Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-24 21:24 UTC

kestros / kestros-root-project

Base Kestros project build manager. Contains dependency and plugin versions for building and installing Bundles and Packages to Kestros instances.

Apache-2.0★ 0 зірок⑂ 2 форкиз жовт. 2019 р.Переглянути на GitHub ↗

kestros/kestros-root-project має індекс здоров’я 21 зі 100, що відповідає смузі «Критичний». Найвищий показник — Sustainability & Governance (49/100), найнижчий — AI Readiness (21/100). Останнє оновлення — сьогодні. Більшість нещодавньої роботи виконує один учасник.

21
загалом / 100
Критичний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

21
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Abandonment Policy applies a 60% multiplier to weighted overall health and gives it a ceiling of 49.

Власність

KestrosОрганізація
4 підписники12 публічних репозиторіївз вер. 2019 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікація
Mavenio.kestros.commons:kestros-build-tools0.2.3-12760 днів тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

39У зоні ризику · 22% загального індексу

Активність розробки

36У зоні ризику
Як обчислюється оцінка
36/36Свіжість push — останній push 0 дн. тому
0/36Ритм комітів — 0/52 тижнів із комітами
0/18Обсяг комітів — 0 комітів за останній рік
0/10OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Використані вхідні дані
commits_last_year0
human_commit_share0,97
days_since_last_push0
active_weeks_last_year0

Дисципліна релізів

44У зоні ризику
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 2 релізів
0/36Свіжість релізів — останній реліз 2 130 дн. тому
12.6/27Ритм релізів — реліз кожні ~218,7 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count2
latest_release_tag0.1.2
releases_from_tagsні
days_since_latest_release2 130
mean_days_between_releases218,7
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

25Критичний · 18% загального індексу

Популярність і впровадження

3Критичний
Як обчислюється оцінка
0/60Зірки — 0 зірок
0/25Форки — 2 форків
2.7/15Спостерігачі — 4 спостерігачів
Використані вхідні дані
forks2
stars0
watchers4
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Здоров'я спільноти

50Помірний
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (Apache-2.0)
0/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingні
has_issue_templateні
has_code_of_conductні
has_pull_request_templateні

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

49У зоні ризику · 24% загального індексу

Стійкість мейнтейнерів (бас-фактор)

19Критичний
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
0.5/22.5Розподіл комітів — головний контриб’ютор — автор 98% комітів
6.8/13.5Широта контриб’юторів — 5 контриб’юторів
3/10OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3
Використані вхідні дані
bus_factor1
contributors_sampled5
top_contributor_share0,977

Реактивність на issue та PR

64Помірний
Як обчислюється оцінка
0/46.8Вирішення issue — немає issue або даних
33.9/38.3Прийняття PR — злито 70/79 вирішених PR
0/15OpenSSF Scorecard: Code-Review — Found 0/12 approved changesets -- score normalized to 0
Використані вхідні дані
merged_prs70
open_issues0
closed_issues0
issue_closed_ratio—
closed_unmerged_prs9
Виключено з оцінювання (немає даних або не застосовно): Вирішення issue. Залишкові ваги перенормовано.

Власність та опіка

55Помірний
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
5/25Охоплення власника — 4 підписників у kestros
20.1/25Послужний список — 12 публічних репозиторіїв, вік облікового запису ~6 р.
Використані вхідні дані
followers4
owner_typeOrganization
is_verified—
owner_loginkestros
public_repos12
account_age_days2 499

Супровід пакетів

69Помірний
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у maven
4/35Свіжість публікацій — остання публікація 760 дн. тому
20/20Історія версій — 12 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesio.kestros.commons:kestros-build-tools
ecosystemsmaven
any_deprecatedні
min_days_since_publish760

Інженерна якість

Чи наявні базові інженерні практики та документація?

27Критичний · 20% загального індексу

Інженерні практики

1Критичний
Як обчислюється оцінка
0/24Процеси CI
0/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — 0 out of 2 merged PRs checked by a CI test -- score normalized to 0
Використані вхідні дані
has_ciні
has_testsні
has_editorconfigні
has_linter_configні
has_precommit_configні

Документація

65Помірний
Як обчислюється оцінка
30/30README
0/25Каталог документації
15/15Сайт документації / домашня сторінка — https://www.kestros.io
10/10Опис репозиторію
0/10Теми
10/10Wiki
Використані вхідні дані
topics—
has_wikiтак
homepagehttps://www.kestros.io
has_readmeтак
has_docs_dirні
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

28Критичний · 16% загального індексу

Стан безпеки

29Критичний
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — немає даних
0/2.5CI-Tests — 0 out of 2 merged PRs checked by a CI test -- score normalized to 0
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/12 approved changesets -- score normalized to 0
0.8/2.5Contributors — project has 1 contributing companies or organizations -- score normalized to 3
0/10Dangerous-Workflow — немає даних
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
0/7.5Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — немає даних
0/5Pinned-Dependencies — немає даних
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — немає даних
0/7.5Vulnerabilities — 30 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated12
scorecard_versionv5.5.0
checks_inconclusive6
scorecard_aggregate2,9
Виключено з оцінювання (немає даних або не застосовно): branch_protection, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Залишкові ваги перенормовано.

Сповіщення про залежності

26Критичний
Як обчислюється оцінка
12.4/35Прямі залежності без відомих сповіщень — уражено 2: com.fasterxml.jackson.core:jackson-databind 2.9.10.8 (high 7.5), org.apache.sling:org.apache.sling.commons.log 5.0.0 (moderate 5.3)
1.9/25Непрямі залежності без відомих сповіщень — уражено 11: ch.qos.logback:logback-classic 1.1.7 (critical 9.8), ch.qos.logback:logback-core 1.1.7 (critical 9.8), com.fasterxml.jackson.core:jackson-core 2.9.9 (high 7.5), ще +8
12/40Немає задавнених сповіщень — 13 пакет(ів) зі сповіщеннями без реакції понад 90 дн.; найдавніше опубліковано 2 234 дн. тому
Використані вхідні дані
sourceosv
advisories34
affected_packages13
assessed_packages63
unassessed_packages0
affected_by_severitycritical 2, high 4, moderate 7
direct_affected_packages2
Звірено з runtime-замиканням залежностей maven:io.kestros.commons:kestros-build-tools@0.2.3 — тим, що тягне за собою встановлення опублікованого пакета, — 63 пакетів. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

21Критичний · 0% загального індексу

Контекст і настанови для агентів

18Критичний
Як обчислюється оцінка
0/45Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора
0/15Машиночитана документація (llms.txt)
18.1/40Читабельна історія комітів — намір зазначено у 33 з 97 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,34
agent_instruction_files—
agent_instruction_max_bytes—

Цикл верифікації (збірка / тести / перевірка типів)

23Критичний
Як обчислюється оцінка
12.6/18Розгортання однією командою — kestros-build-tools/pom.xml, kestros-parent/pom.xml, pom.xml (домовленість інструментарію, без раннера задач)
0/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
0/11Статична перевірка типів
0/10Відтворюване середовище
0/10Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом
8/8Автоматизоване супроводження — 3 з останніх 100 комітів — автоматичні оновлення залежностей
0/10OpenSSF Scorecard: Pinned-Dependencies — немає даних
Використані вхідні дані
has_nixні
has_testsні
lockfiles—
has_dockerfileні
typed_languageні
bootstrap_files—
has_devcontainerні
has_linter_configні
typecheck_configs—
agent_commit_share0
toolchain_manifestskestros-build-tools/pom.xml, kestros-parent/pom.xml, pom.xml
dependency_bot_commit_share0,03
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Pinned-Dependencies. Залишкові ваги перенормовано.

Ключові факти

0зірок GitHub
5контриб'юторів
0комітів за останні 12 місяців
0днів від останнього пушу
2релізів
1бас-фактор
0відкритих issue
Mavenпакетних екосистем

Попередження щодо збору даних

  • Language breakdown unavailable

Докладніше

Історія зірок і форків 0 ★ / 2 ⇿
0Зірки
2Форки

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

111222212020-122021-012021-01
OpenSSF Scorecard 2.9 / 10
2.9сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-24 21:23 UTC

10Binary-Artifactsno binaries found in the repo
н/дBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
0CI-Tests0 out of 2 merged PRs checked by a CI test -- score normalized to 0
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/12 approved changesets -- score normalized to 0
3Contributorsproject has 1 contributing companies or organizations -- score normalized to 3
н/дDangerous-Workflowno workflows found
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
н/дPackagingpackaging workflow not detected
н/дPinned-Dependenciesno dependencies found
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
н/дSigned-Releasesno releases found
н/дToken-PermissionsNo tokens found
0Vulnerabilities30 existing vulnerabilities detected
Прямі залежності 33
РеєстрПакетОбмеження версіїМаніфест
Mavenio.kestros.commons:kestros-build-tools[0.2.2,1.0.0]kestros-parent/pom.xml
Mavencom.github.spotbugs:spotbugs4.7.3kestros-parent/pom.xml
Mavenjavax.annotation:javax.annotation-api1.2pom.xml
Mavenorg.apache.sling:org.apache.sling.models.impl1.4.10pom.xml
Mavenorg.apache.sling:org.apache.sling.servlets.annotations1.2.4pom.xml
Mavenorg.apache.sling:org.apache.sling.event.api1.0.0pom.xml
Mavenorg.apache.sling:org.apache.sling.scripting.sightly.compiler.java1.0.26-1.4.0pom.xml
Mavencom.fasterxml.jackson.core:jackson-core2.9.9pom.xml
Mavencom.fasterxml.jackson.core:jackson-databind2.9.10.8pom.xml
Mavenjunit:junit4.13.1pom.xml
Mavenorg.mockito:mockito-core3.12.4pom.xml
Mavenorg.apache.sling:org.apache.sling.testing.sling-mock.junit42.3.10pom.xml
Mavenorg.apache.sling:org.apache.sling.testing.sling-mock-oak2.1.0pom.xml
Mavenorg.slf4j:slf4j-api1.7.30pom.xml
Mavenorg.apache.sling:org.apache.sling.commons.log5.0.0pom.xml
Mavenjavax.annotation:javax.annotation-api—pom.xml
Mavenorg.osgi:osgi.core—pom.xml
Mavenorg.osgi:osgi.cmpn—pom.xml
Mavenorg.osgi:osgi.annotation—pom.xml
Mavencom.fasterxml.jackson.core:jackson-databind—pom.xml
Mavencom.google.code.findbugs:annotations—pom.xml
Mavenorg.slf4j:slf4j-api—pom.xml
Mavenorg.apache.sling:org.apache.sling.models.api—pom.xml
Mavenorg.apache.sling:org.apache.sling.models.impl—pom.xml
Mavenorg.apache.sling:org.apache.sling.event.api—pom.xml
Mavenorg.apache.sling:org.apache.sling.commons.log—pom.xml
Mavenorg.apache.felix:org.apache.felix.healthcheck.api—pom.xml
Mavenorg.apache.felix:org.apache.felix.healthcheck.annotation—pom.xml
Mavenjunit:junit—pom.xml
Mavenorg.mockito:mockito-core—pom.xml
Mavenorg.apache.sling:org.apache.sling.testing.sling-mock.junit4—pom.xml
Mavenorg.apache.sling:org.apache.sling.testing.sling-mock-oak—pom.xml
Mavenorg.ow2.asm:asm6.2pom.xml
Усі залежності 73

Повний розв'язаний набір залежностей із графа залежностей GitHub: 40 прямих і 33 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
Mavencom.fasterxml.jackson.core:jackson-core2.9.9пряма
Mavencom.fasterxml.jackson.core:jackson-databind—пряма
Mavencom.fasterxml.jackson.core:jackson-databind2.9.10.8пряма
Mavencom.github.spotbugs:spotbugs4.7.3пряма
Mavencom.google.code.findbugs:annotations—пряма
Mavencom.google.code.findbugs:annotations3.0.0пряма
Mavenio.kestros.commons:kestros-build-tools—пряма
Mavenjavax.annotation:javax.annotation-api—пряма
Mavenjavax.annotation:javax.annotation-api1.2пряма
Mavenjunit:junit—пряма
Mavenjunit:junit4.13.1пряма
Mavenorg.apache.felix:org.apache.felix.healthcheck.annotation—пряма
Mavenorg.apache.felix:org.apache.felix.healthcheck.annotation2.0.0пряма
Mavenorg.apache.felix:org.apache.felix.healthcheck.api—пряма
Mavenorg.apache.felix:org.apache.felix.healthcheck.api2.0.2пряма
Mavenorg.apache.sling:org.apache.sling.commons.log—пряма
Mavenorg.apache.sling:org.apache.sling.commons.log5.0.0пряма
Mavenorg.apache.sling:org.apache.sling.event.api—пряма
Mavenorg.apache.sling:org.apache.sling.event.api1.0.0пряма
Mavenorg.apache.sling:org.apache.sling.models.api—пряма
Mavenorg.apache.sling:org.apache.sling.models.api1.3.6пряма
Mavenorg.apache.sling:org.apache.sling.models.impl—пряма
Mavenorg.apache.sling:org.apache.sling.models.impl1.4.10пряма
Mavenorg.apache.sling:org.apache.sling.scripting.sightly.compiler.java1.0.26-1.4.0пряма
Mavenorg.apache.sling:org.apache.sling.servlets.annotations1.2.4пряма
Mavenorg.apache.sling:org.apache.sling.testing.sling-mock-oak—пряма
Mavenorg.apache.sling:org.apache.sling.testing.sling-mock-oak2.1.0пряма
Mavenorg.apache.sling:org.apache.sling.testing.sling-mock.junit4—пряма
Mavenorg.apache.sling:org.apache.sling.testing.sling-mock.junit42.3.10пряма
Mavenorg.mockito:mockito-core—пряма
Mavenorg.mockito:mockito-core3.12.4пряма
Mavenorg.osgi:osgi.annotation—пряма
Mavenorg.osgi:osgi.annotation7.0.0пряма
Mavenorg.osgi:osgi.cmpn—пряма
Mavenorg.osgi:osgi.cmpn7.0.0пряма
Mavenorg.osgi:osgi.core—пряма
Mavenorg.osgi:osgi.core7.0.0пряма
Mavenorg.ow2.asm:asm6.2пряма
Mavenorg.slf4j:slf4j-api—пряма
Mavenorg.slf4j:slf4j-api1.7.30пряма
Mavencom.github.spotbugs:spotbugs-maven-plugin—непряма
Mavencom.github.spotbugs:spotbugs-maven-plugin4.7.2.1непряма
Mavencom.h3xstream.findsecbugs:findsecbugs-plugin1.12.0непряма
Mavencom.mebigfatguy.fb-contrib:fb-contrib7.6.4непряма
Mavenio.kestros.commons:kestros-spotbugs-pluginsRELEASEнепряма
Mavenio.wcm.maven.plugins:wcmio-content-package-maven-plugin1.6.18непряма
Mavenjavax.servlet:servlet-api2.5непряма
Mavenorg.apache.felix:maven-bundle-plugin—непряма
Mavenorg.apache.felix:maven-bundle-plugin5.1.1непряма
Mavenorg.apache.jackrabbit:filevault-package-maven-plugin1.0.3непряма
Mavenorg.apache.maven.plugins:maven-checkstyle-plugin—непряма
Mavenorg.apache.maven.plugins:maven-checkstyle-plugin3.1.1непряма
Mavenorg.apache.maven.plugins:maven-compiler-plugin3.8.1непряма
Mavenorg.apache.maven.plugins:maven-dependency-plugin—непряма
Mavenorg.apache.maven.plugins:maven-dependency-plugin3.1.1непряма
Mavenorg.apache.maven.plugins:maven-deploy-plugin2.8.2непряма
Mavenorg.apache.maven.plugins:maven-enforcer-plugin—непряма
Mavenorg.apache.maven.plugins:maven-enforcer-plugin3.0.0-M2непряма
Mavenorg.apache.maven.plugins:maven-jar-plugin3.2.0непряма
Mavenorg.apache.maven.plugins:maven-javadoc-plugin3.1.1непряма
Mavenorg.apache.maven.plugins:maven-source-plugin—непряма
Mavenorg.apache.maven.plugins:maven-source-plugin3.1.0непряма
Mavenorg.apache.maven.plugins:maven-surefire-plugin—непряма
Mavenorg.apache.maven.plugins:maven-surefire-plugin3.0.0-M3непряма
Mavenorg.apache.rat:apache-rat-plugin—непряма
Mavenorg.apache.rat:apache-rat-plugin0.13непряма
Mavenorg.apache.sling:htl-maven-plugin—непряма
Mavenorg.apache.sling:htl-maven-plugin1.2.2-1.4.0непряма
Mavenorg.apache.sling:sling-maven-plugin—непряма
Mavenorg.apache.sling:sling-maven-plugin2.4.2непряма
Mavenorg.jacoco:jacoco-maven-plugin—непряма
Mavenorg.jacoco:jacoco-maven-plugin0.8.12непряма
Mavenorg.pitest:pitest-maven1.15.2непряма
Сповіщення про залежності 13

Встановлення maven:io.kestros.commons:kestros-build-tools@0.2.3 тягне 63 пакетів, прямих і транзитивних: 13 мають відомі сповіщення, з них 2 — прямі залежності.

ПакетВерсіяЗв'язокКритичністьСповіщеньВиправлено в
ch.qos.logback:logback-classic1.1.7непрямакритична21.4.12
ch.qos.logback:logback-core1.1.7непрямакритична91.5.34
com.fasterxml.jackson.core:jackson-databind2.9.10.8прямависока53.1.4
com.fasterxml.jackson.core:jackson-core2.9.9непрямависока43.2.1
commons-beanutils:commons-beanutils1.8.3непрямависока32.0.0-M2
commons-io:commons-io2.4непрямависока22.14.0
org.apache.sling:org.apache.sling.commons.log5.0.0прямапомірна1—
com.google.guava:guava15.0непрямапомірна332.0.0-android
commons-lang:commons-lang2.5непрямапомірна13.18.0
org.apache.commons:commons-lang33.3.2непрямапомірна13.18.0
org.apache.jackrabbit:jackrabbit-jcr-commons2.8.0непрямапомірна12.22.2
org.apache.sling:org.apache.sling.api2.11.0непрямапомірна1—
org.apache.sling:org.apache.sling.i18n2.4.4непрямапомірна12.6.2

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 162,
      "has_wiki": true,
      "homepage": "https://www.kestros.io",
      "languages": {},
      "pushed_at": "2026-07-24T15:11:51Z",
      "created_at": "2019-10-08T04:44:31Z",
      "owner_type": "Organization",
      "updated_at": "2024-06-24T01:17:59Z",
      "description": "Base Kestros project build manager. Contains dependency and plugin versions for building and installing Bundles and Packages to Kestros instances.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": null,
      "significant_languages": []
    },
    "owner": {
      "blog": "https://www.kestros.io",
      "name": "Kestros",
      "type": "Organization",
      "login": "kestros",
      "company": null,
      "location": null,
      "followers": 4,
      "avatar_url": "https://avatars.githubusercontent.com/u/55570038?v=4",
      "created_at": "2019-09-20T03:30:48Z",
      "is_verified": null,
      "public_repos": 12,
      "account_age_days": 2499
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "0.1.2",
          "kind": "patch",
          "published_at": "2020-09-23T18:37:44Z"
        },
        {
          "tag": "0.0.2",
          "kind": "patch",
          "published_at": "2020-02-18T02:54:58Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "9ffe6d9f6253069605923fa0e23ba5e5fa300e79",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'release/0.3.3'",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-06-24T01:17:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a652ba2bddf14d414ec998c9f85cca280f01072f",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'develop' into release/0.3.3",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-06-24T01:17:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a10be43fdde090f50ea583b1bdf26c40c1cb0180",
          "body": null,
          "is_bot": false,
          "headline": "updated build tools version",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-06-24T01:17:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "242469bafd8925a91a4412b2a1fd53bde87295a8",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'release/0.3.3' into develop",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-06-23T19:36:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab9bcd2401e1076298503e87b6facafd65928650",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'release/0.3.3'",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-06-23T19:36:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c7518ab834ac5e73da100eaedd093ede5b398d10",
          "body": null,
          "is_bot": false,
          "headline": "updated site-parent to 0.3.3",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-06-23T19:35:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e1be14e5c9228eca47b89927f890fd5a3253321",
          "body": null,
          "is_bot": false,
          "headline": "updated spotbug config",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-06-23T19:23:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d9bd9bc25624331af6b2cee86cb18dd500ae316",
          "body": null,
          "is_bot": false,
          "headline": "added groupId and version tags to build tools",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-06-22T00:40:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a30a215b109cbd7cfc932f121cef2465bf99b66",
          "body": "updated to 0.3.1",
          "is_bot": false,
          "headline": "Merge pull request #76 from kestros/release/0.3.1",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-04-08T19:58:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b45f67f96f546aa0edf77aa523ebb7ae4824cc6",
          "body": "Release/0.3.1",
          "is_bot": false,
          "headline": "Merge pull request #75 from kestros/release/0.3.1",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-04-08T19:57:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b99dfc3ffdc6f99d482b506614f5b78935c10b6",
          "body": null,
          "is_bot": false,
          "headline": "updated to 0.3.1",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-04-08T19:56:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afbc401314c182732c93363e6c42f432344d7f7a",
          "body": null,
          "is_bot": false,
          "headline": "updated mockito versin",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-04-04T17:32:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "331561d39e536b893eb42ad0d936ba7a7be9d8b3",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch 'feature/update-checls' into develop",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-01-17T18:23:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c2ce781a585d4915c0a40a8af11a8c72e2d683b",
          "body": null,
          "is_bot": false,
          "headline": "updated findbgu config",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2024-01-17T18:23:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "853056b3b754767e4bca1cd37176723812a45aba",
          "body": null,
          "is_bot": false,
          "headline": "updated pitest config",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-11-11T18:26:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a3363339f566c5b1f6bc2dd4a0488190e885fdc",
          "body": null,
          "is_bot": false,
          "headline": "fixed mutators",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-11-04T18:24:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac37469f7e09e81c5eb5b7c2e0d12f307e014fc1",
          "body": null,
          "is_bot": false,
          "headline": "updated pitTest version",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-11-03T18:29:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f29364ffe782333d60185361c5f76da13f80ac3",
          "body": null,
          "is_bot": false,
          "headline": "updated to use spotbugs instead of findbugs",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-09-28T20:24:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf8884bea8fcbd140d803d1833afe6fdc65b5829",
          "body": null,
          "is_bot": false,
          "headline": "fixed compiler issue",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-09-28T20:11:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0fe6997c38e2adb20d2af33c2bafbe6f361bea51",
          "body": null,
          "is_bot": false,
          "headline": "fixed compiler plugin",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-09-28T18:55:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e15990ae2adf315638286cffdf2004c38b00da1",
          "body": null,
          "is_bot": false,
          "headline": "updated to java 11",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-09-28T18:25:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfa73a61b3161a7154675eb328e48f289784cb88",
          "body": "Release/0.3.0",
          "is_bot": false,
          "headline": "Merge pull request #73 from kestros/release/0.3.0",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-04-29T18:25:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72326663cfebae71f2d89e7b786d5e9a08952f3f",
          "body": "updated version to 0.3.0 release",
          "is_bot": false,
          "headline": "Merge pull request #74 from kestros/release/0.3.0",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-04-29T18:25:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0085fb74dec6b3bdc2cb0575ffdfe8f1669aa91",
          "body": "updated version to 0.3.0 release",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-04-29T16:17:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dea8da4602490381eb10a0cc673e8936899fcc7a",
          "body": "moved maven.javadoc to strict",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-04-02T22:24:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83ea12d07a466c7de24c0a5dc2fba5ac071fc859",
          "body": "fixed version",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-04-02T20:14:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32d5ed086bcbb5be3209b713994f2463c1972e07",
          "body": "updated root project version",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-04-02T17:25:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2447650d27fcc3b419e08413446f2b0730bd0e4d",
          "body": "updated version",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-03-26T23:08:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a6bfa5e5a5787cf6c2869f2355ec116d79dfb24",
          "body": "added coverage threshold to strict",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-03-26T23:00:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe02002f99b4912aa6398edc7dbd095ac80147af",
          "body": "merged parent and parent-strict",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-03-26T22:59:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b1e44c3790c105381ed9b008e11c19b89a93c549",
          "body": "updated version",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2023-01-08T00:31:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6495938ec00db2e7e9c186cae520066f7eea96d0",
          "body": "updated osgi-service-utils version",
          "is_bot": false,
          "headline": "Merge pull request #69 from kestros/develop",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-04-10T18:40:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66968fa58adfa34ece17d8773d9ea5937dcbe14b",
          "body": "updated osgi-service-utils version",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-04-10T18:33:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19a38bb288c29303ad08f68e37068235a27ad724",
          "body": "updated root project version",
          "is_bot": false,
          "headline": "Merge pull request #68 from kestros/develop",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-03-12T19:32:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6a70e4396c8e613460228e479cc6b04d8109923",
          "body": "updated root project version",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-03-12T19:31:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81a0811a6b2f63543d5aa2b1990ea36d62f19d89",
          "body": "Develop",
          "is_bot": false,
          "headline": "Merge pull request #67 from kestros/develop",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-03-12T19:30:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78d50e3a710b08a4c1d6d92166051b2785b184db",
          "body": "merge dependabot changes into develop",
          "is_bot": false,
          "headline": "Merge pull request #66 from kestros/master",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-03-12T19:29:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7b142bbd7a1af5d3f3947e42fd3e143242594b5",
          "body": "…ckson.core-jackson-databind-2.9.10.8\n\nBump jackson-databind from 2.9.10.7 to 2.9.10.8",
          "is_bot": false,
          "headline": "Merge pull request #64 from kestros/dependabot/maven/com.fasterxml.ja…",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-03-12T19:29:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99a6327422b3ef619ba5795a67d912b865094e68",
          "body": "merge dependabot changes into develop",
          "is_bot": false,
          "headline": "Merge pull request #65 from kestros/master",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-03-12T19:29:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4145a12361bd3126b10ebb4365bb13687b57db7",
          "body": "Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.9.10.7 to 2.9.10.8.\n- [Release notes](https://github.com/FasterXML/jackson/releases)\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson.core:jackson-databind\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump jackson-databind from 2.9.10.7 to 2.9.10.8",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2022-03-12T19:28:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee55750c4dc7bf59ab834ce5ae85376beaae8533",
          "body": "…ckson.core-jackson-databind-2.9.10.7\n\nBump jackson-databind from 2.9.9 to 2.9.10.7",
          "is_bot": false,
          "headline": "Merge pull request #59 from kestros/dependabot/maven/com.fasterxml.ja…",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-03-12T19:28:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ff94e4c1459c564044ab60a1b9268c7640a0206",
          "body": "Bump junit from 4.12 to 4.13.1",
          "is_bot": false,
          "headline": "Merge pull request #60 from kestros/dependabot/maven/junit-junit-4.13.1",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-03-12T19:28:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a95715933fbbbb3b91ad93e34f8716befc88d005",
          "body": "updated to release versions",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-03-12T19:25:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44bbbdd1a6c29ece97d59490adaef28e9eec0baf",
          "body": "updated osgi service utils versions",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2022-03-12T19:12:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1583aa8d2529e35dc1a478ea2ba34e156af7c37",
          "body": "updated parent version",
          "is_bot": false,
          "headline": "Merge pull request #63 from kestros/develop",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-07-19T05:00:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f04321873ebcf16b2b2b22588e8394ccfc030364",
          "body": "updated parent version",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-07-19T04:59:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "caf4abb516fc76c3f6eda4dae07b08edfc77c8a7",
          "body": "Develop",
          "is_bot": false,
          "headline": "Merge pull request #62 from kestros/develop",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-07-19T04:58:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25494a52548468b8e754e175ff96b6722aa7ec48",
          "body": "updated kestros dependency version",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-07-19T04:56:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a347c7d73cc0da19abfa0bee6f4bd7f11b0c0f1",
          "body": "updated to latest versions",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-07-17T01:49:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65003d084a96d834ace4b9052dcb80da9ce1feb3",
          "body": "updated versions",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-07-17T00:17:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "346c53c43eb119076f66f0c61daaba1cde3002e7",
          "body": "managin kestros commons dependencies",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-07-15T05:19:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7df2a33fdb78da61dfdf7054297ae9ad2f68fffb",
          "body": "started managing kestros commons dependencies",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-07-15T04:58:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9ba495d95b96b7de147d66fca0e89eed5ba13b9",
          "body": "updated to 0.2.0",
          "is_bot": false,
          "headline": "Merge pull request #61 from kestros/release/0.2.0",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-04-18T18:50:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6f655055faa77b60bc31731751ecf080b5e10f5",
          "body": "Bumps [junit](https://github.com/junit-team/junit4) from 4.12 to 4.13.1.\n- [Release notes](https://github.com/junit-team/junit4/releases)\n- [Changelog](https://github.com/junit-team/junit4/blob/main/doc/ReleaseNotes4.12.md)\n- [Commits](https://github.com/junit-team/junit4/compare/r4.12...r4.13.1)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump junit from 4.12 to 4.13.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2021-04-18T18:50:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e1691acb7930736b56f02e079f0da5039086b6b",
          "body": "Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.9.9 to 2.9.10.7.\n- [Release notes](https://github.com/FasterXML/jackson/releases)\n- [Commits](https://github.com/FasterXML/jackson/commits)\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump jackson-databind from 2.9.9 to 2.9.10.7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2021-04-18T18:50:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5b5c676d219447d692f9eba94d2e7dadfa78ab3",
          "body": "Release/0.2.0",
          "is_bot": false,
          "headline": "Merge pull request #58 from kestros/release/0.2.0",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-04-18T18:50:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21eaf5d9d6efc798d657736f575e16a10b2bff73",
          "body": "updated to 0.2.0\nremoved kestros artifact dependency management",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-04-18T18:44:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3925119657e3270d153e02f25329708de8388251",
          "body": "…ersion\n\nUpdating maven-bundle-plugin to latest tested working version",
          "is_bot": false,
          "headline": "Merge pull request #57 from stephenpfaff/bugfix/maven-bundle-plugin-v…",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-04-07T00:32:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4553d51a6ac05f01b37ce6477d1781e6746c9e2",
          "body": "…es maven build issues",
          "is_bot": false,
          "headline": "Updating maven-bundle-plugin to latest tested working version, resolv…",
          "author_name": "Stephen Pfaff",
          "author_login": "stephenpfaff",
          "committed_at": "2021-04-07T00:30:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c587d757371aefd68b9ea2e9e7f0156902717a8c",
          "body": "updated osgi-service-utils version",
          "is_bot": false,
          "headline": "Merge pull request #56 from kestros/feature/update-module-verions",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-02-22T18:21:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16d6d853706a7fbd2c5297439b2a240cf1f649cb",
          "body": "updated osgi-service-utils version",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-02-22T18:21:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a2bb9a96536d10d97fd024c86d218f9367bcc66f",
          "body": "updated versions to snapshots",
          "is_bot": false,
          "headline": "Merge pull request #55 from kestros/feature/update-module-verions",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-02-16T22:17:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08c7acdbf12f6319a23e789a5ba6b985812f3e23",
          "body": "updated versions to snapshots",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-02-15T04:09:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "301669b3890aa50aa12159ac88c45a80e773e52b",
          "body": "Feature/sling models 0.2.0",
          "is_bot": false,
          "headline": "Merge pull request #54 from kestros/feature/sling-models-0.2.0",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-18T20:31:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "edad963bb72d0173da0abd36e5d30a6bee969ece",
          "body": "updated to release version on all public repos",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-18T20:30:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a29279265b8a9961ef22b81fb4de4544b7769cd0",
          "body": "updated sling ui-libraries and validation versions",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-18T19:25:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e90cc051206af9030030fb61c5ec2151d4ca10f",
          "body": "updated osgi-service-utils to 0.1.2",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-18T19:21:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e35c32b7af57bb53d77657aaf712e6cf3071bc2a",
          "body": "updated structured sling models version to 0.2.0",
          "is_bot": false,
          "headline": "Merge pull request #53 from kestros/feature/sling-models-0.2.0",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-18T19:11:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00f62b2642e3fc3afcac71d04c56051a906c205a",
          "body": "updated structured sling models version to 0.2.0",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-18T19:09:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fa37f91e931fd5ab77be89b48de3f84ab45298d",
          "body": "added kestros cms-foundation api modules",
          "is_bot": false,
          "headline": "Merge pull request #52 from kestros/feature/add-api-modules",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-12T22:47:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fe9c1524bf844888952861520031fe28c4f36b5",
          "body": "added kestros cms-foundation api modules",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-12T22:17:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c3b051fc07cd463d68cd13fef1ca1254e152f02b",
          "body": "Feature/add kestros dependencies",
          "is_bot": false,
          "headline": "Merge pull request #51 from kestros/feature/add-kestros-dependencies",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-02T04:06:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd9fbe3c38aa21e1231fd6664c9a52aee812811e",
          "body": "added kestros dependencies up to cms-foundation",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-02T03:54:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "118b4435ceeee8e023bed6b40e05b631f416162a",
          "body": "updated version to 0.1.3-SNAPSHOT",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2021-01-01T19:16:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "429b17c50eb46ab8caea2e18706efbaa01ecbc16",
          "body": "adapt gitignore for eclipse",
          "is_bot": false,
          "headline": "Merge pull request #50 from kestros/master",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-12-14T19:50:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8021ea5878977f96f255e23a07d817bed182ff3",
          "body": "Adapt gitignore for eclipse",
          "is_bot": false,
          "headline": "Merge pull request #49 from gerritcap/master",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-12-14T19:37:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a0df3388bca55694223a40a1440e3eb5fd86634",
          "body": null,
          "is_bot": false,
          "headline": "Adapt gitignore for eclipse",
          "author_name": "Gerrit Cap",
          "author_login": "gerritcap",
          "committed_at": "2020-12-14T18:57:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78a642aed5c810196ca2a8193b976319f14b1c13",
          "body": "Release/0.1.2",
          "is_bot": false,
          "headline": "Merge pull request #47 from kestros/release/0.1.2",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-23T18:36:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "837149f6b95354e9a585186d806833172d429d62",
          "body": "updated version to 0.1.2",
          "is_bot": false,
          "headline": "Merge pull request #48 from kestros/release/0.1.2",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-23T18:36:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8fe050eb8d6f1c96f8e501322f53267cdf165da",
          "body": "updated version to 0.1.2",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-23T18:33:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca6639d4050ad868d15ba76a656a9e85d818ade4",
          "body": "…erhaul\n\nFeature/site administration ui overhaul",
          "is_bot": false,
          "headline": "Merge pull request #46 from kestros/feature/site-administration-ui-ov…",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-23T18:32:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3738cc030f79000fa36b08fc0b0ad1756107295",
          "body": "updated osgi dependency versions to 7.0.0",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-23T18:26:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2ef8810e9ae2c75598605980674e3618dfc1fe9",
          "body": "change org.osgi.core dependency to osgi.core",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-23T18:04:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "851e7f7b201aa43e166742f39758602f7090d3d4",
          "body": "updated to 0.1.2-SNAPSHOT",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-23T17:58:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c02713f865d3b29d5ef71dab06b5205135320745",
          "body": "updated osgi annotation dependency version",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-23T17:53:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c4e8c29ef84fd197be67282086772758ba4a1a3",
          "body": "Develop",
          "is_bot": false,
          "headline": "Merge pull request #45 from kestros/develop",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-18T16:42:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4934419807d8e144874fc466888d6d1563f0b011",
          "body": "…erhaul\n\nupdated jackson versions to match latest version in sling",
          "is_bot": false,
          "headline": "Merge pull request #44 from kestros/feature/site-administration-ui-ov…",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-18T16:42:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95dcff022b8c462157b89fcb9c923d39fc638e39",
          "body": "updated version to 0.1.1",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-18T16:40:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "887679e4c309e68dd61644a5da878a642276f65f",
          "body": "updated jackson versions to match latest version in sling",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-18T16:36:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2e6e111b1620a0bd349f47fec36fafd997e5e7b",
          "body": "Develop",
          "is_bot": false,
          "headline": "Merge pull request #42 from kestros/develop",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-18T03:33:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b299165b973c92a12fafe1af226c575e9fb1c0cc",
          "body": "…erhaul\n\nFeature/site administration ui overhaul",
          "is_bot": false,
          "headline": "Merge pull request #41 from kestros/feature/site-administration-ui-ov…",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-18T03:32:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cfd9947c18e777bfa8b27b31b4534a68139ac805",
          "body": "updated versions in readme",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-18T03:25:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93950e9fb3c6cb22f6d861cb5e27caac792dad99",
          "body": "updated version to 0.1.0",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-09-17T19:26:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0995a2f3282f32801b12e3052efdf22d764a10ff",
          "body": "added felix healthcheck dependencies",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-07-22T00:12:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e0d5893492f5f4c5957a2a83b5eda27d8bddc12",
          "body": "set rat plugin to run during validate phase",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-07-07T04:04:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "897d31900ccb03a8121ca809bd24ef08394fbbd7",
          "body": "added lint config files to rat plugin ignore list",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-07-01T20:52:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20038b628aa7c9b52b7bdfe7730acd3a13c3aa73",
          "body": "added additional paths for rat plugin to ignore",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-06-24T21:56:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "099066109eb9c8435c6fad9eecc00fc6fde7b3b1",
          "body": "updated version to 0.1.0-SNAPSHOT",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-06-23T21:01:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee74d4f67306294fe20dea4564ac10cb12585d09",
          "body": "updated jacoco execution to work with sonarqube",
          "is_bot": false,
          "headline": "",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-06-23T21:01:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab640148799489142bbd084103a65cadb8519799",
          "body": "Develop",
          "is_bot": false,
          "headline": "Merge pull request #37 from kestros/develop",
          "author_name": "Danny Moulton",
          "author_login": "dannymoulton",
          "committed_at": "2020-04-11T18:23:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 2,
      "commits_last_year": 0,
      "latest_release_at": "2020-09-23T18:37:44Z",
      "latest_release_tag": "0.1.2",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 0,
      "days_since_latest_release": 2130,
      "mean_days_between_releases": 218.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "io.kestros.commons:kestros-build-tools",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.kestros.commons/kestros-build-tools",
          "is_deprecated": false,
          "latest_version": "0.2.3",
          "repository_url": null,
          "versions_count": 12,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2024-06-24T01:06:13Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 760
        }
      ]
    },
    "popularity": {
      "forks": 2,
      "stars": 0,
      "watchers": 4,
      "fork_history": {
        "days": [
          {
            "date": "2020-12-14",
            "count": 1
          },
          {
            "date": "2021-01-30",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_forks": 2
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 4
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "kestros-build-tools/pom.xml",
        "kestros-parent/pom.xml",
        "pom.xml"
      ],
      "largest_source_bytes": null,
      "source_files_sampled": 0,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "kestros-build-tools/pom.xml",
        "kestros-parent/pom.xml",
        "pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "ch.qos.logback:logback-classic",
            "direct": false,
            "version": "1.1.7",
            "severity": "critical",
            "ecosystem": "maven",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-vmfg-rjjm-rjrj",
              "GHSA-vmq6-5m68-f53m"
            ],
            "fixed_version": "1.4.12",
            "advisory_count": 2,
            "oldest_advisory_days": 1873
          },
          {
            "name": "ch.qos.logback:logback-core",
            "direct": false,
            "version": "1.1.7",
            "severity": "critical",
            "ecosystem": "maven",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-25qh-j22f-pwp8",
              "GHSA-668q-qrv7-99fm",
              "GHSA-6v67-2wr5-gvf4",
              "GHSA-jhq6-gfmj-v8fx",
              "GHSA-p47f-322f-whfh",
              "GHSA-pr98-23f8-jwxv",
              "GHSA-qqpg-mvqg-649v",
              "GHSA-vmfg-rjjm-rjrj",
              "GHSA-vmq6-5m68-f53m"
            ],
            "fixed_version": "1.5.34",
            "advisory_count": 9,
            "oldest_advisory_days": 1873
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": true,
            "version": "2.9.10.8",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-57j2-w4cx-62h2",
              "GHSA-5jmj-h7xm-6q6v",
              "GHSA-hgj6-7826-r7m5",
              "GHSA-jjjh-jjxp-wpff",
              "GHSA-rgv9-q543-rqg4"
            ],
            "fixed_version": "3.1.4",
            "advisory_count": 5,
            "oldest_advisory_days": 1595
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-core",
            "direct": false,
            "version": "2.9.9",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-72hv-8253-57qq",
              "GHSA-h46c-h94j-95f3",
              "GHSA-r7wm-3cxj-wff9",
              "GHSA-wf8f-6423-gfxg"
            ],
            "fixed_version": "3.2.1",
            "advisory_count": 4,
            "oldest_advisory_days": 412
          },
          {
            "name": "commons-beanutils:commons-beanutils",
            "direct": false,
            "version": "1.8.3",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-6phf-73q6-gh87",
              "GHSA-p66x-2cv9-qq3v",
              "GHSA-wxr5-93ph-8wr9"
            ],
            "fixed_version": "2.0.0-M2",
            "advisory_count": 3,
            "oldest_advisory_days": 2234
          },
          {
            "name": "commons-io:commons-io",
            "direct": false,
            "version": "2.4",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-78wr-2p64-hpwj",
              "GHSA-gwrp-pvrq-jmwv"
            ],
            "fixed_version": "2.14.0",
            "advisory_count": 2,
            "oldest_advisory_days": 1915
          },
          {
            "name": "org.apache.sling:org.apache.sling.commons.log",
            "direct": true,
            "version": "5.0.0",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-qmx3-m648-hr74"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 1492
          },
          {
            "name": "com.google.guava:guava",
            "direct": false,
            "version": "15.0",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-5mg8-w23w-74h3",
              "GHSA-7g45-4rm6-3mm3",
              "GHSA-mvr2-9pj6-7w5j"
            ],
            "fixed_version": "32.0.0-android",
            "advisory_count": 3,
            "oldest_advisory_days": 2230
          },
          {
            "name": "commons-lang:commons-lang",
            "direct": false,
            "version": "2.5",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-j288-q9x7-2f5v"
            ],
            "fixed_version": "3.18.0",
            "advisory_count": 1,
            "oldest_advisory_days": 378
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": false,
            "version": "3.3.2",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-j288-q9x7-2f5v"
            ],
            "fixed_version": "3.18.0",
            "advisory_count": 1,
            "oldest_advisory_days": 378
          },
          {
            "name": "org.apache.jackrabbit:jackrabbit-jcr-commons",
            "direct": false,
            "version": "2.8.0",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-cxvc-g8f2-4gmm"
            ],
            "fixed_version": "2.22.2",
            "advisory_count": 1,
            "oldest_advisory_days": 319
          },
          {
            "name": "org.apache.sling:org.apache.sling.api",
            "direct": false,
            "version": "2.11.0",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-qmx3-m648-hr74"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 1492
          },
          {
            "name": "org.apache.sling:org.apache.sling.i18n",
            "direct": false,
            "version": "2.4.4",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-mrpv-5pmr-p92h"
            ],
            "fixed_version": "2.6.2",
            "advisory_count": 1,
            "oldest_advisory_days": 1247
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 4,
          "critical": 2,
          "moderate": 7
        },
        "advisory_count": 34,
        "affected_count": 13,
        "assessed_count": 63,
        "malicious_count": 0,
        "assessed_package": "maven:io.kestros.commons:kestros-build-tools@0.2.3",
        "unassessed_count": 0,
        "direct_affected_count": 2
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "io.kestros.commons:kestros-build-tools",
          "manifest": "kestros-parent/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "[0.2.2,1.0.0]"
        },
        {
          "name": "com.github.spotbugs:spotbugs",
          "manifest": "kestros-parent/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.7.3"
        },
        {
          "name": "javax.annotation:javax.annotation-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.2"
        },
        {
          "name": "org.apache.sling:org.apache.sling.models.impl",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.4.10"
        },
        {
          "name": "org.apache.sling:org.apache.sling.servlets.annotations",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.2.4"
        },
        {
          "name": "org.apache.sling:org.apache.sling.event.api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.0.0"
        },
        {
          "name": "org.apache.sling:org.apache.sling.scripting.sightly.compiler.java",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.0.26-1.4.0"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.9.9"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-databind",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.9.10.8"
        },
        {
          "name": "junit:junit",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.13.1"
        },
        {
          "name": "org.mockito:mockito-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.12.4"
        },
        {
          "name": "org.apache.sling:org.apache.sling.testing.sling-mock.junit4",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.3.10"
        },
        {
          "name": "org.apache.sling:org.apache.sling.testing.sling-mock-oak",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.1.0"
        },
        {
          "name": "org.slf4j:slf4j-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.7.30"
        },
        {
          "name": "org.apache.sling:org.apache.sling.commons.log",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "5.0.0"
        },
        {
          "name": "javax.annotation:javax.annotation-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.osgi:osgi.core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.osgi:osgi.cmpn",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.osgi:osgi.annotation",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-databind",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.google.code.findbugs:annotations",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.slf4j:slf4j-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.sling:org.apache.sling.models.api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.sling:org.apache.sling.models.impl",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.sling:org.apache.sling.event.api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.sling:org.apache.sling.commons.log",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.felix:org.apache.felix.healthcheck.api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.felix:org.apache.felix.healthcheck.annotation",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "junit:junit",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.mockito:mockito-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.sling:org.apache.sling.testing.sling-mock.junit4",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.sling:org.apache.sling.testing.sling-mock-oak",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.ow2.asm:asm",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "6.2"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "com.fasterxml.jackson.core:jackson-core",
            "direct": true,
            "version": "2.9.9",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": true,
            "version": "2.9.10.8",
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs",
            "direct": true,
            "version": "4.7.3",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.code.findbugs:annotations",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.google.code.findbugs:annotations",
            "direct": true,
            "version": "3.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.kestros.commons:kestros-build-tools",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "javax.annotation:javax.annotation-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "javax.annotation:javax.annotation-api",
            "direct": true,
            "version": "1.2",
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": true,
            "version": "4.13.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:org.apache.felix.healthcheck.annotation",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:org.apache.felix.healthcheck.annotation",
            "direct": true,
            "version": "2.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:org.apache.felix.healthcheck.api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:org.apache.felix.healthcheck.api",
            "direct": true,
            "version": "2.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.commons.log",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.commons.log",
            "direct": true,
            "version": "5.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.event.api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.event.api",
            "direct": true,
            "version": "1.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.models.api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.models.api",
            "direct": true,
            "version": "1.3.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.models.impl",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.models.impl",
            "direct": true,
            "version": "1.4.10",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.scripting.sightly.compiler.java",
            "direct": true,
            "version": "1.0.26-1.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.servlets.annotations",
            "direct": true,
            "version": "1.2.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.testing.sling-mock-oak",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.testing.sling-mock-oak",
            "direct": true,
            "version": "2.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.testing.sling-mock.junit4",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:org.apache.sling.testing.sling-mock.junit4",
            "direct": true,
            "version": "2.3.10",
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-core",
            "direct": true,
            "version": "3.12.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.osgi:osgi.annotation",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.osgi:osgi.annotation",
            "direct": true,
            "version": "7.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.osgi:osgi.cmpn",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.osgi:osgi.cmpn",
            "direct": true,
            "version": "7.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.osgi:osgi.core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.osgi:osgi.core",
            "direct": true,
            "version": "7.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.ow2.asm:asm",
            "direct": true,
            "version": "6.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": true,
            "version": "1.7.30",
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs-maven-plugin",
            "direct": false,
            "version": "4.7.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.h3xstream.findsecbugs:findsecbugs-plugin",
            "direct": false,
            "version": "1.12.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.mebigfatguy.fb-contrib:fb-contrib",
            "direct": false,
            "version": "7.6.4",
            "ecosystem": "maven"
          },
          {
            "name": "io.kestros.commons:kestros-spotbugs-plugins",
            "direct": false,
            "version": "RELEASE",
            "ecosystem": "maven"
          },
          {
            "name": "io.wcm.maven.plugins:wcmio-content-package-maven-plugin",
            "direct": false,
            "version": "1.6.18",
            "ecosystem": "maven"
          },
          {
            "name": "javax.servlet:servlet-api",
            "direct": false,
            "version": "2.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:maven-bundle-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:maven-bundle-plugin",
            "direct": false,
            "version": "5.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.jackrabbit:filevault-package-maven-plugin",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-checkstyle-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-checkstyle-plugin",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": "3.8.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-dependency-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-dependency-plugin",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-deploy-plugin",
            "direct": false,
            "version": "2.8.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": "3.0.0-M2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": "3.0.0-M3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.rat:apache-rat-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.rat:apache-rat-plugin",
            "direct": false,
            "version": "0.13",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:htl-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:htl-maven-plugin",
            "direct": false,
            "version": "1.2.2-1.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:sling-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.sling:sling-maven-plugin",
            "direct": false,
            "version": "2.4.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.jacoco:jacoco-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.jacoco:jacoco-maven-plugin",
            "direct": false,
            "version": "0.8.12",
            "ecosystem": "maven"
          },
          {
            "name": "org.pitest:pitest-maven",
            "direct": false,
            "version": "1.15.2",
            "ecosystem": "maven"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 73,
        "direct_count": 40,
        "indirect_count": 33
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 4,
        "merged_prs": 70,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 9
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "dannymoulton",
          "commits": 211,
          "avatar_url": "https://avatars.githubusercontent.com/u/15672661?v=4"
        },
        {
          "type": "User",
          "login": "kevinobriendotca",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/6549777?v=4"
        },
        {
          "type": "User",
          "login": "gerritcap",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/22480130?v=4"
        },
        {
          "type": "User",
          "login": "stephenpfaff",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/3493025?v=4"
        },
        {
          "type": "User",
          "login": "deemaho",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/8353853?v=4"
        }
      ],
      "contributors_sampled": 5,
      "top_contributor_share": 0.977
    },
    "quality_signals": {
      "has_ci": false,
      "has_tests": false,
      "ci_workflows": [],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 0,
            "reason": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/12 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": null,
            "reason": "no dependencies found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "30 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "9ffe6d9f6253069605923fa0e23ba5e5fa300e79",
        "ran_at": "2026-07-24T21:23:55Z",
        "aggregate_score": 2.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T15:11:53Z",
      "oldest_open_prs": [
        {
          "number": 80,
          "created_at": "2026-03-21T02:46:13Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 81,
          "created_at": "2026-03-21T06:15:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 82,
          "created_at": "2026-06-30T08:16:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 83,
          "created_at": "2026-07-24T15:11:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2024-04-08T19:58:07Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/kestros/kestros-root-project",
    "host": "github.com",
    "name": "kestros-root-project",
    "owner": "kestros"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "critical",
      "name": "Overall health",
      "note": "Abandonment Policy applies a 60% multiplier to weighted overall health and gives it a ceiling of 49.",
      "notes": [
        {
          "code": "abandonment_overall_adjustment",
          "params": {
            "cap": 49,
            "pct": 60
          }
        }
      ],
      "value": 21,
      "inputs": {
        "security": 28,
        "vitality": 39,
        "community": 25,
        "governance": 49,
        "engineering": 27,
        "abandonment_cap": 49,
        "abandonment_state": "likely_abandoned",
        "abandonment_multiplier": 60,
        "weighted_overall_before_abandonment": 35,
        "overall_after_abandonment_multiplier": 21
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "at_risk",
        "name": "Vitality",
        "value": 39,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "at_risk",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 36,
            "inputs": {
              "commits_last_year": 0,
              "human_commit_share": 0.97,
              "days_since_last_push": 0,
              "active_weeks_last_year": 0
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "0/52 weeks with commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "0 commits in the last year",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 44,
            "inputs": {
              "releases_count": 2,
              "latest_release_tag": "0.1.2",
              "releases_from_tags": false,
              "days_since_latest_release": 2130,
              "mean_days_between_releases": 218.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "2 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2130 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2130
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~218.7 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 218.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "moderate",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "cap": 49,
              "state": "likely_abandoned",
              "guards": [],
              "signals": [
                "unfixed_advisory",
                "release_stall",
                "scorecard_unmaintained"
              ],
              "red_flag": true,
              "multiplier_pct": 60,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 0,
              "unanswered_open_issues": 0,
              "days_since_last_merged_pr": 837,
              "days_since_last_human_commit": 760,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 760 days; 3 unmet obligation(s): a fixed advisory left unapplied, releases stalled, Scorecard reports it unmaintained",
                "points": 60,
                "status": "partial",
                "details": [
                  {
                    "code": "abandonment_flagged",
                    "params": {
                      "days": 760,
                      "count": 3,
                      "signals": "a fixed advisory left unapplied, releases stalled, Scorecard reports it unmaintained"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 25,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 3,
            "inputs": {
              "forks": 2,
              "stars": 0,
              "watchers": 4,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "4 watchers",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 49,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 19,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 5,
              "top_contributor_share": 0.977
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 98% of commits",
                "points": 0.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 98
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "5 contributors",
                "points": 6.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "merged_prs": 70,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 9
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "70/79 decided PRs merged",
                "points": 33.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 70,
                      "decided": 79
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/12 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "followers": 4,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "kestros",
              "public_repos": 12,
              "account_age_days": 2499
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "4 followers of kestros",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 4,
                      "login": "kestros"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "12 public repos, account ~6 yr old",
                "points": 20.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 12
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "moderate",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "packages": [
                "io.kestros.commons:kestros-build-tools"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 760
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 760 days ago",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 760
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "12 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "critical",
        "name": "Engineering Quality",
        "value": 27,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "critical",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "has_ci": false,
              "has_tests": false,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "https://www.kestros.io",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://www.kestros.io",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "critical",
        "name": "Security",
        "value": 28,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "dangerous_workflow",
                    "packaging",
                    "pinned_dependencies",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 29,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 12,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 6,
              "scorecard_aggregate": 2.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/12 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "30 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "critical",
            "name": "Dependency advisories",
            "note": "Matched the maven:io.kestros.commons:kestros-build-tools@0.2.3 runtime dependency closure — what installing the published package pulls in — 63 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:io.kestros.commons:kestros-build-tools@0.2.3",
                  "assessed": 63
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 26,
            "inputs": {
              "source": "osv",
              "advisories": 34,
              "affected_packages": 13,
              "assessed_packages": 63,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 2, high 4, moderate 7",
              "direct_affected_packages": 2
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "2 affected: com.fasterxml.jackson.core:jackson-databind 2.9.10.8 (high 7.5), org.apache.sling:org.apache.sling.commons.log 5.0.0 (moderate 5.3)",
                "points": 12.4,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 2,
                      "packages": "com.fasterxml.jackson.core:jackson-databind 2.9.10.8 (high 7.5), org.apache.sling:org.apache.sling.commons.log 5.0.0 (moderate 5.3)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "11 affected: ch.qos.logback:logback-classic 1.1.7 (critical 9.8), ch.qos.logback:logback-core 1.1.7 (critical 9.8), com.fasterxml.jackson.core:jackson-core 2.9.9 (high 7.5), +8 more",
                "points": 1.9,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 11,
                      "packages": "ch.qos.logback:logback-classic 1.1.7 (critical 9.8), ch.qos.logback:logback-core 1.1.7 (critical 9.8), com.fasterxml.jackson.core:jackson-core 2.9.9 (high 7.5)"
                    }
                  },
                  {
                    "code": "advisories_affected_more",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "13 advisory-carrying package(s) unaddressed past 90 days; oldest published 2234 days ago",
                "points": 12,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 13,
                      "oldest": 2234
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 63,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "critical",
        "name": "AI Readiness",
        "value": 21,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 18,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.34,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "33 of 97 human commits state their intent (structured subject or explanatory body)",
                "points": 18.1,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 33,
                      "sampled": 97
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "critical",
            "name": "Verify loop (build / test / typecheck)",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_pinned_dependencies"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 23,
            "inputs": {
              "has_nix": false,
              "has_tests": false,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "kestros-build-tools/pom.xml",
                "kestros-parent/pom.xml",
                "pom.xml"
              ],
              "dependency_bot_commit_share": 0.03
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "kestros-build-tools/pom.xml, kestros-parent/pom.xml, pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "kestros-build-tools/pom.xml, kestros-parent/pom.xml, pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "3 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 3,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Language breakdown unavailable"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T21:24:08.875813Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/k/kestros/kestros-root-project.svg",
  "full_name": "kestros/kestros-root-project",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Пов’язані записи

Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з kestros/kestros-root-project. Читати поруч →

93apache/airflowApache Airflow - A platform to programmatically author, schedule, and monitor workflowsВідмінний90ray-project/rayRay is an AI compute engine. Ray consists of a core distributed runtime and a set of AI Libraries for accelerating ML workloads.Відмінний90apache/dolphinschedulerApache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-codeВідмінний89keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and ServicesВідмінний89stripe/stripe-react-nativeReact Native library for Stripe.Відмінний88microsoft/onnxruntimeONNX Runtime: cross-platform, high performance ML inferencing and training acceleratorВідмінний

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистика — Maven.