1.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.13.0...r5.13.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  de\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.13.0 to 5.13.1 (#147)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-09T05:26:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b47a4c204b0dc6188049c8d1f9455e8c768fe43d",
          "body": "Bumps [org.apache.maven.shared:file-management](https://github.com/apache/maven-file-management) from 3.1.0 to 3.2.0.\n- [Release notes](https://github.com/apache/maven-file-management/releases)\n- [Commits](https://github.com/apache/maven-file-management/compare/file-management-3.1.0...v3.2.0)\n\n---\nu\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.shared:file-management from 3.1.0 to 3.2.0 (#142)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-02T04:37:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4e64df145d6afb1795755d4732c04d14dc57ae1f",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.12.2 to 5.13.0.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.12.2...r5.13.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  de\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.12.2 to 5.13.0 (#145)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-02T04:36:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cd385b0896c2f26917b00d92f4e3f7712452bf87",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.7-jre to 33.4.8-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-version: 3\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.4.7-jre to 33.4.8-jre (#141)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T08:01:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9fbdff1226126f63601e940db70988d873c16305",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.12.1 to 5.12.2.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.12.1...r5.12.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  de\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.12.1 to 5.12.2 (#139)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-14T14:57:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a3e670f0f81d013016e1700083ed0f9ad8e01506",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.4.6-jre to 33.4.7-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-version: 3\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.4.6-jre to 33.4.7-jre",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-09T03:24:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "836be66f5f17e946e4120abd315319d1d5a7716b",
          "body": "Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.3.1-jre to 33.4.6-jre.\n- [Release notes](https://github.com/google/guava/releases)\n- [Commits](https://github.com/google/guava/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.google.guava:guava\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.google.guava:guava from 33.3.1-jre to 33.4.6-jre (#133)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-03T16:39:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f378099670bd5d5366bb000259e27d4cad7f514c",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade to maven 4.0.0-rc-2 (#115)",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2025-04-03T16:38:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94aa71714aa73434c13b6206cd490c41c206facc",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 43 to 44.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits/v44)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plug\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#124)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-03T16:37:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "90f1a2935f8afc04662b2762f6cba894681b1b4a",
          "body": null,
          "is_bot": false,
          "headline": "Add PR-automation and stale action",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2025-03-25T04:49:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ffc76f8e51c92f2aa67ce2f25fae9e41d83ea16b",
          "body": null,
          "is_bot": false,
          "headline": "Improve release-drafter configuration",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-03-24T19:13:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88e1c23e9ffc36695a5c183820b63e1ccc92269d",
          "body": null,
          "is_bot": false,
          "headline": "Add badge for 3.x version",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2025-03-24T18:22:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bb854ed3fb7af258db37f3fa9d0c8439719e3a4",
          "body": null,
          "is_bot": false,
          "headline": "Enable GitHub issues",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2025-03-24T17:51:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a14bde94715373d76d7de01da093b2d1a1c7485e",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.11.4 to 5.12.1.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.11.4...r5.12.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  de\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[MJAR-324] Bump org.junit:junit-bom from 5.11.4 to 5.12.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-03-17T16:49:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fb0e2fe25ca9861b59d8946fcbca59990cb2e2f9",
          "body": null,
          "is_bot": false,
          "headline": "[MNGSITE-529] Rename \"Goals\" to \"Plugin Documentation\"",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2025-02-14T20:39:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d0fbd40895b034d2953fa155fccf3b94a64a70d",
          "body": "This reverts commit 71f26807de5dd97bfacfa6c3501a5f0f2a0233a5.",
          "is_bot": false,
          "headline": "Revert \"Use mvn4 ci build defaults\" - switch to Maven 4 rc2",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-01-27T19:40:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71f26807de5dd97bfacfa6c3501a5f0f2a0233a5",
          "body": null,
          "is_bot": false,
          "headline": "Use mvn4 ci build defaults",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-01-27T19:36:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e30976349c0c52a127850d2c3f8e4e8b8c2d289",
          "body": null,
          "is_bot": false,
          "headline": "Update Dependabot to monitor also 3.x branch",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-01-27T19:17:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ccee7fbc3573687b33bee7fcb8a5ca417ff3dfa2",
          "body": null,
          "is_bot": false,
          "headline": "Fix dependency",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-01-27T19:11:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d4866dd4cd66e478ef702e2eb372b834c33ac44",
          "body": "Bumps [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit5) from 5.10.2 to 5.11.4.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.10.2...r5.11.4)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit.jupiter:junit-jupiter-api\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.junit.jupiter:junit-jupiter-api from 5.10.2 to 5.11.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-01-15T21:46:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11e74126c9c714e7757cdbf1593e92c2397fafa7",
          "body": null,
          "is_bot": false,
          "headline": "[MJAR-321] Upgrade to Maven 4.0.0-beta-5 (#103)",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-12-05T13:37:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac981d2374da4799d7c4022a08a6b177cee7260c",
          "body": "…(#101)\n\nBumps [com.google.guava:guava](https://github.com/google/guava) from 32.0.1-jre to 33.3.1-jre.\r\n- [Release notes](https://github.com/google/guava/releases)\r\n- [Commits](https://github.com/google/guava/commits)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: com.google.guava:guava\r\n  depen\n[…]\n:production\r\n  update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[MJAR-320] Bump com.google.guava:guava from 32.0.1-jre to 33.3.1-jre …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-12-05T12:06:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0b673655c81576d9734af1f3861022ef26033b2b",
          "body": "…0.0 (#97)\n\nBumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.9.2 to 4.10.0.\r\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\r\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes\n[…]\n:production\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[MJAR-318] Bump org.codehaus.plexus:plexus-archiver from 4.9.2 to 4.1…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-12-05T12:01:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d4767028633bdb939875ababe9d5aa174d7bba62",
          "body": "…(#98)\n\nBumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 42 to 43.\r\n- [Release notes](https://github.com/apache/maven-parent/releases)\r\n- [Commits](https://github.com/apache/maven-parent/commits)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: org.apache.\n[…]\n:production\r\n  update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[MJAR-319] Bump org.apache.maven.plugins:maven-plugins from 42 to 43 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-12-05T12:00:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "be27b5f35a8ca911a459d992c9c8f106084bf525",
          "body": null,
          "is_bot": false,
          "headline": "use new Reproducible Central badge endpoint",
          "author_name": "Hervé Boutemy",
          "author_login": "hboutemy",
          "committed_at": "2024-08-18T22:22:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3389faae0b06bc3ecb9a420b7f229e4238ad358c",
          "body": null,
          "is_bot": false,
          "headline": "Build with Maven 4",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-07-02T06:02:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8a1c5df22e47521b0eb2bf129dcf7323d0340a7",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T08:28:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86939e9698c1c0d2f9a057976de3ff58f214cebe",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release maven-jar-plugin-4.0.0-beta-1",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T08:28:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d130798e5267bf358a1621cd373e226fc27cd132",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade m-archiver, m-p-testing and m-p-tools to beta-1",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T08:28:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "184ae98c0f9763ac3973918a9b3b7b49904a24cd",
          "body": null,
          "is_bot": false,
          "headline": "Add missing provided dependencies",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T08:26:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c2d958cf7e849d79189e55f24df87107b8dcc7e",
          "body": null,
          "is_bot": false,
          "headline": "Build with JDK 17 and 21 in Jenkins",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T06:24:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "466e5c784ac1dd3fb005751842109a844483a9f3",
          "body": "Bumps [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit5) from 5.10.1 to 5.10.2.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.10.1...r5.10.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit.jupiter:junit-jupiter-api\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.junit.jupiter:junit-jupiter-api from 5.10.1 to 5.10.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-06-26T06:03:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "681e64afb12062a594827bff05c7bc3fb1e3b268",
          "body": null,
          "is_bot": false,
          "headline": "Fix license/notice",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-26T05:59:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "571a8b3c7df6f84e35b26473525e2262b3e7b000",
          "body": null,
          "is_bot": false,
          "headline": "[MJAR-311] Switch to Maven 4 API",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-24T21:00:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "816680c1185ca3d60ae0e24fb103dbcb7c1176ba",
          "body": null,
          "is_bot": false,
          "headline": "Code format on ITs",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-06-24T21:00:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c461dc64b6379f46edf09bb73302937d5ef6981",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-06-16T12:09:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95007e86d205703d898aa0fb5d24ae3df0c25789",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release maven-jar-plugin-3.4.2",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-06-16T12:09:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99584ce9cff9d87d73c12df81d40a982d75845ff",
          "body": null,
          "is_bot": false,
          "headline": "Build with Maven 4",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-06-03T19:59:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9c98a4dd95b79088fe5264d3e5dbba1342ddb80",
          "body": "…tain white spaces",
          "is_bot": false,
          "headline": "[MJAR-310] fixed toolchain version detection when toolchain paths con…",
          "author_name": "Robin Jansohn",
          "author_login": "jansohn",
          "committed_at": "2024-06-01T18:36:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a5554bb21e9528b3f3dfa5b97473f2af99045e73",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-04-16T21:04:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b29adc0e420b1da1495791c9d5bb9399590cc51",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release maven-jar-plugin-3.4.1",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-04-16T21:03:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "325b2990308f08d4a2b3010cafe8bb55304ef53c",
          "body": "…(#85)\n\n* Bump org.apache.maven.plugins:maven-plugins from 41 to 42\r\n\r\nBumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 41 to 42.\r\n- [Release notes](https://github.com/apache/maven-parent/releases)\r\n- [Commits](https://github.com/apache/maven-parent/commits\n[…]\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\r\nCo-authored-by: Slawomir Jaranowski <s.jaranowski@gmail.com>",
          "is_bot": true,
          "headline": "[MJAR-308] Bump org.apache.maven.plugins:maven-plugins from 41 to 42 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-16T20:58:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "52111cc9250fc5876f4a6570a48bc679d099d8e2",
          "body": "…ons.io.file.attribute.FileTimes (#83)\n\n* ITs for MJAR-307 - try to reproduce\r\n\r\n* Add timestamp (#84)\r\n\r\n* Add timestamp\r\n\r\n* Add timestamp format\r\n\r\n---------\r\n\r\nCo-authored-by: Delany <delany.middleton@traderoot.com>\r\n\r\n* Fix a bug\r\n\r\n---------\r\n\r\nCo-authored-by: Delany <delanym@users.noreply.github.com>\r\nCo-authored-by: Delany <delany.middleton@traderoot.com>",
          "is_bot": false,
          "headline": "[MJAR-307] Wrong version of commons-io cause a ClassNotFound o.a.comm…",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-04-16T20:24:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "902d4c55a19f301c31a4e187fbd798d4f847cb19",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-04-09T21:17:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "992f44a2ef710326a6b98e18d4e40f724bea5f90",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release maven-jar-plugin-3.4.0",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-04-09T21:17:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e31b9933a68a44b180a499636f7f43c8521648c",
          "body": "* [MJAR-296] Allow including files excluded by default.\r\n\r\n* Improve implementation\r\n\r\n* Fix ITs\r\n\r\n* fix docs after review\r\n\r\n---------\r\n\r\nCo-authored-by: Slawomir Jaranowski <s.jaranowski@gmail.com>",
          "is_bot": false,
          "headline": "[MJAR-296] Allow including files excluded by default. (#67)",
          "author_name": "redzi",
          "author_login": "redzi",
          "committed_at": "2024-04-09T21:00:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddfb635b55ec1ad23f83c4884a743b4a6c80a273",
          "body": "properties are defined in parent",
          "is_bot": false,
          "headline": "[MJAR-306] Use properties for plugins versions in LifecycleMapping",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-04-09T16:38:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aeffa392dd83040cde908c633b0ce2406850193b",
          "body": null,
          "is_bot": false,
          "headline": "[MJAR-304] Refresh download page",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-03-30T13:00:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee85d599e14cbc69b71c65ade07b57f616217b57",
          "body": null,
          "is_bot": false,
          "headline": "[MJAR-303] Cleanup declared dependencies",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-03-30T10:14:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "845c12071f2ec733c985c3d0eab3e48b1c15a486",
          "body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit5) from 5.10.1 to 5.10.2.\n- [Release notes](https://github.com/junit-team/junit5/releases)\n- [Commits](https://github.com/junit-team/junit5/compare/r5.10.1...r5.10.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.junit:junit-bom from 5.10.1 to 5.10.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-03-28T21:09:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8dd0d3f176fb28aa779cd2ddec9c342e834f38c6",
          "body": null,
          "is_bot": false,
          "headline": "[MJAR-298] Update Maven-Archiver to 3.6.2",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-03-28T20:28:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b958d1804fa894eb4838c13b0532742751e5836",
          "body": null,
          "is_bot": false,
          "headline": "[MJAR-302] Require Maven 3.6.3",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-03-28T20:09:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa4330fa687a98b1fa43c9bc8a574408b2ffe40b",
          "body": null,
          "is_bot": false,
          "headline": "[MJAR-62] Set Build-Jdk according to used toolchain",
          "author_name": "Slawomir Jaranowski",
          "author_login": "slawekjaranowski",
          "committed_at": "2024-03-24T09:58:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "adf1c76a8944899ea5049eca6f004ff3ccad8148",
          "body": "Bumps [apache/maven-gh-actions-shared](https://github.com/apache/maven-gh-actions-shared) from 2 to 4.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/commits/v4)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump apache/maven-gh-actions-shared from 2 to 4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-03-07T20:03:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63f9c982d49f046519088490d7a8af5a7cd647fb",
          "body": "Bumps commons-io:commons-io from 2.14.0 to 2.15.1.\n\n---\nupdated-dependencies:\n- dependency-name: commons-io:commons-io\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump commons-io:commons-io from 2.14.0 to 2.15.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2023-12-23T00:49:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0cbcfd42e26207331cc3ad831a3888cb04591f07",
          "body": null,
          "is_bot": false,
          "headline": "[MJAR-299] - Upgrade maven-plugin parent to 41",
          "author_name": "Karl Heinz Marbaise",
          "author_login": "khmarbaise",
          "committed_at": "2023-11-14T09:01:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de65c39495c9da5b7d018229603d97d6ba3ba3eb",
          "body": "Signed-off-by: Jorge Solórzano <jorsol@gmail.com>",
          "is_bot": false,
          "headline": "[MJAR-297] Update Parent to 40",
          "author_name": "Jorge Solórzano",
          "author_login": "jorsol",
          "committed_at": "2023-11-02T08:15:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b96b75bcf0404cdc7d6231a87880ccefdd894fad",
          "body": "Signed-off-by: Jorge Solórzano <jorsol@gmail.com>",
          "is_bot": false,
          "headline": "[MJAR-298] Update Maven-Archiver to 3.6.1",
          "author_name": "Jorge Solórzano",
          "author_login": "jorsol",
          "committed_at": "2023-11-02T08:05:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7934b483d654e17b5e6983cc4caf6afe24f1a23d",
          "body": "* remove unused imports\r\n* switch to Apache commons IO",
          "is_bot": false,
          "headline": "Remove dependency on plexus (#63)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2023-10-04T11:49:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2860c8b4b745a2f211b69df4c225fd7081ce9d61",
          "body": null,
          "is_bot": false,
          "headline": "Auto-link MJAR Jira",
          "author_name": "Hervé Boutemy",
          "author_login": "hboutemy",
          "committed_at": "2023-04-24T10:08:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 8,
      "commits_last_year": 34,
      "latest_release_at": "2026-07-22T16:21:29Z",
      "latest_release_tag": "maven-jar-plugin-3.5.1",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 21,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 231.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "org.apache.maven.plugins:maven-jar-plugin",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": true,
          "registry_url": "https://central.sonatype.com/artifact/org.apache.maven.plugins/maven-jar-plugin",
          "is_deprecated": false,
          "latest_version": "4.0.0-beta-1",
          "repository_url": "https://github.com/apache/maven-jar-plugin/tree/maven-jar-plugin-4.0.0-beta-1",
          "versions_count": 27,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-22T16:17:41Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 84,
      "stars": 89,
      "watchers": 28,
      "fork_history": {
        "days": [
          {
            "date": "2018-04-09",
            "count": 1
          },
          {
            "date": "2018-08-28",
            "count": 1
          },
          {
            "date": "2018-08-30",
            "count": 1
          },
          {
            "date": "2018-09-14",
            "count": 1
          },
          {
            "date": "2018-09-20",
            "count": 1
          },
          {
            "date": "2018-11-14",
            "count": 1
          },
          {
            "date": "2018-11-16",
            "count": 1
          },
          {
            "date": "2019-01-05",
            "count": 1
          },
          {
            "date": "2019-01-15",
            "count": 1
          },
          {
            "date": "2019-03-15",
            "count": 1
          },
          {
            "date": "2019-03-17",
            "count": 1
          },
          {
            "date": "2019-03-21",
            "count": 1
          },
          {
            "date": "2019-05-23",
            "count": 1
          },
          {
            "date": "2019-06-16",
            "count": 1
          },
          {
            "date": "2019-06-18",
            "count": 1
          },
          {
            "date": "2019-07-24",
            "count": 1
          },
          {
            "date": "2019-08-16",
            "count": 1
          },
          {
            "date": "2019-10-30",
            "count": 1
          },
          {
            "date": "2020-02-03",
            "count": 1
          },
          {
            "date": "2020-03-02",
            "count": 1
          },
          {
            "date": "2020-04-12",
            "count": 1
          },
          {
            "date": "2020-05-04",
            "count": 1
          },
          {
            "date": "2020-05-18",
            "count": 1
          },
          {
            "date": "2020-09-23",
            "count": 1
          },
          {
            "date": "2021-06-25",
            "count": 1
          },
          {
            "date": "2021-08-04",
            "count": 1
          },
          {
            "date": "2021-08-09",
            "count": 1
          },
          {
            "date": "2021-09-05",
            "count": 1
          },
          {
            "date": "2021-10-27",
            "count": 1
          },
          {
            "date": "2021-12-16",
            "count": 1
          },
          {
            "date": "2022-01-05",
            "count": 1
          },
          {
            "date": "2022-01-09",
            "count": 1
          },
          {
            "date": "2022-01-31",
            "count": 1
          },
          {
            "date": "2022-03-11",
            "count": 1
          },
          {
            "date": "2022-05-01",
            "count": 1
          },
          {
            "date": "2022-05-27",
            "count": 2
          },
          {
            "date": "2022-08-07",
            "count": 1
          },
          {
            "date": "2022-08-10",
            "count": 1
          },
          {
            "date": "2022-09-28",
            "count": 1
          },
          {
            "date": "2022-10-19",
            "count": 1
          },
          {
            "date": "2022-10-20",
            "count": 1
          },
          {
            "date": "2022-11-29",
            "count": 1
          },
          {
            "date": "2023-01-07",
            "count": 1
          },
          {
            "date": "2023-07-10",
            "count": 1
          },
          {
            "date": "2023-07-13",
            "count": 1
          },
          {
            "date": "2023-08-02",
            "count": 1
          },
          {
            "date": "2023-09-07",
            "count": 1
          },
          {
            "date": "2023-09-11",
            "count": 1
          },
          {
            "date": "2023-11-19",
            "count": 1
          },
          {
            "date": "2023-12-15",
            "count": 1
          },
          {
            "date": "2024-02-11",
            "count": 1
          },
          {
            "date": "2024-02-19",
            "count": 1
          },
          {
            "date": "2024-03-29",
            "count": 1
          },
          {
            "date": "2024-04-15",
            "count": 1
          },
          {
            "date": "2024-04-18",
            "count": 1
          },
          {
            "date": "2024-05-16",
            "count": 1
          },
          {
            "date": "2024-05-17",
            "count": 1
          },
          {
            "date": "2024-05-22",
            "count": 1
          },
          {
            "date": "2024-07-30",
            "count": 1
          },
          {
            "date": "2025-02-11",
            "count": 1
          },
          {
            "date": "2025-05-03",
            "count": 1
          },
          {
            "date": "2025-07-24",
            "count": 1
          },
          {
            "date": "2025-08-12",
            "count": 1
          },
          {
            "date": "2025-09-18",
            "count": 1
          },
          {
            "date": "2025-10-05",
            "count": 1
          },
          {
            "date": "2025-11-02",
            "count": 1
          },
          {
            "date": "2025-12-12",
            "count": 1
          },
          {
            "date": "2025-12-18",
            "count": 1
          },
          {
            "date": "2026-05-14",
            "count": 1
          },
          {
            "date": "2026-06-19",
            "count": 1
          },
          {
            "date": "2026-07-08",
            "count": 1
          },
          {
            "date": "2026-07-19",
            "count": 2
          }
        ],
        "complete": true,
        "collected": 74,
        "total_forks": 84
      },
      "star_history": null,
      "open_issues_and_prs": 23
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "pom.xml",
        "src/it/MJAR-162/pom.xml",
        "src/it/MJAR-183/pom.xml",
        "src/it/MJAR-198/pom.xml",
        "src/it/MJAR-199-change-classifier/pom.xml",
        "src/it/MJAR-199/pom.xml",
        "src/it/MJAR-228/pom.xml",
        "src/it/MJAR-238-modular-jar-main-class/pom.xml",
        "src/it/MJAR-260-invalid-automatic-module-name/pom.xml",
        "src/it/MJAR-260-valid-automatic-module-name/pom.xml",
        "src/it/MJAR-275-reproducible-module-info/pom.xml",
        "src/it/MJAR-292-detect-mjar-no-versions/pom.xml",
        "src/it/MJAR-292-detect-mjar/pom.xml",
        "src/it/MJAR-292-disable-detect-mjar/pom.xml",
        "src/it/MJAR-30-excludes/pom.xml",
        "src/it/MJAR-30-fullcontent/pom.xml",
        "src/it/MJAR-30-include/pom.xml",
        "src/it/MJAR-539-build-environment-entries/pom.xml",
        "src/it/MJAR-60/pom.xml",
        "src/it/MJAR-70-no-recreation/pom.xml",
        "src/it/MJAR-70-recreation/pom.xml",
        "src/it/MJAR-75/client/pom.xml",
        "src/it/MJAR-75/model/pom.xml",
        "src/it/MJAR-75/pom.xml",
        "src/it/MJAR-80-exclude/pom.xml",
        "src/it/MJAR-80-fullcontent/pom.xml",
        "src/it/MJAR-80-include/pom.xml",
        "src/it/MJAR-82/pom.xml",
        "src/it/manifest-content/pom.xml",
        "src/it/mjar-139/pom.xml",
        "src/it/mjar-71-01/pom.xml",
        "src/it/mjar-71-02/pom.xml",
        "src/it/mjar-90/pom.xml",
        "src/it/project-004/pom.xml",
        "src/it/test-jar-attach/pom.xml",
        "src/test/resources/unit/jar-basic-test/pom.xml"
      ],
      "largest_source_bytes": 13928,
      "source_files_sampled": 61,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 1157
    },
    "dependencies": {
      "manifests": [
        "pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "commons-io:commons-io",
            "direct": false,
            "version": "2.11.0",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-78wr-2p64-hpwj"
            ],
            "fixed_version": "2.14.0",
            "advisory_count": 1,
            "oldest_advisory_days": 663
          },
          {
            "name": "org.codehaus.plexus:plexus-utils",
            "direct": false,
            "version": "4.0.1",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-6fmv-xxpf-w3cw"
            ],
            "fixed_version": "4.0.3",
            "advisory_count": 1,
            "oldest_advisory_days": 124
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": false,
            "version": "3.14.0",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-j288-q9x7-2f5v"
            ],
            "fixed_version": "3.18.0",
            "advisory_count": 1,
            "oldest_advisory_days": 381
          },
          {
            "name": "org.iq80.snappy:snappy",
            "direct": false,
            "version": "0.4",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-8wh2-6qhj-h7j9"
            ],
            "fixed_version": "0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 783
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 2,
          "moderate": 2
        },
        "advisory_count": 4,
        "affected_count": 4,
        "assessed_count": 24,
        "malicious_count": 0,
        "assessed_package": "maven:org.apache.maven.plugins:maven-jar-plugin@4.0.0-beta-1",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "com.google.guava:guava",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "33.6.0-jre"
        },
        {
          "name": "org.junit:junit-bom",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${junitVersion}"
        },
        {
          "name": "org.apache.maven.shared:file-management",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${mavenFileManagementVersion}"
        },
        {
          "name": "org.apache.maven.shared:maven-archiver",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${mavenArchiverVersion}"
        },
        {
          "name": "org.codehaus.plexus:plexus-archiver",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${plexusArchiverVersion}"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "com.google.guava:guava",
            "direct": true,
            "version": "33.6.0-jre",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.shared:file-management",
            "direct": true,
            "version": "3.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.shared:maven-archiver",
            "direct": true,
            "version": "4.0.0-beta-5",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-archiver",
            "direct": true,
            "version": "4.12.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit:junit-bom",
            "direct": true,
            "version": "5.14.4",
            "ecosystem": "maven"
          },
          {
            "name": "com.diffplug.spotless:spotless-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.google.inject:guice",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-lang:commons-lang",
            "direct": false,
            "version": "2.3",
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": false,
            "version": "3.8.1",
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": false,
            "version": "4.13.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.its.it0126:model",
            "direct": false,
            "version": "1.0-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-antrun-plugin",
            "direct": false,
            "version": "1.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": "3.11.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-dependency-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-install-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-invoker-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-resources-plugin",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-api-annotations",
            "direct": false,
            "version": "4.0.0-rc-4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-api-core",
            "direct": false,
            "version": "4.0.0-rc-4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-api-di",
            "direct": false,
            "version": "4.0.0-rc-4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-api-model",
            "direct": false,
            "version": "4.0.0-rc-4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-testing",
            "direct": false,
            "version": "4.0.0-rc-4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.rat:apache-rat-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-component-api",
            "direct": false,
            "version": "1.0-alpha-15",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-container-default",
            "direct": false,
            "version": "1.0-alpha-15",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-api",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-log4j12",
            "direct": false,
            "version": "1.4.3",
            "ecosystem": "maven"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 28,
        "direct_count": 5,
        "indirect_count": 23
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 11,
        "merged_prs": 152,
        "open_issues": 12,
        "closed_ratio": 0.962,
        "closed_issues": 306,
        "closed_unmerged_prs": 83
      },
      "bus_factor": 5,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "khmarbaise",
          "commits": 102,
          "avatar_url": "https://avatars.githubusercontent.com/u/42484?v=4"
        },
        {
          "type": "User",
          "login": "olamy",
          "commits": 81,
          "avatar_url": "https://avatars.githubusercontent.com/u/19728?v=4"
        },
        {
          "type": "User",
          "login": "brettporter",
          "commits": 52,
          "avatar_url": "https://avatars.githubusercontent.com/u/49108?v=4"
        },
        {
          "type": "User",
          "login": "hboutemy",
          "commits": 40,
          "avatar_url": "https://avatars.githubusercontent.com/u/237462?v=4"
        },
        {
          "type": "User",
          "login": "krosenvold",
          "commits": 33,
          "avatar_url": "https://avatars.githubusercontent.com/u/67744?v=4"
        },
        {
          "type": "User",
          "login": "bentmann",
          "commits": 32,
          "avatar_url": "https://avatars.githubusercontent.com/u/138698?v=4"
        },
        {
          "type": "User",
          "login": "jvanzyl",
          "commits": 31,
          "avatar_url": "https://avatars.githubusercontent.com/u/9523?v=4"
        },
        {
          "type": "User",
          "login": "slawekjaranowski",
          "commits": 25,
          "avatar_url": "https://avatars.githubusercontent.com/u/3578921?v=4"
        },
        {
          "type": "User",
          "login": "dennisl",
          "commits": 22,
          "avatar_url": "https://avatars.githubusercontent.com/u/541536?v=4"
        },
        {
          "type": "User",
          "login": "jdcasey",
          "commits": 15,
          "avatar_url": "https://avatars.githubusercontent.com/u/65614?v=4"
        }
      ],
      "contributors_sampled": 43,
      "top_contributor_share": 0.184
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "maven-verify.yml",
        "pr-automation.yml",
        "release-drafter.yml",
        "stale.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "26 out of 26 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 5,
            "reason": "Found 10/17 approved changesets -- score normalized to 5",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 47 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "14 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "11 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "7c80d856fbbc86c6e810c020f36e7de4ffd9b338",
        "ran_at": "2026-07-28T14:11:30Z",
        "aggregate_score": 5.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T12:54:44Z",
      "oldest_open_prs": [
        {
          "number": 89,
          "created_at": "2024-06-04T12:07:51Z",
          "last_comment_at": "2024-06-09T21:44:26Z",
          "last_comment_author": "slawekjaranowski"
        },
        {
          "number": 508,
          "created_at": "2025-12-13T16:22:42Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 521,
          "created_at": "2026-01-14T21:04:53Z",
          "last_comment_at": "2026-06-14T18:25:47Z",
          "last_comment_author": "desruisseaux"
        },
        {
          "number": 551,
          "created_at": "2026-07-14T02:32:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 552,
          "created_at": "2026-07-14T02:32:09Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 553,
          "created_at": "2026-07-14T02:32:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 554,
          "created_at": "2026-07-14T02:32:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 561,
          "created_at": "2026-07-19T16:17:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 563,
          "created_at": "2026-07-19T21:59:19Z",
          "last_comment_at": "2026-07-20T10:56:50Z",
          "last_comment_author": "elharo"
        },
        {
          "number": 564,
          "created_at": "2026-07-22T18:09:29Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 565,
          "created_at": "2026-07-22T18:29:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-23T09:46:25Z",
      "ci_last_conclusion": "SKIPPED",
      "oldest_open_issues": [
        {
          "number": 308,
          "created_at": "2010-09-03T18:41:43Z",
          "last_comment_at": "2022-09-16T13:34:31Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 417,
          "created_at": "2019-05-10T09:11:37Z",
          "last_comment_at": "2020-09-01T18:14:08Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 410,
          "created_at": "2019-11-04T09:49:56Z",
          "last_comment_at": "2019-11-05T14:38:27Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 439,
          "created_at": "2022-06-21T10:05:48Z",
          "last_comment_at": "2025-11-10T00:12:40Z",
          "last_comment_author": "desruisseaux"
        },
        {
          "number": 196,
          "created_at": "2024-05-09T21:52:53Z",
          "last_comment_at": "2026-06-14T10:30:04Z",
          "last_comment_author": "slachiewicz"
        },
        {
          "number": 194,
          "created_at": "2025-02-23T12:16:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 144,
          "created_at": "2025-04-22T19:38:05Z",
          "last_comment_at": "2025-06-09T19:39:32Z",
          "last_comment_author": "Bukama"
        },
        {
          "number": 484,
          "created_at": "2025-10-15T09:18:34Z",
          "last_comment_at": "2025-11-10T00:12:21Z",
          "last_comment_author": "desruisseaux"
        },
        {
          "number": 495,
          "created_at": "2025-11-10T00:08:48Z",
          "last_comment_at": "2025-12-13T16:23:45Z",
          "last_comment_author": "desruisseaux"
        },
        {
          "number": 510,
          "created_at": "2025-12-18T12:22:54Z",
          "last_comment_at": "2026-07-23T10:53:43Z",
          "last_comment_author": "elharo"
        },
        {
          "number": 559,
          "created_at": "2026-07-19T16:12:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 560,
          "created_at": "2026-07-19T16:12:24Z",
          "last_comment_at": "2026-07-23T10:56:05Z",
          "last_comment_author": "elharo"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/apache/maven-jar-plugin",
    "host": "github.com",
    "name": "maven-jar-plugin",
    "owner": "apache"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 72,
      "inputs": {
        "security": 59,
        "vitality": 78,
        "community": 63,
        "governance": 86,
        "engineering": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 78,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "commits_last_year": 34,
              "human_commit_share": 0.66,
              "days_since_last_push": 5,
              "active_weeks_last_year": 21
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "21/52 weeks with commits",
                "points": 14.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 21
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "34 commits in the last year",
                "points": 13.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 34
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "14 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 84,
            "inputs": {
              "releases_count": 8,
              "latest_release_tag": "maven-jar-plugin-3.5.1",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 231.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "8 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~231.9 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 231.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 5,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 5 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 63,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "forks": 84,
              "stars": 89,
              "watchers": 28,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "89 stars",
                "points": 31.5,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 89
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "84 forks",
                "points": 16,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 84
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "28 watchers",
                "points": 8,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 28
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "excellent",
        "name": "Sustainability & Governance",
        "value": 86,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "excellent",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 88,
            "inputs": {
              "bus_factor": 5,
              "contributors_sampled": 43,
              "top_contributor_share": 0.184
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "5 contributor(s) cover half of all commits",
                "points": 45.9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 18% of commits",
                "points": 18.4,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 18
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "43 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 43
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 47 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "merged_prs": 152,
              "open_issues": 12,
              "closed_issues": 306,
              "issue_closed_ratio": 0.962,
              "closed_unmerged_prs": 83
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "96% of issues closed",
                "points": 45,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 96
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "152/235 decided PRs merged",
                "points": 24.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 152,
                      "decided": 235
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 10/17 approved changesets -- score normalized to 5",
                "points": 7.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "followers": 23594,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "apache",
              "public_repos": 3148,
              "account_age_days": 6400
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "23,594 followers of apache",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 23594,
                      "login": "apache"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "3148 public repos, account ~17 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 3148
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 17
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "org.apache.maven.plugins:maven-jar-plugin"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "27 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 27
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 67,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "26 out of 26 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "java",
                "build-management",
                "maven",
                "maven-plugins",
                "maven-jar-plugin"
              ],
              "has_wiki": false,
              "homepage": "https://maven.apache.org/plugins/maven-jar-plugin/",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://maven.apache.org/plugins/maven-jar-plugin/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 59,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 5.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "26 out of 26 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 10/17 approved changesets -- score normalized to 5",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 47 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "14 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "11 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Matched the maven:org.apache.maven.plugins:maven-jar-plugin@4.0.0-beta-1 runtime dependency closure — what installing the published package pulls in — 24 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:org.apache.maven.plugins:maven-jar-plugin@4.0.0-beta-1",
                  "assessed": 24
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 66,
            "inputs": {
              "source": "osv",
              "advisories": 4,
              "affected_packages": 4,
              "assessed_packages": 24,
              "unassessed_packages": 0,
              "affected_by_severity": "high 2, moderate 2",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "4 affected: commons-io:commons-io 2.11.0 (high 7.5), org.codehaus.plexus:plexus-utils 4.0.1 (high), org.apache.commons:commons-lang3 3.14.0 (moderate 6.5), +1 more",
                "points": 6.8,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 4,
                      "packages": "commons-io:commons-io 2.11.0 (high 7.5), org.codehaus.plexus:plexus-utils 4.0.1 (high), org.apache.commons:commons-lang3 3.14.0 (moderate 6.5)"
                    }
                  },
                  {
                    "code": "advisories_affected_more",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "4 advisory-carrying package(s) unaddressed past 90 days; oldest published 783 days ago",
                "points": 24.1,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 4,
                      "oldest": 783
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 24,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 17
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 60,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "moderate",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.258,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 1157
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "17 of 66 human commits state their intent (structured subject or explanatory body)",
                "points": 13.7,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 17,
                      "sampled": 66
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "pom.xml",
                "src/it/MJAR-162/pom.xml",
                "src/it/MJAR-183/pom.xml",
                "src/it/MJAR-198/pom.xml",
                "src/it/MJAR-199-change-classifier/pom.xml",
                "src/it/MJAR-199/pom.xml",
                "src/it/MJAR-228/pom.xml",
                "src/it/MJAR-238-modular-jar-main-class/pom.xml",
                "src/it/MJAR-260-invalid-automatic-module-name/pom.xml",
                "src/it/MJAR-260-valid-automatic-module-name/pom.xml",
                "src/it/MJAR-275-reproducible-module-info/pom.xml",
                "src/it/MJAR-292-detect-mjar-no-versions/pom.xml",
                "src/it/MJAR-292-detect-mjar/pom.xml",
                "src/it/MJAR-292-disable-detect-mjar/pom.xml",
                "src/it/MJAR-30-excludes/pom.xml",
                "src/it/MJAR-30-fullcontent/pom.xml",
                "src/it/MJAR-30-include/pom.xml",
                "src/it/MJAR-539-build-environment-entries/pom.xml",
                "src/it/MJAR-60/pom.xml",
                "src/it/MJAR-70-no-recreation/pom.xml",
                "src/it/MJAR-70-recreation/pom.xml",
                "src/it/MJAR-75/client/pom.xml",
                "src/it/MJAR-75/model/pom.xml",
                "src/it/MJAR-75/pom.xml",
                "src/it/MJAR-80-exclude/pom.xml",
                "src/it/MJAR-80-fullcontent/pom.xml",
                "src/it/MJAR-80-include/pom.xml",
                "src/it/MJAR-82/pom.xml",
                "src/it/manifest-content/pom.xml",
                "src/it/mjar-139/pom.xml",
                "src/it/mjar-71-01/pom.xml",
                "src/it/mjar-71-02/pom.xml",
                "src/it/mjar-90/pom.xml",
                "src/it/project-004/pom.xml",
                "src/it/test-jar-attach/pom.xml",
                "src/test/resources/unit/jar-basic-test/pom.xml"
              ],
              "dependency_bot_commit_share": 0.34
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "pom.xml, src/it/MJAR-162/pom.xml, src/it/MJAR-183/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "pom.xml, src/it/MJAR-162/pom.xml, src/it/MJAR-183/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "34 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 34,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 13928,
              "source_files_sampled": 61,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/61 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 61,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T14:11:59.930974Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/apache/maven-jar-plugin.svg",
  "full_name": "apache/maven-jar-plugin",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаMaven.