netty/netty-tcnative має індекс здоров’я 75 зі 100, що відповідає смузі «Добрий». Найвищий показник — Security (79/100), найнижчий — AI Readiness (55/100). Останнє оновлення було 10 днів тому. Більшість нещодавньої роботи виконує один учасник.
75
загалом / 100
Добрий
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє зважене середнє, відкаліброване за розподілом публічного реєстру, тож діапазони мають перцентильний зміст; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 34 («У зоні ризику»).
75
Винятковий93-100Верхній щабель реєстру (≈ топ-5%); відповідає практично всім перевіреним критеріям
Відмінний80-92Сильний за всіма напрямами; незначні прогалини
Добрий65-79Здоровий; прогалини обмежені та керовані
Помірний50-64Прийнятний, але з помітними прогалинами; рекомендовано перевірку
Слабкий35-49Суттєві недоліки в кількох сферах
У зоні ризику20-34Суттєві слабкі місця; впровадження потребує обережності
Критичний1-19Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Зважений загальний бал 65 калібровано до 75 за шкалою опублікованого індексу (калібрування реєстру 2026-08-02).
Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
25/25
Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень
0/40
Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
source
osv
advisories
0
affected_packages
0
assessed_packages
1
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей maven:io.netty:netty-tcnative@2.0.81.Final — тим, що тягне за собою встановлення опублікованого пакета, — 1 пакетів. Досяжність не аналізується.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Має свідомо малу вагу (4%): агентний інструментарій — реальний сигнал супроводу, але репозиторій без нього все одно може отримати 100/100.
Розгортання однією командою — boringssl-static/pom.xml, libressl-static/pom.xml, openssl-classes/pom.xml (домовленість інструментарію, без раннера задач)
22/22
Автоматизовані тести
0/11
Конфігурація лінтера / форматера
11/11
Статична перевірка типів — C (статично типізована)
10/10
Відтворюване середовище — Dockerfile
0/10
Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом
0/8
Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено
0/10
OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Керовані розміри файлів — 2/49 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_language
C
largest_source_bytes
117 626
source_files_sampled
49
oversized_source_files
2
Ключові факти
266зірок GitHub
61контриб'юторів
64комітів за останні 12 місяців
10днів від останнього пушу
1релізів
1бас-фактор
35відкритих issue
Mavenпакетних екосистем
Попередження щодо збору даних
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch maven package 'io.netty:netty-tcnative-openssl-static' from its registry
Could not fetch maven package 'io.netty:netty-tcnative-libressl-static' from its registry
Докладніше
Історія зірок і форків 0 ★ / 196 ⇿
0Зірки
196Форки
1Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 0Патчі 0
Кожна точка охоплює 11 днів.
OpenSSF Scorecard 7.4 / 10
7.4сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-30 23:31 UTC
Повний розв'язаний набір залежностей із графа залежностей GitHub: 5 прямих і 22 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
Встановлення maven:io.netty:netty-tcnative@2.0.81.Final тягне 1 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.
Жодне відоме сповіщення не стосується оцінених залежностей.
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 3116,
"has_wiki": false,
"homepage": null,
"languages": {
"C": 354204,
"M4": 52882,
"Java": 163296,
"Ruby": 125,
"Shell": 1964
},
"pushed_at": "2026-07-20T16:55:28Z",
"created_at": "2014-04-22T04:24:17Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T16:55:40Z",
"description": "A fork of Apache Tomcat Native, based on finagle-native",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "C",
"significant_languages": [
"C",
"Java"
]
},
"owner": {
"blog": "https://netty.io",
"name": "The Netty Project",
"type": "Organization",
"login": "netty",
"company": null,
"location": null,
"followers": 412,
"avatar_url": "https://avatars.githubusercontent.com/u/473791?v=4",
"created_at": "2010-11-09T09:20:31Z",
"is_verified": null,
"public_repos": 16,
"account_age_days": 5742
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "gcc-precompile",
"kind": "other",
"published_at": "2021-02-01T08:46:08Z"
}
],
"recent_commits": [
{
"oid": "6ad94b7772fb330999d38ac2153f838cb6259357",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-07-20T16:55:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "402d9c37cd4ea4c2d282899c90b0372a8cd38bfd",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.81.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-07-20T16:55:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f44fcb9c94a1c0cb3dbd3650a2934bc530e20cea",
"body": "… most recently completed handshake (#991)\n\nMotivation:\n\nWe need to be able to get the group name to verify if PQC was used\n\nModifications:\n\nAdd method that returns the group name\n\nResult:\n\nBe able to obtain the used group",
"is_bot": false,
"headline": "Add SSL.getGroupName(...) which returns the name of the used by ssl's…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-07-07T22:19:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81ca0c510fc28a7ee178212ad890ce2d7fd6c163",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-29T13:25:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6bed2ea539e8048b759965d2d0fb5f9ce997e69",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.80.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-29T13:25:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "185daef4bbce6b34d9d7edef0e48ca3b78089138",
"body": "The previous fix (PR #986) built OpenSSL 3.x from source and symlinked\n/usr/local/ssl -> /opt/openssl-$VERSION, expecting tcnative's configure\nto find it via the default search path. This didn't work: the native\nbuild was still picking up the system OpenSSL 1.0.x.\n\nFix: pass -DopensslHome explicitly\n[…]\n6) │ libssl.so.3 │ /opt/openssl-3.6.1/lib │\n✅ │\n│ linux-aarch_64-fedora (centos7) │ libssl.so.3 │\n/opt/openssl-3.6.1-share/lib │ ✅ │\n│ linux-x86_64 (debian7) │ libssl.so.3 │ /opt/openssl-3.6.1/lib │ ✅",
"is_bot": false,
"headline": "Fix linux-x86_64 openssl-dynamic to link against OpenSSL 3.x (#989)",
"author_name": "colleenkinross",
"author_login": "colleenkinross",
"committed_at": "2026-06-26T21:51:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aa6efe4479d10bbf7517b2cd95ae122df97de4b6",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-12T06:47:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f79687ea38bb92f04b5283f3fc0ad073dd5a1e37",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.79.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-12T06:47:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47fda994ad6f60a305d2cdb5fc284044fbde9dac",
"body": "Motivation:\n\nPreviously the aarch64 cross-compile was pinned to OpenSSL 1.1.1k,\ncausing the linux-aarch_64-fedora JAR to require libssl.so.1.1 at\nruntime instead of libssl.so.3. This upgrades all three Linux build\nenvironments (centos6/x86_64, centos7/aarch64 cross-compile,\ndebian/x86_64) to build O\n[…]\n — | **Gains** linking |\n| RHEL 8.x | — | ❌ | **Loses** aarch64 linking (system has\n`libssl.so.1.1`, not `.so.3`) |\n| RHEL 8.x x86_64 / Ubuntu 20.04 | ❌ | — | No change (broken before,\nbroken after) |",
"is_bot": false,
"headline": "linux aarch_64 openssl-dynamic link to openssl3.x (#986)",
"author_name": "colleenkinross",
"author_login": "colleenkinross",
"committed_at": "2026-06-10T15:51:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a85010bc426202b2ca2b3366b881557e2c49119d",
"body": "Fix #979.\n\nGiven that `SSL_CREDENTIAL` has been in BoringSSL for a long time, we\ncould move on and make these functions mandatory for BoringSSL-based\nbuilds.\n\n---------\n\nSigned-off-by: xfding <xfding@google.com>\nCo-authored-by: Norman Maurer <norman_maurer@apple.com>",
"is_bot": false,
"headline": "Drop checks on SSL_CREDENTIAL support for older BoringSSL (#980)",
"author_name": "wieDasDing",
"author_login": "dingxiangfei2009",
"committed_at": "2026-06-10T13:58:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02d0d0350ae792f5c70d62e8f24e82771b32482f",
"body": "Motivation:\n\nNetty calls SSL.setKeyMaterial in its server-side certificate callback\n(https://docs.openssl.org/3.6/man3/SSL_CTX_set_cert_cb/ but the same\ngoing back to 1.0.2). OpenSSL invokes certificate callbacks after the\nserver receives a ClientHello.\n\nTLS 1.2 TLS sessions usually had one ClientHe\n[…]\nd have suffered from the same\nduplicate intermediates issue.\n\nModifications:\n\nClear chain before repopulate i.\n\nResult:\n\nFixes #985.\n\n---------\n\nCo-authored-by: Norman Maurer <norman_maurer@apple.com>",
"is_bot": false,
"headline": "Clear certificate chain in setKeyMaterial. (#987)",
"author_name": "Mark Williams",
"author_login": "mawiwill",
"committed_at": "2026-06-10T07:04:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3885412b515bff1257c673f70b44bb39ec780a38",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-04T04:47:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f135f1ed70f23c5dc9463e43dce9ae508752378",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.78.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-06-04T04:47:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c88fe9f8113bf9b8983f6ab112cfeaab4c96b87",
"body": "…mand (#984)\n\nThe two-command approach caused `clean` in the second build to wipe\ntarget/central-staging, losing the openssl-dynamic artifacts.\n\nOriginal fix attempt was\nhttps://github.com/netty/netty-tcnative/pull/981, however this did not\nwork because the output directory wasn't *delete-able* whic\n[…]\n was removed in #906, so combining\nthem is now safe. There are still differences in the flags passed, but\nthese are ignored by boringssl, so should not cause an issue\n(-DopensslArmHome, -DaprArmHome).",
"is_bot": false,
"headline": "aarch64 release: openssl-dynamic and boringssl-static into single com…",
"author_name": "colleenkinross",
"author_login": "colleenkinross",
"committed_at": "2026-06-03T21:06:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f1ceb3428872384dad6ca96cbb08a4812ddb29ab",
"body": "PR #981 did not account for central-publishing-maven-plugin deleting its\noutputDirectory before each execution. This causes two problems:\n- Visible: /root/local-staging is a Docker volume mount point and cannot\nbe deleted by the plugin, causing the release to fail immediately with\n\"Device or resourc\n[…]\nbusy\n```\n```\n docker run --rm -v ~/local-staging:/root/local-staging alpine \\\n sh -c \"mkdir -p /root/local-staging/openssl-dynamic && rm -rf /root/local-staging/openssl-dynamic && echo 'OK'\"\nOK\n```",
"is_bot": false,
"headline": "Fix release bug from pull 981 (#983)",
"author_name": "colleenkinross",
"author_login": "colleenkinross",
"committed_at": "2026-06-03T16:18:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c62b75c6a1bab20e0a6a826b60b3e368e83e6753",
"body": "The linux-aarch64 artifacts were dropped starting in 2.0.72 when PR #926\nmigrated from nexus-staging-maven-plugin to\ncentral-publishing-maven-plugin.\n\nUnlike other platforms for which we can build openssl-dynamic and\nboringssl-static in a single command, the aarch64 cross-compile requires\ntwo separa\n[…]\n-DoutputDirectory=/root/local-staging to both publish\ncalls, mirroring the original -DaltStagingDirectory behavior, then\ncopying the combined output into target/central-staging for the CI\nupload step.",
"is_bot": false,
"headline": "Restore linux-aarch64 artifacts to Maven Central publish (#981)",
"author_name": "colleenkinross",
"author_login": "colleenkinross",
"committed_at": "2026-05-21T18:51:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "25e07f6efbdad2e1051e15ee3bd13eff9c5be22a",
"body": "…978)\n\nThis reverts commit 4939940102c1727467c7248b9a6c95ed03db45d8.",
"is_bot": false,
"headline": "Revert \"Correctly build boringssl-static for linux aarch64 (#975)\" (#…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-24T14:48:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36c36feb92428e9abed233e4e7a0e5eebd94e404",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-04-23T09:49:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "318158d0ec14ad1a3e2295b775e7827100603b2f",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.77.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-04-23T09:49:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29ca2945144dfae99b5fb913c9b44a3c933d5cc6",
"body": "Motivation:\n\nWe need to override the detection of rwlocks as this not works when\ncross-compiling\n\nModifications:\n\nManual use HAVE_PTHREAD_RWLOCKS=1\n\nResult:\n\nBe able to use locks. Fixes\nhttps://github.com/netty/netty-tcnative/issues/974",
"is_bot": false,
"headline": "Ensure we can always use locks when cross-compiling (#977)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-23T09:26:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bc21d156a0aa6cc89dca93a94af4360a26945a4",
"body": "…976)\n\nMotivation:\n\nAt the moment it is really hard to understand why SSLContext.make(...)\nfails in some cases.\n\nModifications:\n\nConstruct more meaningful exceptions\n\nResult:\n\nEasier to debug",
"is_bot": false,
"headline": "Add more details to the exceptions when SSLContext.make(...) fails (#…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-23T07:11:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4939940102c1727467c7248b9a6c95ed03db45d8",
"body": "Motivation:\n\nThis reverts commit 689e4d57de6011e8711a6281b983f004097a658a as it broke\nthe cross-compilation.\n\nModifications:\n\nRevert \"Fix creation of docker image for cross compilation (#956)\"\n\nResult:\nFixes https://github.com/netty/netty-tcnative/issues/974",
"is_bot": false,
"headline": "Correctly build boringssl-static for linux aarch64 (#975)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-22T16:06:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f30be2c58d684aa6f1abf64ab590c7cae02a4ec6",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-04-19T12:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87db2eba8d604f15acab973f107e96d4fc4b1b8d",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.76.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-04-19T12:05:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beaa8587bc054cef1860f0e5a4c169a6eb990143",
"body": "Motivation:\n\nGetStringUTFChars(...) might return NULL if we run out of memory. Let's\nhandle it and not crash by return early.\n\nModifications:\n\nAdd missign NULL checks\n\nResult:\n\nMore robust code",
"is_bot": false,
"headline": "Guard against GetStringUTFChars(...) return NULL (#973)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-15T17:37:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb00c7a71c6c83e4367dcd9f0d14d2f56d4691f8",
"body": "Motivation:\n\nIf our java method throws in the keylog function we need to clear the\nexception as otherwise we might end up corrupting the JNI state\n\nModifications:\n\n- Cheack if exception was thrown and if so clear it\n\nResult:\n\nNo more risk of corrupted JNI state",
"is_bot": false,
"headline": "Clear exception if happens during keylog_cb (#971)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-14T20:30:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09d10a33ad9ca156a748c1a53d44c12713a6eb97",
"body": "… overflow (#972)\n\nMotivation:\n\nJNI has a maximum limit of how many local reference you can put on the\nstack so we should better ensure we never overflow this limit. This is\nespecially important\nwhen creating these in loops as it is impossible to know how many\niterations we have. In practice this should be no problem in our code\nbut better fix it.\n\nModifications:\n\n- Delete local references when created in loops\n\nResult:\n\nMore robust code",
"is_bot": false,
"headline": "Delete local reference when creating a lot in a loop to ensure we not…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-13T19:40:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01a0efddd3e6a5378f36b8b1e9d2f8087c12c285",
"body": "…c verifier (#970)\n\nMotivation:\n\nWe didn't correct keep state when using the async verifier\n\nModifications:\n\nKeep track of the array length and number of certs in the chain so we\ncan use them in retry path\n\nResult:\n\nThe X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY substitution will now\nfire correctly when the async verifier returns X509_V_ERR_UNSPECIFIED\ndue to a truncated chain.",
"is_bot": false,
"headline": "Correctly keep track of array len and number of certs when using asyn…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-13T18:11:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19324b1f71d00688651cc024f45cf47710e1e51b",
"body": "Motivation:\n\nWe did use the last protocol supported by the peer as fallback while we\nshould have used the last local protocol\n\nModifications:\n\n- Added last_supported_proto / last_supported_proto_len variables,\nupdated at the top of each outer iteration (right after\n++supported_protos, when it points\n[…]\nf inlen == 0) to\nlast_supported_proto != NULL, which correctly reflects\n whether we actually iterated over any of our own protocols.\n\nResult:\n\nCorrectly fallback to our last local supported protocol",
"is_bot": false,
"headline": "Fallback to correct protocol (#969)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-04-13T18:08:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c2533ef51555359519893373b08dcf04a238fd52",
"body": "Motivation:\n\nAll other similar setters (setCertificateCallback,\nsetSniHostnameMatcher, setKeyLogCallback, setCertRequestedCallback,\nsetSSLSessionCache) correctly place the DeleteGlobalRef outside the\nif/else.\nThis one is inconsistent and leaks the old verifier when the callback is\ncleared by passing NULL.\n\nModifications:\n\nAlways clear the global reference\n\nResult:\n\nCorrectly clear global reference",
"is_bot": false,
"headline": "Always clear global reference to the verifier (#967)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-26T20:17:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc03f16beb512b396e429ea0b2e3fa3e4c17a6ef",
"body": "Motivation:\n\nwe need to ensure we free the CRYPTO_BUFFER if the push fails as\notherwise we will leak memory\n\nModifications:\n\nAdd CRYPTO_BUFFER_free call\n\nResult:\n\nNo more leak when push to the stack fails",
"is_bot": false,
"headline": "Correctly free buffer if push fails (#966)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-26T20:10:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3da7aaa2dfa402476311f2e21555f26dbeaabf9f",
"body": "…SSL 3.x (#964)\n\nMotivation:\n\nOn OpenSSL 3.0+, OSSL_PARAM_construct_octet_string stores a raw pointer\nto the data, not a copy of it and so we need to ensure we make a copy.\n\nModifications:\n\n- hmac_key is now unconditional (no longer guarded by < 0x30000000L).\nThis gives the struct a stable, heap-all\n[…]\nnts to ticket_keys[i].hmac_key — memory owned by\nthe ticket_keys allocation — instead of into b.\n\nResult:\n\nNo more use of possible dangling pointer when using OpenSSL 3.x and more\nconsistent code-base",
"is_bot": false,
"headline": "Use-After-Free / Dangling Pointer when using session tickets and Open…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-24T00:08:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0de54ae3f95fd26d282d93655622c8896729b4cb",
"body": "Motivation:\n\nWe did miss to check the return value of apr_thread_rwlock_create\n\nModifications:\n\n- Add return value check and also guard against NULL\n\nResult:\n\nCorrectly handle failure of apr_thread_rwlock_create",
"is_bot": false,
"headline": "Correctly respect return value of apr_thread_rwlock_create (#965)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-24T00:03:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcdaf449fb295e133743dca58708c34ea50749f7",
"body": "…960)\n\nMotivation:\n\nWe need to check for NULL that might be returned by GetIntArrayElements\n\nModifications:\n\nAdd NULL check\n\nResult:\n\nGetIntArrayElements is now checked for NULL before passing the result to\ntcn_SSL_set1_curves",
"is_bot": false,
"headline": "setCurves(...) should check for GetIntArrayElements returning NULL (#…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-23T14:19:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bd4739ceb49fc08c3a451c24ddd8cd7887efe54",
"body": "… it (#961)\n\nMotivation:\n\nWe failed to initialize proto_len and so could end up to undefined\nbehavior.\n\nModifications:\n\n- proto_len is now initialized to 0 — eliminating the undefined\nbehaviour from reading it uninitialized.\n- The CHOOSE_MY_LAST_PROTOCOL branch is now guarded with proto != NULL —\nif\n[…]\nt no protocols (inlen == 0) the inner loop never runs and\nproto stays NULL,\nso we correctly fall through to SSL_TLSEXT_ERR_NOACK instead of doing\narithmetic on a null/garbage pointer.\n\nResult:\n\nFix UB",
"is_bot": false,
"headline": "Fix UB issue which can be caused by not init proto_len before reading…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-23T10:34:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f47c053af5d297317c636298b160d77304090c4b",
"body": "…tion (#963)\n\nMotivation:\n\nWe called SSL_CTX_set_info_callback on each creation of SSL. This is not\nreally correct as it should be done per context.\n\nModifications:\n\nMove SSL_CTX_set_info_callback call to SSLContext.make(...)\n\nResult:\n\nCorrect usage of SSL_CTX_set_info_callback",
"is_bot": false,
"headline": "SSL_CTX_set_info_callback should only be called once per context crea…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-23T10:34:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a96f00321e01d8439de8e5984f89753ac9462c6",
"body": "… versions (#962)\n\nMotivation:\n\nWe had a missing semicolon which would cause compile errors if we ever\nended up in the #ifdef block\n\nModifications:\n\nAdd semicolon\n\nResult:\n\nNo more compile error",
"is_bot": false,
"headline": "Add missing semicolon which would cause compile errors on old openssl…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-20T09:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3b80422f46a0c4dca24000b0bbaf12f47660e46",
"body": "…during decompression (#959)\n\nMotivation:\n\nGetByteArrayElements(...) might return NULL and if so we need to ensure\nwe don't leak the CRYPTO_BUFFER\n\nModifications:\n\nOnly allocate CRYPTO_BUFFER if GetByteArrayElements(...) does not return\nNULL\n\nResult:\n\nNo more leak of CRYPTO_BUFFER in case of failure",
"is_bot": false,
"headline": "Don't leak CRYPTO_BUFFER when GetByteArrayElements(...) returns NULL …",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-20T07:14:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95231a76f74981d0a868951e53b187d69fd6d9e0",
"body": "Motivation:\n\nWe missed to check for failed malloc and so could end up with a crash in\nthe rare cause of running out of memory.\n\nModifications:\n\nAdd NULL checks and throw OOME\n\nResult:\n\nBoth setNpnProtos0 and setAlpnProtos0 now check the OPENSSL_malloc\nreturn value before writing the length or callin\n[…]\no_len is also moved to after\nthe NULL check — previously it was written even when the allocation\nhad failed, which would leave the struct in an inconsistent state\n(non-zero length, NULL data pointer).",
"is_bot": false,
"headline": "Guard against malloc failures when configure ALPN and NPN (#958)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-20T07:14:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "67116594658c806b08e5e900917719525d5bcfcc",
"body": "…ils (#957)\n\nMotivation:\n\nWe leaked native memory when GetByteArrayElements failed.\n\nModifications:\n\nEnsure we release the native memory before early return\n\nResult:\n\nNo more memory leak",
"is_bot": false,
"headline": "Fix memory leak in setSessionTicketKeys0 when GetByteArrayElements fa…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-19T09:38:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "668baf974243aec43130d2ccce454c0f3ea096ef",
"body": "Motivation:\n\nlength is a jint, but the format specifier is %s. apr_vsnprintf will try\nto dereference the integer value as a char pointer and will either crash\nwith a segfault or produce garbage output.\n\nModifications:\n\nFix format specifier\n\nResult:\n\nNo more UB",
"is_bot": false,
"headline": "Wrong format specifier cause UB (#955)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-18T19:02:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "689e4d57de6011e8711a6281b983f004097a658a",
"body": "Motivation:\n\nDownloading of custom git fails these days but we actually don't need\nit.\n\nModifications:\n\n- Update centos version\n- Remove custom git\n- Remove enforcer config\n\nResult:\n\nBuilding of docker image works again",
"is_bot": false,
"headline": "Fix creation of docker image for cross compilation (#956)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2026-03-18T18:03:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "917bcaf9f2d8bdfb15383eed124417af79ca8be2",
"body": "**Motivation:**\n\nUpgrade dynamic linking to OpenSSL >= 3.5. Version 1.1 is not shipped in\nmany modern OSs and post-quantum key exchange algorithms are brought by\nopenSSL >= 3.5. We picked 3.6 arbitrarily and would be content with any\nversion >= 3.5.\n\n**Modifications:**\n\n Update openssl-dynamic to\n[…]\npenssl 3.6 for openssl-dynamic.\n\n---------\n\nSigned-off-by: Hiram Chirino <hiram@hiramchirino.com>\nCo-authored-by: Hiram Chirino <hiram@hiramchirino.com>\nCo-authored-by: Mingyuan Wu <my.wu@outlook.com>",
"is_bot": false,
"headline": "Build against openssl 3.6 for dynamic linking (#952)",
"author_name": "anavarr",
"author_login": "anavarr",
"committed_at": "2026-03-13T20:47:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5f9becb3e3d1d3a7f19d2f647b431abf64952d40",
"body": "…l ssl handshake (#954)\n\nRight now Netty uses `SSL.getVersion()`, which allocates a string when\nthe handshake is finished, we can easily avoid this allocation by\nintroducing a new method `SSL.getVersionInt()`, which would return the\nprotocol version as an int instead of a string.\n\n\nRelated to https://github.com/netty/netty/pull/16278",
"is_bot": false,
"headline": "Add new method SSL.getVersionInt to avoid string allocation on initia…",
"author_name": "Dmytro Dumanskiy",
"author_login": "doom369",
"committed_at": "2026-02-26T07:49:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9117d8b30e402025c452cea8f5afb5769438177",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-02-04T07:42:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1abcd04f139b7fba76871a34407a8afa47a2a55",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.75.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2026-02-04T07:42:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff2dc66e02e6e3fdf0188ed6c22af070f4e9cd83",
"body": "Motivation:\nThe google storage api URLs are no longer accessible.\n\nModification:\nSwitch to URLs used by the go.dev website.\n\nResult:\nBuilds should no longer fail to download go.",
"is_bot": false,
"headline": "Fix golang download URL (#951)",
"author_name": "Mingyuan Wu",
"author_login": "m1ngyuan",
"committed_at": "2026-01-08T08:35:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b83c818df2a064c9f94e040dda05dadc14d6528e",
"body": null,
"is_bot": false,
"headline": "Add jni load, unpack certChainStack in C for consistency (#949)",
"author_name": "Jared Crawford",
"author_login": "jmcrawford45",
"committed_at": "2025-12-08T08:52:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b94455e630880e09f357033315cb94aae916e687",
"body": "1. Make the `fips-boringssl-static` profile point to BoringSSL commit\n`6d503ae1cf8b2e25162435225610b8c1f063d6f4`, which is the latest revision\nthat is available for download as a tarball from\nhttps://commondatastorage.googleapis.com/chromium-boringssl-fips\n\n2. Update toolchain to clang-12 (required \n[…]\nbssl executable path (the `bssl` utility is now generated\ndirectly in the build directory rather than in a `tool/` subdirectory)\n\n5. Link with libdecrepit\n\n6. Explicitly link with C++ standard library",
"is_bot": false,
"headline": "Upgrade to BoringSSL 6d503ae1 (#950)",
"author_name": "Julian Howes",
"author_login": "jlnhws",
"committed_at": "2025-12-08T08:50:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d1173ed6fb6ede622fd29376b94ec2d68e260754",
"body": "Fix for\nhttps://github.com/netty/netty-tcnative/issues/918#issuecomment-3324760916",
"is_bot": false,
"headline": "Exclude SSL Credential api for older FIPS builds (#948)",
"author_name": "Jared Crawford",
"author_login": "jmcrawford45",
"committed_at": "2025-11-20T21:50:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4063eb20b6432f4be2e2c3af4a9254b5d4d364d",
"body": "Motivation:\n\nThe git 2.x download URL for the maven scm plugin are no longer\naccessible.\n\nModification:\n\nSwitch to URL used by the opensource.blueoptima.com website.\n\nResult:\n\nBuilds should no longer fail to download git 2.x for the maven scm\nplugin.",
"is_bot": false,
"headline": "Fix git 2.x download URL for the maven scm plugin (#947)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-11-17T19:58:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a164372d37f52a213a9aa5f365bdc1b8696843b",
"body": "Motivation:\nGitHub has deprecated the macOS 13 runners and will be removing them.\nDetails in https://github.com/actions/runner-images/issues/13046\n\nModification:\nReplace the runner OS for all Intel Mac builds with macos-15-intel.\n\nResult:\nMacOS builds now run on the latest and last version of MacOS that will\nhave Intel support.",
"is_bot": false,
"headline": "Upgrade all macOS Intel workflow runners to macOS 15 (#15840) (#946)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-11-13T10:25:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d91fac16d15924e9048c29e64478d94970712bd",
"body": "…ingssl-static (#945)\n\nChange the artifactId when building FIPS-compliant\nnetty-tcnative-boringssl-static\n\nMotivation:\n\nnetty-tcnative-boringssl when compiled for default mode or FIPS mode\nresult in the same artifactId, same classifier, same version number and\nyet have a very significant different f\n[…]\nen built with the fips-boringssl-static profile the jar file names\nwill now be\nnetty-tcnative-boringssl-static-fips-2.0.75.Final-SNAPSHOT*.jar\n\nCo-authored-by: Steve Lessard <steve.lessard@oracle.com>",
"is_bot": false,
"headline": "Change the artifactId when building FIPS-compliant netty-tcnative-bor…",
"author_name": "slessard",
"author_login": "slessard",
"committed_at": "2025-11-07T13:44:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f8dc19492d1aab6907716255ed58d9f181b4af2",
"body": "Motivation:\n\nOur JDK version was out of date\n\nModifications:\n\nUpdate to latest release\n\nResult:\n\nUse latest JDK versions on CI",
"is_bot": false,
"headline": "Update to latest JDK releases (#944)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-10-28T14:04:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35afdf98bd9df1079127d7ee8497d582eb39dd76",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-09-22T08:25:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e9ba9f6ff099ccbf36d810629c619536a37b86b",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.74.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-09-22T08:25:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e21f515b014ee63d046ed4600583b5b1d548aaa2",
"body": "Motivation:\n\nA new jni-util version was released which replaced some code which had\nno clear licensing.\n\nModifications:\n\nUpgrade to latest version\n\nResult:\n\nClear licensing of jni-util depndency",
"is_bot": false,
"headline": "Update jni-util version to clarify licensing (#942)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-09-18T21:03:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b1db993897a846df12140998c770a330e076f77",
"body": "Motivation:\n\ntcnative does not contain any code from netbsd anymore these days. Let's\nremove the old license details that refer to it.\n\nModifications:\n\nRemove entry from NOTICE.txt and remove license file\n\nResult:\n\nCleanup licensing",
"is_bot": false,
"headline": "Remove invalid / old license informations (#941)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-09-18T16:34:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37e7bc9b643a86cac07a5a1e18024d01f00ce76a",
"body": "Motivation:\n\nThe used version of BoringSSL is ASL2\n\nModifications:\n\nUpdate and so fix license informations for BoringSSL\n\nResult:\n\nInclude correct license for BoringSSL",
"is_bot": false,
"headline": "Include correct license informations for BoringSSL (#940)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-09-15T09:18:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2d68f82d6623047a25ff2ac3b371989ced69ecf",
"body": "Motivation:\n\nMotivation:\n\nIt's been a while since we updated our used BoringSSL version.\n\nModifications:\n\nUpdate to sha of current BoringSSL commit\n\nResult:\n\nUse latest BoringSSL version as of today",
"is_bot": false,
"headline": "Update to latest BoringSSL commit sha (#939)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-09-09T09:23:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5a26b961de7e8e415a6e0eb4ea24c3816b1237a",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-08-28T06:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f0de8e7b956e912b92ddb19abdecafe8a21b622",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.73.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-08-28T06:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a47a585adec8781a44f6957c2b7990c4a5013ed",
"body": "Motivation:\n\nHistorically, BoringSSL lacked a built-in method to select between RSA\nand ECDSA certificates. The selection process, especially at TLS 1.2, is\nquite complex, as detailed in [this\nlink](https://boringssl.googlesource.com/boringssl/+/5a3faaa2d50b2540c6973531841723f633f388cd/ssl/test/runn\n[…]\nt,\nconfigure them in preference order with BoringSSL, and BoringSSL will\nevaluate them according to protocol rules.\n\nImplements #918\n\n---------\n\nCo-authored-by: Norman Maurer <norman_maurer@apple.com>",
"is_bot": false,
"headline": "Support boringssl SSLCredential API (#935)",
"author_name": "Jared Crawford",
"author_login": "jmcrawford45",
"committed_at": "2025-08-15T10:03:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d463fd8deb653f9a827ef7c444350df37fd4f15e",
"body": "Motivation:\n\nBoringSSL returns GENERIC when using TLS1.3 but the JDK TrustManager\nimplementation expect UNKNOWN. We need to map it the expected value as\notherwise we will see failures.\n\nModifications:\n\nAdjust #if to also include BoringSSL\n\nResult:\n\nNo more testfailures when running netty CI with\nnetty-tcnative-boringssl-static SNAPSHOT",
"is_bot": false,
"headline": "Correctly map GENERIC to UNKNOWN when using BoringSSL (#937)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-08-14T12:06:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e46d9492f8af5513d557d634da2a99a9fda31b28",
"body": null,
"is_bot": false,
"headline": "Add missing <openssl/sha.h> include (#936)",
"author_name": "David Benjamin",
"author_login": "davidben",
"committed_at": "2025-07-16T18:33:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53102a197cb92c554fda59f7893fddbd65b6c1f7",
"body": "Hello,\n\nI'm an engineer at AWS working on AWS-LC, AWS's open-source fork of\nGoogle's BoringSSL. We would like to propose adding AWS-LC support to\nnetty-tcnative, alongside its existing support for OpenSSL, BoringSSL,\nand LibreSSL.\n\nAWS-LC shares a similar API surface area to the existing BoringSSL\ni\n[…]\nssary adjustments there for the netty-tcnative with aws-lc\nintegration to work as expected and have additional testing as\nnecessary.\n\n---------\n\nCo-authored-by: Norman Maurer <norman_maurer@apple.com>",
"is_bot": false,
"headline": "Support for building with AWS Libcrypto (AWS-LC) (#929)",
"author_name": "Sean McGrail",
"author_login": "skmcgrail",
"committed_at": "2025-06-20T22:32:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b4543ac6bf4a498eeea2998baa494824e4353459",
"body": "Motivation:\n\nThis function returns the first cipher from the preference order, but is\nnot necessarily the actual cipher that was negotiated.\n\nModifications:\n\n- Use SSL_get_current_cipher or the struct directly to obtain the used\ncipher\n\nResult:\n\nauthentication_method(...) returns the correct method.",
"is_bot": false,
"headline": "Obtain correct cipher in authentication_method(...) (#932)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-06-16T14:19:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d4e7e2a90b839012122846f9651bac8eecb51cc",
"body": "Motivation:\n\nTo be able to build libressl-static with newer cmake versions we need to\npass in some more flags\n\nModifications:\n\nAdd -DCMAKE_POLICY_VERSION_MINIMUM=3.5\n\nResult:\n\nCompilation of libressl-static works again even on cmake 4.x",
"is_bot": false,
"headline": "Fix build of libressl-static on newer CMAKE versions (#933)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-06-16T06:36:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f7d91c38e13bc1f8c1785e75dadfe291c146a2b",
"body": "Motivation:\n\nWe need to ensure we also build modules that openssl-dynamic depend on\nas otherwise the analyze might fail as it can not find the snapshot\n\nModifications:\n\nAdd -am to the build command\n\nResult:\n\nAnalyze job doesnt fail anymore",
"is_bot": false,
"headline": "Fix codeql analyze job (#931)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-06-13T09:12:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7beccb06b580fa878117e30d33204a4cfc58ed20",
"body": "Motivation:\nWe are currently using the Windows 2019 images, which will reach\nend-of-life on June 30, 2025.\n\nModification:\nChange the windows images in our GHA workflows from `windows-2019` to\n`windows-2022`.\n\nResult:\nMore up to date windows build agents.",
"is_bot": false,
"headline": "Upgrade Windows GHA images to Windows Server 2022 (#930)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-06-13T07:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06279ba6f3548a9ec3350e66e22bceff6bf5131f",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-05-22T07:33:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b18e6081361193d2427ae544b8f503585b4de302",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.72.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-05-22T07:33:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79e453eea5392a61154d58bd7c84338bf89de6d7",
"body": "…927)\n\nMotivation:\n\nWe should cancel any running / queued job when a new change was pushed\nto the affected branch. This will ensure we not tie up resources.\n\nModifications:\n\nAdd new concurrency config to workflows\n\nResult:\n\nCancel jobs that are not useful anymore",
"is_bot": false,
"headline": "Cancel running / queue jobs when a new change was pushed to branch (#…",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-05-21T06:23:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c63e5233615fc46555125e9d2fa5d119bf520e0",
"body": "Motivation:\n\nOSSRH is deprecated and will be shut down soon. Let's switch to using\nmaven central\n\nModifications:\n\n- Replace old plugin with central-publishing-maven-plugin for release\n- Adjust workflow to setup the right token / password\n- Add scripts\n\nResult:\n\nSnapshot deployments and release works again",
"is_bot": false,
"headline": "Migrate using maven central (#926)",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-05-20T13:58:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81b55a85d7384a20751322f8b39273c9c47b93e9",
"body": "Motivation: \n\nImproper algorithm names returned by BoringSSL with TLS 1.3 \n\nModifications:\nAlways pass `false` as the second parameter to\n`SSL_get_signature_algorithm_name()`. This forces BoringSSL to omit the\ncurve name and return algorithm names in the style expected by callers\nof `SSL.getSigAlgs()`. Previously this parameter was only false for TLS\n1.2.\n\nResult: \nFixes #923",
"is_bot": false,
"headline": "Fix SSL.getSigAlgs() on BoringSSL for TLS 1.3 (#924)",
"author_name": "Greg Rubin",
"author_login": "sfc-gh-grubin",
"committed_at": "2025-05-15T18:57:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e135a790f4876f04fe0f656d5b4b0f2ffc8df4f3",
"body": "Motivation:\n\nWe recreate the gitconfig from scratch on each step so we should not include it\n\nModifications:\n\nAdd exclude\n\nResult:\n\nCleanup",
"is_bot": false,
"headline": "Don't include git config when upload directory to prepare release",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-05-07T09:39:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b552068c6cb3c18ac09b95a201c43acd9ac94a79",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-30T09:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "992ce2c9492dabaccc099654044c5ff93efd6d10",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-30T09:48:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63fec8bff3bff51a01032d03fe80c7e3952f7966",
"body": "Motivation:\n\nWe need to import the GPG key as otherwise we can't sign as part of the release process\n\nModifications:\n\nAdd missing usage of action to import gpg key\n\nResult:\n\nSigning will work as part of the release",
"is_bot": false,
"headline": "Import GPG key during release workflow",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-30T09:43:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "562f581cb42799a8793636520b75eeacabc6ea1f",
"body": "…2.0.71.Final",
"is_bot": false,
"headline": "[maven-release-plugin] rollback the release of netty-tcnative-parent-…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-30T09:39:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "576ae84fe8a15ae9e11c13f65e1956916982dd71",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-30T09:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1cf956f84f586f82da0944044baaa5e7b0e1738",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-30T09:10:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19a734ab5ec058b7309299bec92c1c9ade72ecc4",
"body": "Motivation:\n\nWe need to also sign when we generate the uber jar as otherwise we will not have a matching signature\n\nModifications:\n\nAdd missing \"sign\"\n\nResult:\n\nCorrect signature generated during release process for the uber jar",
"is_bot": false,
"headline": "Add missing sign goal when generating uber jar",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-30T09:07:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f10a791a1d2cb471e2259303b12175b5d02f85be",
"body": "Motivation:\n\nWe also need to generate and publish a sources jar to be able to release via sonatype\n\nModifications:\n\nAdd plugin config to also generate the sources jar\n\nResult:\n\nValidation in sonatype does not fail anymore",
"is_bot": false,
"headline": "Also generate sources jar for openssl-classes",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-30T09:05:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5e7051c3ffaccbe261bf94ea587349991dd232d",
"body": "Motivation:\n\nWe missed to pass the nexusUrl and serverId while trying to stage the uber jar.\n\nModifications:\n\nAdd nexusUrl and serverId params\n\nResult:\n\nStaging of uber jar works",
"is_bot": false,
"headline": "Add missing nexusUrl and serverId",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-29T18:51:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbdfbcd958e6151797a70f10e0a07e43985847fc",
"body": "…2.0.71.Final",
"is_bot": false,
"headline": "[maven-release-plugin] rollback the release of netty-tcnative-parent-…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T18:47:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e5ddc07c8f23bea91949fff20170001ff566546",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T18:11:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0678a36533be0779166561852524bd0e93920f43",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T18:11:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eec839d73d78e49db2ab3755196616d7e4371a5c",
"body": "Motivation:\n\nWe need to specify the working directory otherwise we can't find mvnw\n\nModifications:\n\nAdd working-directory: ./prepare-release-workspace/\n\nResult:\n\nRelease workflow should be fixed",
"is_bot": false,
"headline": "Add missing working-directory",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-29T17:54:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd53b7447a9c1818c519223da010045c3429b9c6",
"body": "…2.0.71.Final",
"is_bot": false,
"headline": "[maven-release-plugin] rollback the release of netty-tcnative-parent-…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T14:59:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b8f6f76ad2aed1d242cdf86e364dc5fbf917444",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T14:12:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2666ef5fccadf3176517e0062b27188f53e6808",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T14:12:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e25fbff11f7ceb0c6629c374913baeea5e2a4ebd",
"body": null,
"is_bot": false,
"headline": "Invoke install_local_staging.sh script with correct arguments",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-29T13:53:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c549c4075f8e3e80b5db15cc2c5e7c5c5c048a8",
"body": "…2.0.71.Final",
"is_bot": false,
"headline": "[maven-release-plugin] rollback the release of netty-tcnative-parent-…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T13:44:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5add595d3dd7a907cf34a9e84493919ea0014922",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T13:22:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54b60abf9f220ca20c6cc891c4f25bf1f6b86328",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T13:22:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d57474c46b804a4412ce7a1c7127f96ee2bcdc5f",
"body": "Motivation:\n\nWe need to specify the working directory otherwise we can't find the script\n\nModifications:\n\nAdd working-directory: ./prepare-release-workspace/\n\nResult:\n\nRelease workflow should be fixed",
"is_bot": false,
"headline": "Add missing working-directory",
"author_name": "Norman Maurer",
"author_login": "normanmaurer",
"committed_at": "2025-04-29T13:20:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d06f89813422c6c87252c477088b6011d46f19a4",
"body": "…2.0.71.Final",
"is_bot": false,
"headline": "[maven-release-plugin] rollback the release of netty-tcnative-parent-…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T13:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4383cf34298ac85a54333d399a52044f8582753",
"body": null,
"is_bot": false,
"headline": "[maven-release-plugin] prepare for next development iteration",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T12:59:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2996c98b0840dd0b861738d440a02154ebb46ead",
"body": "…inal",
"is_bot": false,
"headline": "[maven-release-plugin] prepare release netty-tcnative-parent-2.0.71.F…",
"author_name": "Netty Project Bot",
"author_login": "netty-project-bot",
"committed_at": "2025-04-29T12:59:47Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 64,
"latest_release_at": "2021-02-01T08:46:08Z",
"latest_release_tag": "gcc-precompile",
"releases_from_tags": false,
"days_since_last_push": 10,
"active_weeks_last_year": 26,
"days_since_latest_release": 2005,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "io.netty:netty-tcnative-classes",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "maven",
"matches_repo": null,
"registry_url": "https://central.sonatype.com/artifact/io.netty/netty-tcnative-classes",
"is_deprecated": false,
"latest_version": "2.0.81.Final",
"repository_url": null,
"versions_count": 36,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T17:31:27Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
},
{
"name": "io.netty:netty-tcnative",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "maven",
"matches_repo": null,
"registry_url": "https://central.sonatype.com/artifact/io.netty/netty-tcnative",
"is_deprecated": false,
"latest_version": "2.0.81.Final",
"repository_url": null,
"versions_count": 119,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T17:31:25Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 196,
"stars": 266,
"watchers": 39,
"fork_history": {
"days": [
{
"date": "2014-08-04",
"count": 1
},
{
"date": "2014-08-31",
"count": 1
},
{
"date": "2014-09-12",
"count": 1
},
{
"date": "2014-10-08",
"count": 1
},
{
"date": "2014-10-22",
"count": 1
},
{
"date": "2014-11-13",
"count": 1
},
{
"date": "2015-02-25",
"count": 1
},
{
"date": "2015-03-13",
"count": 1
},
{
"date": "2015-03-17",
"count": 1
},
{
"date": "2015-05-16",
"count": 1
},
{
"date": "2015-05-30",
"count": 1
},
{
"date": "2015-06-02",
"count": 1
},
{
"date": "2015-06-15",
"count": 1
},
{
"date": "2015-09-08",
"count": 1
},
{
"date": "2015-09-09",
"count": 1
},
{
"date": "2015-11-26",
"count": 1
},
{
"date": "2015-12-22",
"count": 1
},
{
"date": "2016-01-13",
"count": 1
},
{
"date": "2016-01-21",
"count": 1
},
{
"date": "2016-01-27",
"count": 1
},
{
"date": "2016-03-12",
"count": 1
},
{
"date": "2016-03-13",
"count": 1
},
{
"date": "2016-03-25",
"count": 1
},
{
"date": "2016-03-27",
"count": 1
},
{
"date": "2016-04-29",
"count": 1
},
{
"date": "2016-07-07",
"count": 1
},
{
"date": "2016-07-14",
"count": 1
},
{
"date": "2016-08-06",
"count": 1
},
{
"date": "2016-08-16",
"count": 1
},
{
"date": "2016-08-23",
"count": 1
},
{
"date": "2016-09-19",
"count": 1
},
{
"date": "2016-11-01",
"count": 2
},
{
"date": "2016-11-14",
"count": 1
},
{
"date": "2016-11-25",
"count": 1
},
{
"date": "2016-12-01",
"count": 1
},
{
"date": "2016-12-06",
"count": 1
},
{
"date": "2017-01-12",
"count": 1
},
{
"date": "2017-01-19",
"count": 1
},
{
"date": "2017-01-24",
"count": 1
},
{
"date": "2017-02-27",
"count": 1
},
{
"date": "2017-03-08",
"count": 1
},
{
"date": "2017-03-17",
"count": 1
},
{
"date": "2017-03-23",
"count": 1
},
{
"date": "2017-03-28",
"count": 1
},
{
"date": "2017-04-12",
"count": 1
},
{
"date": "2017-04-18",
"count": 1
},
{
"date": "2017-06-02",
"count": 1
},
{
"date": "2017-06-06",
"count": 1
},
{
"date": "2017-06-30",
"count": 1
},
{
"date": "2017-10-05",
"count": 1
},
{
"date": "2017-10-17",
"count": 1
},
{
"date": "2017-11-25",
"count": 1
},
{
"date": "2017-12-24",
"count": 1
},
{
"date": "2018-02-08",
"count": 1
},
{
"date": "2018-04-03",
"count": 1
},
{
"date": "2018-04-12",
"count": 1
},
{
"date": "2018-06-11",
"count": 1
},
{
"date": "2018-07-17",
"count": 1
},
{
"date": "2018-08-06",
"count": 1
},
{
"date": "2018-08-08",
"count": 1
},
{
"date": "2018-08-10",
"count": 1
},
{
"date": "2018-09-26",
"count": 1
},
{
"date": "2018-10-30",
"count": 1
},
{
"date": "2018-11-24",
"count": 1
},
{
"date": "2018-12-07",
"count": 1
},
{
"date": "2018-12-20",
"count": 2
},
{
"date": "2019-01-17",
"count": 1
},
{
"date": "2019-02-20",
"count": 2
},
{
"date": "2019-02-27",
"count": 1
},
{
"date": "2019-03-08",
"count": 1
},
{
"date": "2019-04-01",
"count": 1
},
{
"date": "2019-05-12",
"count": 1
},
{
"date": "2019-05-30",
"count": 1
},
{
"date": "2019-06-28",
"count": 1
},
{
"date": "2019-06-30",
"count": 1
},
{
"date": "2019-07-03",
"count": 1
},
{
"date": "2019-07-08",
"count": 1
},
{
"date": "2019-07-31",
"count": 1
},
{
"date": "2019-08-20",
"count": 1
},
{
"date": "2019-08-27",
"count": 1
},
{
"date": "2019-08-30",
"count": 1
},
{
"date": "2019-09-06",
"count": 1
},
{
"date": "2019-09-20",
"count": 1
},
{
"date": "2019-10-22",
"count": 1
},
{
"date": "2019-11-04",
"count": 1
},
{
"date": "2019-11-28",
"count": 1
},
{
"date": "2019-11-29",
"count": 1
},
{
"date": "2020-01-27",
"count": 1
},
{
"date": "2020-01-31",
"count": 1
},
{
"date": "2020-02-14",
"count": 1
},
{
"date": "2020-03-03",
"count": 2
},
{
"date": "2020-03-07",
"count": 1
},
{
"date": "2020-04-30",
"count": 1
},
{
"date": "2020-05-29",
"count": 1
},
{
"date": "2020-06-02",
"count": 1
},
{
"date": "2020-06-04",
"count": 1
},
{
"date": "2020-06-11",
"count": 1
},
{
"date": "2020-06-20",
"count": 1
},
{
"date": "2020-06-30",
"count": 1
},
{
"date": "2020-08-08",
"count": 1
},
{
"date": "2020-08-13",
"count": 1
},
{
"date": "2020-09-17",
"count": 1
},
{
"date": "2020-09-30",
"count": 1
},
{
"date": "2020-10-30",
"count": 1
},
{
"date": "2020-11-03",
"count": 1
},
{
"date": "2020-11-10",
"count": 1
},
{
"date": "2021-01-23",
"count": 1
},
{
"date": "2021-01-27",
"count": 1
},
{
"date": "2021-02-22",
"count": 1
},
{
"date": "2021-02-26",
"count": 1
},
{
"date": "2021-02-27",
"count": 1
},
{
"date": "2021-03-02",
"count": 1
},
{
"date": "2021-03-26",
"count": 1
},
{
"date": "2021-04-05",
"count": 1
},
{
"date": "2021-04-26",
"count": 1
},
{
"date": "2021-05-04",
"count": 1
},
{
"date": "2021-05-26",
"count": 1
},
{
"date": "2021-06-17",
"count": 1
},
{
"date": "2021-06-25",
"count": 1
},
{
"date": "2021-07-02",
"count": 1
},
{
"date": "2021-07-31",
"count": 1
},
{
"date": "2021-08-30",
"count": 1
},
{
"date": "2021-09-16",
"count": 1
},
{
"date": "2021-09-30",
"count": 1
},
{
"date": "2021-11-08",
"count": 1
},
{
"date": "2021-11-17",
"count": 1
},
{
"date": "2021-12-12",
"count": 2
},
{
"date": "2022-01-04",
"count": 1
},
{
"date": "2022-01-26",
"count": 1
},
{
"date": "2022-02-07",
"count": 1
},
{
"date": "2022-03-29",
"count": 1
},
{
"date": "2022-04-04",
"count": 1
},
{
"date": "2022-04-19",
"count": 2
},
{
"date": "2022-05-26",
"count": 1
},
{
"date": "2022-06-14",
"count": 1
},
{
"date": "2022-09-23",
"count": 1
},
{
"date": "2022-10-09",
"count": 1
},
{
"date": "2022-10-31",
"count": 1
},
{
"date": "2022-11-07",
"count": 1
},
{
"date": "2022-11-10",
"count": 1
},
{
"date": "2022-11-18",
"count": 1
},
{
"date": "2022-11-23",
"count": 1
},
{
"date": "2022-12-22",
"count": 1
},
{
"date": "2023-01-04",
"count": 1
},
{
"date": "2023-01-17",
"count": 2
},
{
"date": "2023-02-04",
"count": 1
},
{
"date": "2023-03-20",
"count": 1
},
{
"date": "2023-04-22",
"count": 1
},
{
"date": "2023-06-19",
"count": 1
},
{
"date": "2023-07-19",
"count": 2
},
{
"date": "2023-08-21",
"count": 1
},
{
"date": "2023-09-06",
"count": 1
},
{
"date": "2023-09-11",
"count": 1
},
{
"date": "2023-10-12",
"count": 1
},
{
"date": "2023-11-15",
"count": 1
},
{
"date": "2024-03-15",
"count": 1
},
{
"date": "2024-03-31",
"count": 1
},
{
"date": "2024-04-10",
"count": 1
},
{
"date": "2024-06-07",
"count": 1
},
{
"date": "2024-07-25",
"count": 1
},
{
"date": "2024-08-07",
"count": 1
},
{
"date": "2024-08-13",
"count": 1
},
{
"date": "2024-11-18",
"count": 1
},
{
"date": "2025-01-09",
"count": 1
},
{
"date": "2025-01-30",
"count": 1
},
{
"date": "2025-03-18",
"count": 1
},
{
"date": "2025-05-23",
"count": 1
},
{
"date": "2025-06-03",
"count": 1
},
{
"date": "2025-06-10",
"count": 1
},
{
"date": "2025-06-25",
"count": 2
},
{
"date": "2025-10-14",
"count": 1
},
{
"date": "2025-10-31",
"count": 1
},
{
"date": "2025-11-04",
"count": 1
},
{
"date": "2025-11-24",
"count": 1
},
{
"date": "2026-01-27",
"count": 1
},
{
"date": "2026-02-14",
"count": 1
},
{
"date": "2026-04-28",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-14",
"count": 1
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-11",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
},
{
"date": "2026-07-29",
"count": 1
}
],
"complete": true,
"collected": 193,
"total_forks": 196
},
"star_history": null,
"open_issues_and_prs": 42
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"boringssl-static/pom.xml",
"libressl-static/pom.xml",
"openssl-classes/pom.xml",
"openssl-dynamic/pom.xml",
"openssl-static/pom.xml",
"pom.xml"
],
"largest_source_bytes": 117626,
"source_files_sampled": 49,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"boringssl-static/pom.xml",
"libressl-static/pom.xml",
"openssl-classes/pom.xml",
"openssl-dynamic/pom.xml",
"openssl-static/pom.xml",
"pom.xml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 1,
"malicious_count": 0,
"assessed_package": "maven:io.netty:netty-tcnative@2.0.81.Final",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven"
],
"dependencies": [
{
"name": "${project.groupId}:netty-tcnative-classes",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"manifest": "boringssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "${project.groupId}:netty-tcnative-classes",
"manifest": "libressl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "${project.groupId}:netty-tcnative-classes",
"manifest": "openssl-dynamic/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "${project.groupId}:netty-tcnative-classes",
"manifest": "openssl-static/pom.xml",
"ecosystem": "maven",
"version_constraint": "${project.version}"
},
{
"name": "org.apache.ant:ant",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "1.10.11"
},
{
"name": "org.apache.ant:ant-commons-net",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "1.9.6"
},
{
"name": "ant-contrib:ant-contrib",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "1.0b3"
},
{
"name": "io.netty:netty-jni-util",
"manifest": "pom.xml",
"ecosystem": "maven",
"version_constraint": "${jniUtilVersion}"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "ant-contrib:ant-contrib",
"direct": true,
"version": "1.0b3",
"ecosystem": "maven"
},
{
"name": "io.netty:netty-jni-util",
"direct": true,
"version": "0.0.10",
"ecosystem": "maven"
},
{
"name": "io.netty:netty-tcnative-boringssl-static",
"direct": true,
"version": "2.0.82.Final-SNAPSHOT",
"ecosystem": "maven"
},
{
"name": "org.apache.ant:ant",
"direct": true,
"version": "1.10.11",
"ecosystem": "maven"
},
{
"name": "org.apache.ant:ant-commons-net",
"direct": true,
"version": "1.9.6",
"ecosystem": "maven"
},
{
"name": "com.github.siom79.japicmp:japicmp-maven-plugin",
"direct": false,
"version": "0.15.4",
"ecosystem": "maven"
},
{
"name": "com.googlecode.maven-download-plugin:download-maven-plugin",
"direct": false,
"version": "1.6.8",
"ecosystem": "maven"
},
{
"name": "io.github.dmlloyd.module-info:module-info",
"direct": false,
"version": "2.1",
"ecosystem": "maven"
},
{
"name": "io.netty:netty-build-common",
"direct": false,
"version": "31",
"ecosystem": "maven"
},
{
"name": "org.apache.ant:maven-antrun-plugin",
"direct": false,
"version": "1.8",
"ecosystem": "maven"
},
{
"name": "org.apache.felix:maven-bundle-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.felix:maven-bundle-plugin",
"direct": false,
"version": "5.1.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-dependency-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-jar-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-javadoc-plugin",
"direct": false,
"version": "3.3.1",
"ecosystem": "maven"
},
{
"name": "org.apache.maven.plugins:maven-source-plugin",
"direct": false,
"version": "3.3.1",
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:build-helper-maven-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:build-helper-maven-plugin",
"direct": false,
"version": "3.2.0",
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:buildnumber-maven-plugin",
"direct": false,
"version": "1.4",
"ecosystem": "maven"
},
{
"name": "org.codehaus.mojo:flatten-maven-plugin",
"direct": false,
"version": "1.2.2",
"ecosystem": "maven"
},
{
"name": "org.fusesource.hawtjni:hawtjni-maven-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.fusesource.hawtjni:hawtjni-maven-plugin",
"direct": false,
"version": "1.18",
"ecosystem": "maven"
},
{
"name": "org.fusesource.hawtjni:maven-hawtjni-plugin",
"direct": false,
"version": null,
"ecosystem": "maven"
},
{
"name": "org.junit.jupiter:junit-jupiter-api",
"direct": false,
"version": "5.9.0",
"ecosystem": "maven"
},
{
"name": "org.junit.jupiter:junit-jupiter-engine",
"direct": false,
"version": "5.9.0",
"ecosystem": "maven"
},
{
"name": "org.sonatype.central:central-publishing-maven-plugin",
"direct": false,
"version": "0.7.0",
"ecosystem": "maven"
},
{
"name": "org.sonatype.plugins:nexus-staging-maven-plugin",
"direct": false,
"version": "1.7.0",
"ecosystem": "maven"
}
],
"collected": true,
"truncated": false,
"total_count": 27,
"direct_count": 5,
"indirect_count": 22
}
},
"maintainership": {
"issues": {
"open_prs": 7,
"merged_prs": 420,
"open_issues": 35,
"closed_ratio": 0.895,
"closed_issues": 297,
"closed_unmerged_prs": 231
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "normanmaurer",
"commits": 639,
"avatar_url": "https://avatars.githubusercontent.com/u/439362?v=4"
},
{
"type": "User",
"login": "netty-project-bot",
"commits": 111,
"avatar_url": "https://avatars.githubusercontent.com/u/78738768?v=4"
},
{
"type": "User",
"login": "Scottmitch",
"commits": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/7562868?v=4"
},
{
"type": "User",
"login": "davidben",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/109690?v=4"
},
{
"type": "User",
"login": "carl-mastrangelo",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/8943572?v=4"
},
{
"type": "User",
"login": "colleenkinross",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/276101670?v=4"
},
{
"type": "User",
"login": "trustin",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/173918?v=4"
},
{
"type": "User",
"login": "chrisvest",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/7993?v=4"
},
{
"type": "User",
"login": "NicoK",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/213026?v=4"
},
{
"type": "User",
"login": "fondemen",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/621289?v=4"
}
],
"contributors_sampled": 61,
"top_contributor_share": 0.718
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci-build.yml",
"ci-deploy.yml",
"ci-pr.yml",
"ci-release.yml",
"codeql-analysis.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 4,
"reason": "Found 12/30 approved changesets -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 14 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "16 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "6ad94b7772fb330999d38ac2153f838cb6259357",
"ran_at": "2026-07-30T23:31:28Z",
"aggregate_score": 7.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T07:17:31Z",
"oldest_open_prs": [
{
"number": 794,
"created_at": "2023-06-20T06:45:00Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 819,
"created_at": "2023-09-04T20:29:25Z",
"last_comment_at": "2023-11-17T21:58:58Z",
"last_comment_author": "pnacht"
},
{
"number": 869,
"created_at": "2024-04-26T08:36:24Z",
"last_comment_at": "2024-04-26T08:46:38Z",
"last_comment_author": "klaren"
},
{
"number": 953,
"created_at": "2026-02-12T04:47:31Z",
"last_comment_at": "2026-02-12T17:01:23Z",
"last_comment_author": "jmcrawford45"
},
{
"number": 968,
"created_at": "2026-04-11T11:03:33Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 992,
"created_at": "2026-07-23T17:51:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 993,
"created_at": "2026-07-29T05:53:41Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-07T22:19:02Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 152,
"created_at": "2016-06-08T18:21:33Z",
"last_comment_at": "2017-03-01T14:55:38Z",
"last_comment_author": "anuraaga"
},
{
"number": 257,
"created_at": "2017-03-28T17:48:00Z",
"last_comment_at": "2017-03-28T17:57:17Z",
"last_comment_author": "normanmaurer"
},
{
"number": 306,
"created_at": "2017-09-25T14:11:02Z",
"last_comment_at": "2017-10-25T05:32:45Z",
"last_comment_author": "normanmaurer"
},
{
"number": 332,
"created_at": "2018-03-14T08:01:29Z",
"last_comment_at": "2018-08-08T00:25:26Z",
"last_comment_author": "rtdavies"
},
{
"number": 463,
"created_at": "2019-05-16T14:45:13Z",
"last_comment_at": "2019-11-01T13:27:45Z",
"last_comment_author": "normanmaurer"
},
{
"number": 518,
"created_at": "2020-01-08T12:12:14Z",
"last_comment_at": "2024-02-23T10:28:44Z",
"last_comment_author": "hsomu"
},
{
"number": 530,
"created_at": "2020-02-26T15:09:42Z",
"last_comment_at": "2020-03-23T17:09:09Z",
"last_comment_author": "techpavan"
},
{
"number": 531,
"created_at": "2020-03-10T09:41:59Z",
"last_comment_at": "2021-04-05T05:53:59Z",
"last_comment_author": "shinni802"
},
{
"number": 537,
"created_at": "2020-04-11T10:39:01Z",
"last_comment_at": "2024-05-10T08:16:35Z",
"last_comment_author": "zouxyan"
},
{
"number": 551,
"created_at": "2020-06-09T11:32:19Z",
"last_comment_at": "2024-02-27T22:42:08Z",
"last_comment_author": "SercanKaraoglu"
},
{
"number": 588,
"created_at": "2020-11-12T05:16:13Z",
"last_comment_at": "2020-12-07T08:21:00Z",
"last_comment_author": "normanmaurer"
},
{
"number": 619,
"created_at": "2021-02-02T19:08:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 722,
"created_at": "2022-04-21T20:29:44Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 727,
"created_at": "2022-05-06T02:03:39Z",
"last_comment_at": "2023-07-19T08:35:53Z",
"last_comment_author": "conet"
},
{
"number": 732,
"created_at": "2022-06-25T16:08:24Z",
"last_comment_at": "2023-08-04T13:54:26Z",
"last_comment_author": "jat-chun"
},
{
"number": 746,
"created_at": "2022-09-09T23:18:30Z",
"last_comment_at": "2023-01-19T14:26:11Z",
"last_comment_author": "normanmaurer"
},
{
"number": 775,
"created_at": "2023-02-28T14:39:01Z",
"last_comment_at": "2023-07-12T22:33:37Z",
"last_comment_author": "normanmaurer"
},
{
"number": 786,
"created_at": "2023-04-25T07:07:19Z",
"last_comment_at": "2023-06-20T06:47:02Z",
"last_comment_author": "normanmaurer"
},
{
"number": 793,
"created_at": "2023-06-13T18:54:22Z",
"last_comment_at": "2023-10-24T15:37:57Z",
"last_comment_author": "pnacht"
},
{
"number": 799,
"created_at": "2023-07-12T13:23:05Z",
"last_comment_at": "2024-06-10T09:07:55Z",
"last_comment_author": "kolargol"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/netty/netty-tcnative",
"host": "github.com",
"name": "netty-tcnative",
"owner": "netty"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 65 is calibrated to 75 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 65,
"calibrated": 75,
"calibration": "2026-08-02"
}
}
],
"value": 75,
"inputs": {
"security": 79,
"vitality": 60,
"community": 68,
"governance": 67,
"calibration": "2026-08-02",
"engineering": 57,
"ai_readiness": 55,
"weighted_overall_raw": 65
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 60,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"commits_last_year": 64,
"human_commit_share": 1,
"days_since_last_push": 10,
"active_weeks_last_year": 26
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 10 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "26/52 weeks with commits",
"points": 18,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 26
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "64 commits in the last year",
"points": 16.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 64
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "16 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "weak",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"releases_count": 1,
"latest_release_tag": "gcc-precompile",
"releases_from_tags": false,
"days_since_latest_release": 2005,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2005 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2005
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 13,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 13 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 13
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 68,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"forks": 196,
"stars": 266,
"watchers": 39,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "266 stars",
"points": 39.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 266
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "196 forks",
"points": 19.1,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 196
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "39 watchers",
"points": 8.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 39
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 67,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "weak",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 61,
"top_contributor_share": 0.718
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 72% of commits",
"points": 6.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 72
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "61 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 61
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 420,
"open_issues": 35,
"closed_issues": 297,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.895,
"closed_unmerged_prs": 231,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "90% of issues closed",
"points": 37.6,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 90
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "420/651 decided PRs merged",
"points": 19.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 420,
"decided": 651
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 12/30 approved changesets -- score normalized to 4",
"points": 6,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"followers": 412,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "netty",
"public_repos": 16,
"account_age_days": 5742
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "412 followers of netty",
"points": 18.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 412,
"login": "netty"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "16 public repos, account ~15 yr old",
"points": 21,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 16
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"io.netty:netty-tcnative-classes",
"io.netty:netty-tcnative"
],
"ecosystems": "maven",
"any_deprecated": false,
"min_days_since_publish": 10
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on maven",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "maven"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 10 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 10
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "119 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 119
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 57,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "weak",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 79,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 7.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 12/30 approved changesets -- score normalized to 4",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "16 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the maven:io.netty:netty-tcnative@2.0.81.Final runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "maven:io.netty:netty-tcnative@2.0.81.Final",
"assessed": 1
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 1,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 1,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 13
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 55,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.62,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "62 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 33.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 62,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"boringssl-static/pom.xml",
"libressl-static/pom.xml",
"openssl-classes/pom.xml",
"openssl-dynamic/pom.xml",
"openssl-static/pom.xml",
"pom.xml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "boringssl-static/pom.xml, libressl-static/pom.xml, openssl-classes/pom.xml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "boringssl-static/pom.xml, libressl-static/pom.xml, openssl-classes/pom.xml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 117626,
"source_files_sampled": 49,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/49 source files over 60KB",
"points": 52.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 49,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"metrics_version": "2.1.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch maven package 'io.netty:netty-tcnative-openssl-static' from its registry",
"Could not fetch maven package 'io.netty:netty-tcnative-libressl-static' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-30T23:31:53.819631Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/netty/netty-tcnative.svg",
"full_name": "netty/netty-tcnative",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з netty/netty-tcnative. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v2.1.0, схема v0.27.0 — повна методологія · вікі метрик.
