Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-25 17:14 UTC

openrewrite / rewrite-github-actions

OpenRewrite recipes for performing GitHub action hygiene and migration tasks.

JavaВласна ліцензія★ 1 зірка⑂ 5 форківз лип. 2021 р.Переглянути на GitHub ↗

openrewrite/rewrite-github-actions має індекс здоров’я 63 зі 100, що відповідає смузі «Помірний». Найвищий показник — Vitality (93/100), найнижчий — Community & Adoption (37/100). Останнє оновлення було 3 дні тому. Більшість нещодавньої роботи виконують 2 учасники.

63
загалом / 100
Помірний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

63
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

OpenRewriteОрганізація
984 підписники75 публічних репозиторіївз лют. 2020 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

93Відмінний · 22% загального індексу
Як обчислюється оцінка
36/36Свіжість push — останній push 3 дн. тому
24.9/36Ритм комітів — 36/52 тижнів із комітами
17.5/18Обсяг комітів — 87 комітів за останній рік
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Використані вхідні дані
commits_last_year87
human_commit_share0,89
days_since_last_push3
active_weeks_last_year36
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 100 релізів
36/36Свіжість релізів — останній реліз 11 дн. тому
27/27Ритм релізів — реліз кожні ~12,3 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count100
latest_release_tagv3.27.0
releases_from_tagsні
days_since_latest_release11
mean_days_between_releases12,3
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

37У зоні ризику · 18% загального індексу
Як обчислюється оцінка
0/60Зірки — 1 зірок
5/25Форки — 5 форків
1.7/15Спостерігачі — 3 спостерігачів
Використані вхідні дані
forks5
stars1
watchers3
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
16.9/22.5Ліцензія — файл ліцензії наявний, не є визнаною ліцензією
18/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
6.3/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingтак
has_issue_templateні
has_code_of_conductні
has_pull_request_templateтак

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

64Помірний · 24% загального індексу
Як обчислюється оцінка
25.2/54Бас-фактор — на 2 контриб’ютор(ів) припадає половина всіх комітів
13.9/22.5Розподіл комітів — головний контриб’ютор — автор 38% комітів
13.5/13.5Широта контриб’юторів — 28 контриб’юторів
10/10OpenSSF Scorecard: Contributors — project has 9 contributing companies or organizations
Використані вхідні дані
bus_factor2
contributors_sampled28
top_contributor_share0,381
Як обчислюється оцінка
14.7/46.8Вирішення issue — закрито 32% issue
35.4/38.3Прийняття PR — злито 122/132 вирішених PR
3/15OpenSSF Scorecard: Code-Review — Found 4/19 approved changesets -- score normalized to 2
Використані вхідні дані
merged_prs122
open_issues50
closed_issues23
issue_closed_ratio0,315
closed_unmerged_prs10
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
21.5/25Охоплення власника — 984 підписників у openrewrite
25/25Послужний список — 75 публічних репозиторіїв, вік облікового запису ~6 р.
Використані вхідні дані
followers984
owner_typeOrganization
is_verified
owner_loginopenrewrite
public_repos75
account_age_days2 341

Інженерна якість

Чи наявні базові інженерні практики та документація?

63Помірний · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 5 процес(ів) CI
24/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
6.4/6.4.editorconfig
18/20OpenSSF Scorecard: CI-Tests — 22 out of 23 merged PRs checked by a CI test -- score normalized to 9
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigтак
has_linter_configні
has_precommit_configні

Документація

50Помірний
Як обчислюється оцінка
30/30README
0/25Каталог документації
0/15Сайт документації / домашня сторінка
10/10Опис репозиторію
10/10Теми — 2 тем
0/10Wiki
Використані вхідні дані
topicsopenrewrite, openrewrite-recipes
has_wikiні
homepage
has_readmeтак
has_docs_dirні
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

52Помірний · 16% загального індексу

Стан безпеки

52Помірний
Як обчислюється оцінка
6.8/7.5Binary-Artifacts — binaries present in source code
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.2/2.5CI-Tests — 22 out of 23 merged PRs checked by a CI test -- score normalized to 9
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
1.5/7.5Code-Review — Found 4/19 approved changesets -- score normalized to 2
2.5/2.5Contributors — project has 9 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.2/2.5Ліцензія — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — немає даних
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate5,2
Виключено з оцінювання (немає даних або не застосовно): packaging, signed_releases. Залишкові ваги перенормовано.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

58Помірний · 0% загального індексу
Як обчислюється оцінка
0/45Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 82 з 89 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,921
agent_instruction_files
agent_instruction_max_bytes
Як обчислюється оцінка
12.6/18Розгортання однією командою — build.gradle.kts (домовленість інструментарію, без раннера задач)
22/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
11/11Статична перевірка типів — Java (статично типізована)
0/10Відтворюване середовище
2/10Підтверджена практика роботи з агентами — 1 з останніх 100 комітів створено агентом або з його зазначенням
8/8Автоматизоване супроводження — 2 з останніх 100 комітів — автоматичні оновлення залежностей
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsтак
lockfiles
has_dockerfileні
typed_languageтак
bootstrap_files
has_devcontainerні
has_linter_configні
typecheck_configs
agent_commit_share0,01
toolchain_manifestsbuild.gradle.kts
dependency_bot_commit_share0,02
Як обчислюється оцінка
45/45Типізований код — Java (статично типізована)
55/55Керовані розміри файлів — 0/100 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageJava
largest_source_bytes28 457
source_files_sampled100
oversized_source_files0

Ключові факти

1зірок GitHub
28контриб'юторів
87комітів за останні 12 місяців
3днів від останнього пушу
100релізів
2бас-фактор
50відкритих issue
Mavenпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Докладніше

Історія зірок і форків 0 ★ / 5 ⇿
0Зірки
5Форки
31Релізи

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

12345512025-032025-102026-04
Мажорні 0Мінорні 19Патчі 12

Кожна точка охоплює 2 днів.

OpenSSF Scorecard 5.2 / 10
5.2сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-25 17:13 UTC

9Binary-Artifactsbinaries present in source code
0Branch-Protectionbranch protection not enabled on development/release branches
9CI-Tests22 out of 23 merged PRs checked by a CI test -- score normalized to 9
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
2Code-ReviewFound 4/19 approved changesets -- score normalized to 2
10Contributorsproject has 9 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
9Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
н/дPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Усі залежності 0

Повний розв'язаний набір залежностей із графа залежностей GitHub: 0 прямих і 0 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
Сповіщення про залежності не оцінено

Звірка сповіщень не відбулася для цього звіту: No resolved dependencies to assess

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [
        "openrewrite",
        "openrewrite-recipes"
      ],
      "is_fork": false,
      "size_kb": 2206,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Java": 650248
      },
      "pushed_at": "2026-07-22T14:56:06Z",
      "created_at": "2021-07-27T14:29:53Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-22T14:59:57Z",
      "description": "OpenRewrite recipes for performing GitHub action hygiene and migration tasks.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "Java",
      "significant_languages": [
        "Java"
      ]
    },
    "owner": {
      "blog": "https://docs.openrewrite.org",
      "name": "OpenRewrite",
      "type": "Organization",
      "login": "openrewrite",
      "company": null,
      "location": "San Francisco, CA",
      "followers": 984,
      "avatar_url": "https://avatars.githubusercontent.com/u/61478321?v=4",
      "created_at": "2020-02-25T21:27:36Z",
      "is_verified": null,
      "public_repos": 75,
      "account_age_days": 2341
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v3.27.0",
          "kind": "minor",
          "published_at": "2026-07-14T05:22:32Z"
        },
        {
          "tag": "v3.26.0",
          "kind": "minor",
          "published_at": "2026-07-01T06:17:54Z"
        },
        {
          "tag": "v3.25.0",
          "kind": "minor",
          "published_at": "2026-06-17T09:49:55Z"
        },
        {
          "tag": "v3.24.0",
          "kind": "minor",
          "published_at": "2026-06-03T13:21:10Z"
        },
        {
          "tag": "v3.23.0",
          "kind": "minor",
          "published_at": "2026-05-21T10:14:55Z"
        },
        {
          "tag": "v3.22.0",
          "kind": "minor",
          "published_at": "2026-05-06T23:19:34Z"
        },
        {
          "tag": "v3.21.1",
          "kind": "patch",
          "published_at": "2026-04-27T09:07:55Z"
        },
        {
          "tag": "v3.21.0",
          "kind": "minor",
          "published_at": "2026-04-21T07:30:04Z"
        },
        {
          "tag": "v3.20.0",
          "kind": "minor",
          "published_at": "2026-04-08T12:04:32Z"
        },
        {
          "tag": "v3.19.0",
          "kind": "minor",
          "published_at": "2026-03-25T09:26:50Z"
        },
        {
          "tag": "v3.18.4",
          "kind": "patch",
          "published_at": "2026-03-12T12:43:58Z"
        },
        {
          "tag": "v3.18.3",
          "kind": "patch",
          "published_at": "2026-03-04T16:27:32Z"
        },
        {
          "tag": "v3.18.2",
          "kind": "patch",
          "published_at": "2026-02-25T12:18:50Z"
        },
        {
          "tag": "v3.18.1",
          "kind": "patch",
          "published_at": "2026-02-11T08:44:03Z"
        },
        {
          "tag": "v3.18.0",
          "kind": "minor",
          "published_at": "2026-01-20T19:01:33Z"
        },
        {
          "tag": "v3.17.0",
          "kind": "minor",
          "published_at": "2026-01-07T15:45:13Z"
        },
        {
          "tag": "v3.16.1",
          "kind": "patch",
          "published_at": "2025-12-16T15:16:47Z"
        },
        {
          "tag": "v3.16.0",
          "kind": "minor",
          "published_at": "2025-12-05T10:16:19Z"
        },
        {
          "tag": "v3.15.0",
          "kind": "minor",
          "published_at": "2025-11-20T11:28:42Z"
        },
        {
          "tag": "v3.14.0",
          "kind": "minor",
          "published_at": "2025-11-04T13:00:20Z"
        },
        {
          "tag": "v3.13.0",
          "kind": "minor",
          "published_at": "2025-10-22T10:34:11Z"
        },
        {
          "tag": "v3.12.0",
          "kind": "minor",
          "published_at": "2025-10-10T17:03:44Z"
        },
        {
          "tag": "v3.11.0",
          "kind": "minor",
          "published_at": "2025-09-24T12:10:48Z"
        },
        {
          "tag": "v3.10.2",
          "kind": "patch",
          "published_at": "2025-09-10T10:36:02Z"
        },
        {
          "tag": "v3.10.1",
          "kind": "patch",
          "published_at": "2025-08-27T15:39:05Z"
        },
        {
          "tag": "v3.10.0",
          "kind": "minor",
          "published_at": "2025-08-12T20:51:02Z"
        },
        {
          "tag": "v3.9.2",
          "kind": "patch",
          "published_at": "2025-07-23T21:23:15Z"
        },
        {
          "tag": "v3.9.1",
          "kind": "patch",
          "published_at": "2025-07-23T10:31:19Z"
        },
        {
          "tag": "v3.9.0",
          "kind": "minor",
          "published_at": "2025-07-09T13:33:37Z"
        },
        {
          "tag": "v3.8.0",
          "kind": "minor",
          "published_at": "2025-06-25T10:48:43Z"
        },
        {
          "tag": "v3.7.0",
          "kind": "minor",
          "published_at": "2025-05-28T14:05:03Z"
        },
        {
          "tag": "v3.6.0",
          "kind": "minor",
          "published_at": "2025-05-07T16:38:04Z"
        },
        {
          "tag": "v3.5.0",
          "kind": "minor",
          "published_at": "2025-04-24T16:17:14Z"
        },
        {
          "tag": "v3.4.1",
          "kind": "patch",
          "published_at": "2025-04-10T14:18:23Z"
        },
        {
          "tag": "v3.4.0",
          "kind": "minor",
          "published_at": "2025-04-09T17:31:44Z"
        },
        {
          "tag": "v3.3.1",
          "kind": "patch",
          "published_at": "2025-03-27T16:27:16Z"
        },
        {
          "tag": "v3.3.0",
          "kind": "minor",
          "published_at": "2025-03-11T18:05:35Z"
        },
        {
          "tag": "v3.2.0",
          "kind": "minor",
          "published_at": "2025-02-20T16:27:42Z"
        },
        {
          "tag": "v3.1.0",
          "kind": "minor",
          "published_at": "2025-02-07T16:55:30Z"
        },
        {
          "tag": "v3.0.2",
          "kind": "patch",
          "published_at": "2025-01-24T13:11:35Z"
        },
        {
          "tag": "v3.0.1",
          "kind": "patch",
          "published_at": "2025-01-17T10:55:50Z"
        },
        {
          "tag": "v3.0.0",
          "kind": "major",
          "published_at": "2025-01-10T16:26:20Z"
        },
        {
          "tag": "v2.11.0",
          "kind": "minor",
          "published_at": "2024-12-18T17:05:05Z"
        },
        {
          "tag": "v2.10.1",
          "kind": "patch",
          "published_at": "2024-11-28T16:40:10Z"
        },
        {
          "tag": "v2.10.0",
          "kind": "minor",
          "published_at": "2024-11-27T16:17:54Z"
        },
        {
          "tag": "v2.9.2",
          "kind": "patch",
          "published_at": "2024-11-13T15:45:06Z"
        },
        {
          "tag": "v2.9.1",
          "kind": "patch",
          "published_at": "2024-11-08T20:01:08Z"
        },
        {
          "tag": "v2.9.0",
          "kind": "minor",
          "published_at": "2024-11-06T19:04:08Z"
        },
        {
          "tag": "v2.8.2",
          "kind": "patch",
          "published_at": "2024-10-23T13:54:25Z"
        },
        {
          "tag": "v2.8.1",
          "kind": "patch",
          "published_at": "2024-10-09T15:52:14Z"
        },
        {
          "tag": "v2.8.0",
          "kind": "minor",
          "published_at": "2024-09-24T16:44:30Z"
        },
        {
          "tag": "v2.7.5",
          "kind": "patch",
          "published_at": "2024-09-11T16:50:18Z"
        },
        {
          "tag": "v2.7.4",
          "kind": "patch",
          "published_at": "2024-08-28T13:15:46Z"
        },
        {
          "tag": "v2.7.3",
          "kind": "patch",
          "published_at": "2024-08-12T18:44:11Z"
        },
        {
          "tag": "v2.7.2",
          "kind": "patch",
          "published_at": "2024-08-08T08:46:12Z"
        },
        {
          "tag": "v2.7.1",
          "kind": "patch",
          "published_at": "2024-07-31T11:03:17Z"
        },
        {
          "tag": "v2.7.0",
          "kind": "minor",
          "published_at": "2024-07-15T08:42:13Z"
        },
        {
          "tag": "v2.6.2",
          "kind": "patch",
          "published_at": "2024-07-03T16:21:23Z"
        },
        {
          "tag": "v2.6.1",
          "kind": "patch",
          "published_at": "2024-06-19T17:00:44Z"
        },
        {
          "tag": "v2.6.0",
          "kind": "minor",
          "published_at": "2024-06-19T08:20:26Z"
        },
        {
          "tag": "v2.5.0",
          "kind": "minor",
          "published_at": "2024-06-07T22:10:52Z"
        },
        {
          "tag": "v2.4.2",
          "kind": "patch",
          "published_at": "2024-05-22T21:06:55Z"
        },
        {
          "tag": "v2.4.1",
          "kind": "patch",
          "published_at": "2024-05-22T12:52:03Z"
        },
        {
          "tag": "v2.4.0",
          "kind": "minor",
          "published_at": "2024-05-18T05:00:33Z"
        },
        {
          "tag": "v2.3.0",
          "kind": "minor",
          "published_at": "2024-05-08T12:31:01Z"
        },
        {
          "tag": "v2.2.0",
          "kind": "minor",
          "published_at": "2024-04-24T13:45:38Z"
        },
        {
          "tag": "v2.1.7",
          "kind": "patch",
          "published_at": "2024-03-19T17:56:26Z"
        },
        {
          "tag": "v2.1.6",
          "kind": "patch",
          "published_at": "2024-03-12T21:27:16Z"
        },
        {
          "tag": "v2.1.5",
          "kind": "patch",
          "published_at": "2024-02-20T19:46:00Z"
        },
        {
          "tag": "v2.1.4",
          "kind": "patch",
          "published_at": "2024-02-06T12:24:28Z"
        },
        {
          "tag": "v2.1.3",
          "kind": "patch",
          "published_at": "2024-01-23T13:27:03Z"
        },
        {
          "tag": "v2.1.2",
          "kind": "patch",
          "published_at": "2024-01-16T12:21:06Z"
        },
        {
          "tag": "v2.1.1",
          "kind": "patch",
          "published_at": "2024-01-09T13:54:39Z"
        },
        {
          "tag": "v2.1.0",
          "kind": "minor",
          "published_at": "2024-01-09T10:33:01Z"
        },
        {
          "tag": "v2.0.14",
          "kind": "patch",
          "published_at": "2023-12-21T13:19:18Z"
        },
        {
          "tag": "v2.0.13",
          "kind": "patch",
          "published_at": "2023-12-20T09:58:55Z"
        },
        {
          "tag": "v2.0.12",
          "kind": "patch",
          "published_at": "2023-12-14T10:52:14Z"
        },
        {
          "tag": "v2.0.11",
          "kind": "patch",
          "published_at": "2023-12-08T09:37:04Z"
        },
        {
          "tag": "v2.0.10",
          "kind": "patch",
          "published_at": "2023-12-04T18:48:28Z"
        },
        {
          "tag": "v2.0.9",
          "kind": "patch",
          "published_at": "2023-11-24T23:45:48Z"
        },
        {
          "tag": "v2.0.8",
          "kind": "patch",
          "published_at": "2023-11-24T14:46:13Z"
        },
        {
          "tag": "v2.0.7",
          "kind": "patch",
          "published_at": "2023-10-27T22:31:44Z"
        },
        {
          "tag": "v2.0.6",
          "kind": "patch",
          "published_at": "2023-10-03T01:31:00Z"
        },
        {
          "tag": "v2.0.5",
          "kind": "patch",
          "published_at": "2023-09-12T14:16:13Z"
        },
        {
          "tag": "v2.0.4",
          "kind": "patch",
          "published_at": "2023-08-24T18:19:07Z"
        },
        {
          "tag": "v2.0.3",
          "kind": "patch",
          "published_at": "2023-07-18T07:26:46Z"
        },
        {
          "tag": "v2.0.2",
          "kind": "patch",
          "published_at": "2023-07-04T08:54:36Z"
        },
        {
          "tag": "v2.0.1",
          "kind": "patch",
          "published_at": "2023-06-14T01:58:50Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2023-06-02T01:21:43Z"
        },
        {
          "tag": "v1.20.0",
          "kind": "minor",
          "published_at": "2023-04-21T00:35:58Z"
        },
        {
          "tag": "v1.19.0",
          "kind": "minor",
          "published_at": "2023-04-04T01:02:20Z"
        },
        {
          "tag": "v1.18.0",
          "kind": "minor",
          "published_at": "2023-03-15T02:35:32Z"
        },
        {
          "tag": "v1.17.0",
          "kind": "minor",
          "published_at": "2023-02-16T04:44:43Z"
        },
        {
          "tag": "v1.16.0",
          "kind": "minor",
          "published_at": "2023-01-20T21:56:23Z"
        },
        {
          "tag": "v1.15.0",
          "kind": "minor",
          "published_at": "2022-12-12T22:13:26Z"
        },
        {
          "tag": "v1.14.0",
          "kind": "minor",
          "published_at": "2022-11-17T02:38:38Z"
        },
        {
          "tag": "v1.13.0",
          "kind": "minor",
          "published_at": "2022-10-20T01:18:34Z"
        },
        {
          "tag": "v1.12.0",
          "kind": "minor",
          "published_at": "2022-10-11T01:36:49Z"
        },
        {
          "tag": "v1.11.0",
          "kind": "minor",
          "published_at": "2022-09-22T20:47:42Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2022-09-02T20:30:50Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "48c75c3e1fce15a5bbc459f3d2a8fac62a24400d",
          "body": null,
          "is_bot": false,
          "headline": "Set Develocity `projectId` to \"openrewrite\" (#206)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-07-22T14:56:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b991f1806da9bc1dc3af6ff10f9eb3ef7678decd",
          "body": "Co-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Move Develocity to community.develocity.cloud",
          "author_name": "tim@moderne.io",
          "author_login": "timtebeek",
          "committed_at": "2026-07-22T12:10:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c86697479318faece748ae8708deeca329d79ec8",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update known action SHAs (#205)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-20T09:54:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86c1c77e1692dfa4794ebf0745e77ef0b2d6dc61",
          "body": "Co-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "OpenRewrite recipe best practices",
          "author_name": "timtebeek@gmail.com",
          "author_login": "timtebeek",
          "committed_at": "2026-07-13T07:45:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc8eff011dc84be422911a1d7943256457b21848",
          "body": "* Match composite action definitions in action recipes\n\nGitHub Actions can be defined in composite action files (action.yml),\nnot just workflow files. Recipes that match action references now also\napply to these definitions, keyed on the required action.yml/action.yaml\nfilename rather than the conve\n[…]\ntch both workflow files and action definitions\n- Broaden ChangeAction/ChangeActionVersion JsonPath to reach\n  runs.steps[].uses in composite actions\n\n* Register IsGitHubActionDefinition in recipes.csv",
          "is_bot": false,
          "headline": "Match composite action definitions in GitHub Action recipes (#203)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-07-10T22:25:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "216ed3ee29b77d0876567d261132fb9e70127f4c",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update known action SHAs (#202)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-06T12:49:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e623b8d4c6efeae71909b962f200b5a5afa8f0ac",
          "body": "* UpgradeOfficialGitHubActions recipe\n\n* Add UpgradeOfficialGitHubActions to best practices; reuse LatestRelease comparator\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
          "is_bot": false,
          "headline": "UpgradeOfficialGitHubActions recipe (#201)",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2026-06-30T17:31:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d40ee5cf382de16f3f71de77eabca468de5174d",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update known action SHAs (#200)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-29T11:40:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4aeaaf42125da33c136515c519c8b220ef1a1362",
          "body": "…pt-in oldSha (#199)\n\n* Skip SHA-pinned `uses:` via opt-in `oldSha` in ChangeAction(Version)\n\nChangeActionVersion and ChangeAction stripped deliberate commit-SHA pins when rewriting a `uses:` reference. Add an opt-in `oldSha` sentinel mirroring Docker ChangeFrom's `oldDigest`:\n\n- unset -> change reg\n[…]\nome\nbefore the replacement. Updates the positional constructor callers in\nChangeActionTest and the generated recipes.csv option order to match.\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
          "is_bot": false,
          "headline": "Preserve SHA-pinned actions in ChangeAction/ChangeActionVersion via o…",
          "author_name": "Merlin Bögershausen",
          "author_login": "MBoegers",
          "committed_at": "2026-06-29T08:23:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d9f74ec11495695db6adbab341d7e11a8f52988d",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/builder/yESIGzVB0?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Recipe best practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-06-23T07:37:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b759f13957322e3baf2193250bc5e3baaef7ef7",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update known action SHAs (#198)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-22T12:21:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b83c324fe11e393cfc50917f5c82637f1e809af",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(ci): bump actions/checkout from 6 to 7 (#197)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-18T19:22:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9e7fa82ae1eb6771402184c1fe16aaf1a0350f5a",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.xml.security.RemoveOwaspSuppressions?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZQ%3D%3D#defaults=W3sidmFsdWUiOiIyMDI2LTA2LTE3IiwibmFtZSI6ImN1dE9mZkRhdGUifV0=\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Remove out-of-date OWASP suppressions",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-06-17T17:36:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6f5a44c4f3c7f097b5e43d5ac60e9a781cf5eab",
          "body": null,
          "is_bot": false,
          "headline": "Pin test references to immutable patch tags to stop SHA drift (#196)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-06-16T20:46:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a3b34e9e967dd8ae61c3f3097cf09810e7b764b",
          "body": "* Update known action SHAs\n\n* Update expected SHA in PinGitHubActionsToShaTest after known-SHA refresh\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Tim te Beek <tim@moderne.io>",
          "is_bot": true,
          "headline": "Update known action SHAs (#192)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-16T20:27:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2949c06c5ae20fb38fff56b0ee15e020d328a838",
          "body": null,
          "is_bot": false,
          "headline": "Refresh the tibdex app token recipe (#194)",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2026-06-16T14:01:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bba8bfb77d4480d103429f90c1ce491c3e0dca74",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.AddToGitignore?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZQ%3D%3D#defaults=W3sidmFsdWUiOiIuY29udGV4dC8iLCJuYW1lIjoiZW50cmllcyJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "git-ignore .context/",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2026-06-09T11:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d72245f48fa570796f584a2e462db0dfc0b3169",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update known action SHAs (#190)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-01T11:53:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c99c738f8c8aae162f1646a8454e86949a2d0177",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUgKyBPcGVuUmV3cml0ZS9PcGVuUmV3cml0ZQ%3D%3D#defaults=W3sidmFsdWUiOiI5LjUuMSIsIm5hbWUiOiJ2ZXJzaW9uIn0seyJ2YWx1ZSI6ImJpbiIsIm5hbWUiOiJkaXN0cmlidXRpb24ifSx7InZhbHVlIjoiYmFmYzE0MWI2MTlhZDYzNTBmZDk3NWZjOTAzMTU2ZGQ1YzE1MTk5OGNjOGIwNThlOGMxMDQ0YWI1ZjdiMDMxZiIsIm5hbWUiOiJkaXN0cmlidXRpb25DaGVja3N1bSJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Update Gradle wrapper 9.5.1",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-05-28T19:51:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd8baafbba769c6dd17c90e9288e237733c80fca",
          "body": null,
          "is_bot": false,
          "headline": "Regenerate recipes.csv (#189)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-05-28T18:33:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d11ba8a4b822932a09b8d72b50d937d946c22a6",
          "body": "* Update known action SHAs\n\n* Update stale codeql-action SHA in PinGitHubActionsToShaTest\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Tim te Beek <tim@moderne.io>",
          "is_bot": true,
          "headline": "Update known action SHAs (#188)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-26T07:35:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "befa0b4a4c1b86871e7e90a6a24bdc7a2fd9876b",
          "body": "* Update known action SHAs\n\n* Update stale codeql-action SHA in PinGitHubActionsToShaTest\n\nThe codeql-action v3 SHA was updated in a3b2f53, but the test still\nreferenced the old SHA.\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Tim te Beek <tim@moderne.io>",
          "is_bot": true,
          "headline": "Update known action SHAs (#187)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-18T10:54:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81bb47b6fcfe52410141c93fc3dc1a87c59a3f86",
          "body": "* Update test fixture to current codeql-action SHA\n\n* Remove stray worktree event file",
          "is_bot": false,
          "headline": "Update stale codeql-action SHA in PinGitHubActionsToShaTest (#186)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-05-15T12:04:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "590580154990f591fb6ed13c12efa5a1ee534996",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "OpenRewrite recipe best practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-05-15T10:52:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "79aac92cdc06f923b6459193177f441aa0397e22",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update known action SHAs (#185)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-11T10:46:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ddfcf484450380b8c7c0dde58c1f624966d0462",
          "body": "…o skip pinning SHAs (#184)",
          "is_bot": false,
          "headline": "feat(github-actions): Add an option of trusted owners list in order t…",
          "author_name": "Mustapha Belmokhtar",
          "author_login": "BelmoMusta",
          "committed_at": "2026-05-06T16:00:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88a5e12f6cbbc3f5bbcbf5b0cbc3f373dd17aaca",
          "body": "* Update known action SHAs\n\n* Update expected SHA in PinGitHubActionsToShaTest to match refreshed known-action-shas\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Update known action SHAs (#183)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-05-04T10:40:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24130884c565efaebbf224e54cf93614da488aa5",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v6)\n\n---\nupdated-dependenc\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(ci): bump actions/checkout from 4 to 6 (#180)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-04T09:44:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6a4e07c4ae9a1383a3ec1e828f6447ef748fda03",
          "body": "…#182)\n\n`grep` exits 1 when an action's tags don't match the `v<N>[.<N>[.<N>]]`\npattern (e.g. `bazel-contrib/setup-bazel` uses `release-X.Y.Z`), and\nunder `pipefail` that killed the scheduled job. Append `|| true` so the\nloop skips the action instead of aborting.",
          "is_bot": false,
          "headline": "Tolerate actions with no matching version tags in update-known-shas (…",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-05-04T08:50:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e8788ddf9d0160f34a4aa2592dc621f98af80bb",
          "body": "…ce boundary (#181)",
          "is_bot": false,
          "headline": "Fix tag comment placement when pinned `uses:` is followed by a sequen…",
          "author_name": "Steve Elliott",
          "author_login": "steve-aom-elliott",
          "committed_at": "2026-05-02T01:19:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc0963123d655e9448955433d034a0a585c89aa4",
          "body": "* Add PinGitHubActionsToSha recipe\n\nNew recipe that replaces mutable tag/branch references in GitHub Actions\nuses: declarations with immutable commit SHAs. Includes static SHA\nmapping for common actions with GitHub API fallback, configurable\nofficial action pinning, and comprehensive test coverage.\n\n[…]\nnue to round-trip\nas just `<tag>` so Dependabot/Renovate keep recognizing them.\n\n---------\n\nCo-authored-by: Steve Elliott <steve.aom.elliott@gmail.com>\nCo-authored-by: Steve Elliott <steve@moderne.io>",
          "is_bot": false,
          "headline": "Add recipe to pin GitHub Actions to commit SHAs (#169)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-04-29T22:19:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8007d783776e3e8a45020f3ec42871aa726582ad",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.ExamplesExtractor?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Extract documentation examples from tests",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2026-04-21T07:04:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce477df6d970dcb38567cd9f364fa2a3e7f71bd3",
          "body": null,
          "is_bot": false,
          "headline": "Add GitHubActionsBestPractices recipe (#178)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-04-11T20:59:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d9d26054b8995d36dc559d07a2c44eeaa6326c8",
          "body": "- wrapper-validation: v3 → v5 (last version before removal in v6)\n- setup-gradle: v3 → v6 (latest)",
          "is_bot": false,
          "headline": "Update Gradle action versions to latest (#177)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-04-11T20:52:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c94188483d1b2efb201d77d296b4b085c59ef6de",
          "body": "* Add PreferBlockStyleJobDependencies recipe (#129)\n\nConvert flow-style `needs` sequences to block-style in GitHub Actions\nworkflows when a job depends on more than one other job.\n\n* Use ListUtils.map instead of stream()",
          "is_bot": false,
          "headline": "Add PreferBlockStyleJobDependencies recipe (#176)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-04-11T20:51:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "692e30b87493a242c7e8d91461e0ae4e679d8a77",
          "body": "Using `secrets: inherit` is a security anti-pattern that passes all\nsecrets to reusable workflows, violating the principle of least\nprivilege. This is flagged by security linters like zizmor.\n\nCloses #174",
          "is_bot": false,
          "headline": "Remove PreferSecretsInheritWorkflow recipe (#175)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-04-09T12:07:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ee019859e529fa2c54a0d38406eb1dee9835bc3",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "OpenRewrite recipe best practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-04-08T08:21:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c212b94bfbfde2d44531eb1878f9d8564c4a002b",
          "body": "After openrewrite/rewrite#7291, JsonPathMatcher trailing wildcards now\nexpand to individual child entries instead of matching the parent mapping.\n\n- FindMissingTimeout: change `$.jobs.*.*` to `$.jobs.*` since wildcards\n  now correctly resolve to job-level entries\n- RemoveWorkflowInputArgument: navigate one fewer parent level since\n  `$.jobs.*` now matches at the Entry cursor directly",
          "is_bot": false,
          "headline": "Fix JsonPath matchers for rewrite-yaml wildcard expansion change (#173)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-04-07T19:22:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08137fc782a6309e55760deb2768917253759402",
          "body": "The docs system generates source code links by stripping the `Recipe`\nsuffix from class names, producing broken 404 links for all 19 security\nrecipes. Rename them to match the convention used by the other recipes.\n\nFixes https://github.com/openrewrite/rewrite-github-actions/issues/171",
          "is_bot": false,
          "headline": "Drop `Recipe` suffix from security recipe class names (#172)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-04-06T21:25:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31cdfb8891a125c09e354136e81f68b503387588",
          "body": "…workflow (#170)",
          "is_bot": false,
          "headline": "feat(github-actions): Enable adding runners to all the jobs within a …",
          "author_name": "Mustapha Belmokhtar",
          "author_login": "BelmoMusta",
          "committed_at": "2026-03-28T22:11:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a990e73f5b807b52c4e4ca38f225ba1bfbf1f50",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "OpenRewrite recipe best practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-03-27T10:19:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ededa88f8109971401303e7c4a1afc66404d82c",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.ExamplesExtractor?organizationId=QUxML01vZGVybmU%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Extract documentation examples from tests",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2026-03-25T08:53:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4233286a2b540a8ea741dab5c743718b6a9cbdf",
          "body": null,
          "is_bot": false,
          "headline": "feat(dependabot-cooldown): Add the ability to exclude ecosystems (#168)",
          "author_name": "Mustapha Belmokhtar",
          "author_login": "BelmoMusta",
          "committed_at": "2026-03-24T20:36:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af573c2845209beb2b2b3c2da7951ad63a012a48",
          "body": "Add @JsonCreator to the public constructor so Jackson can\ndeserialize AddCronTrigger, fixing all AddCronTriggerTest failures\nintroduced by the Lombok Best Practices commit.",
          "is_bot": false,
          "headline": "Fix AddCronTrigger Jackson deserialization (#167)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-03-24T20:18:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c51d7fe06815d6488aff5915a029f2e37c587707",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.migrate.lombok.LombokBestPractices?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Lombok Best Practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-03-11T22:31:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "189ca858564bd59723b784fd1927578cbc4d22c9",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sidmFsdWUiOiI5LjMuMSIsIm5hbWUiOiJ2ZXJzaW9uIn0seyJ2YWx1ZSI6ImJpbiIsIm5hbWUiOiJkaXN0cmlidXRpb24ifSx7InZhbHVlIjpmYWxzZSwib\n[…]\nmTWlzc2luZyJ9LHsidmFsdWUiOiJiMjY2ZDVmZjZiOTBlYWRhNmRjM2IyMGNiMDkwZTM3MzEzMDJlNTUzYTI3YzVkM2U0ZGYxZjBkNzZiZWFmZjA2IiwibmFtZSI6ImRpc3RyaWJ1dGlvbkNoZWNrc3VtIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Update Gradle wrapper to 9.3.1",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-02-23T19:17:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f1c75ce7edc643b9d54d052d2fc437d2c93ed155",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.DeleteSourceFiles?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sibmFtZSI6ImZpbGVQYXR0ZXJuIiwidmFsdWUiOiIuZ2l0aHViL3dvcmtmbG93cy8qLXByLnltbCJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Delete files",
          "author_name": "Jonathan Schnéider",
          "author_login": "jkschneider",
          "committed_at": "2026-02-09T13:52:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f5376909088db9cad56e49878f2db5710019803",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseEstimatedEffortPerOccurrenceField?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Replace `getEstimatedEffortPerOccurrence()` method with field",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-01-17T11:52:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51f283f953c0937ae1c246484d12d44168f93fd5",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseTagsField?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Replace `getTags()` method with field",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-01-16T17:36:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4ed9fc727d74c8fa058ba2ce79b3ec5c034710c",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sibmFtZSI6InZlcnNpb24iLCJ2YWx1ZSI6IjkuMy4wIn0seyJuYW1lIjoiZGlzdHJpYnV0aW9uIiwidmFsdWUiOiJiaW4ifSx7Im5hbWUiOiJhZGRJZk1pc\n[…]\n1ZSI6ZmFsc2V9LHsibmFtZSI6ImRpc3RyaWJ1dGlvbkNoZWNrc3VtIiwidmFsdWUiOiIwZDU4NWY2OWRhMDkxZmM1YjJiZWNlZDg3N2ZlYWI1NWEzMDY0ZDQzYjhhMWQ0NmFlYjA3OTk2YjA5MTVlMGUwIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Update Gradle wrapper to 9.3.0",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-01-16T12:40:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7bd4201e61a108018a4a5ce289823b8ed09a885f",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/builder/VUxszwdBH?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Replace `Arrays.asList` with `List.of` in tests",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-01-15T11:09:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80040caa3cef2d568b38e14309d46e5a4a3f2c67",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseDisplayNameAndDescriptionFields?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Replace `getDisplayName()` and `getDescription()` methods with fields",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-01-14T12:44:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "229ae8898e3fa0f27b10d441f73d3df3bd3ecdbb",
          "body": "… (#165)\n\n* Replace `getDisplayName()` and `getDescription()` methods with fields\n\nUse this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.UseDisplayNameAndDescriptionFields?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <\n[…]\n41898282+github-actions[bot]@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Moderne <team@moderne.io>\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Replace `getDisplayName()` and `getDescription()` methods with fields…",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2026-01-13T10:31:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba25156df4a3fa0c62e5e60633ac4ea8d31f91f0",
          "body": null,
          "is_bot": false,
          "headline": "Generate a recipes.csv for the recipes defined in this repository",
          "author_name": "Jonathan Schneider",
          "author_login": "jkschneider",
          "committed_at": "2025-12-25T19:00:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a10901ab03a0a5cd1bf582a44fc5fb533123685",
          "body": "* Allow to update nested actions\n\n* `ChangeValue` does not support wildcards in replacement pattern\n\n* Address code suggestions\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
          "is_bot": false,
          "headline": "Allow updating multiple actions using a wildcard pattern (#164)",
          "author_name": "Willem Jan Glerum",
          "author_login": "wjglerum",
          "committed_at": "2025-12-16T22:52:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bfc0aac390722ae703dbe6287ea171dc2ba691cd",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "OpenRewrite recipe best practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-11-27T09:17:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c648c49913ff5d7f6db58d9d4d495c3ab2519033",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML01vZGVybmUvTW9kZXJuZSArIE9wZW5SZXdyaXRl#defaults=W3sidmFsdWUiOiI5LjIuMSIsIm5hbWUiOiJ2ZXJzaW9uIn0seyJ2YWx1ZSI6ImJpbiIsIm5hbWUiOiJkaXN0cmlidXRpb24ifSx7InZhbHVlIjpmYWxzZSwibmFtZSI6ImFkZElmTWlzc2luZyJ9XQ==\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Gradle wrapper 9.2.1",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-11-25T18:53:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "867a35820790426835dd02e1a12768b694634d3f",
          "body": "* Add .worktrees/ to .gitignore\n\nPreparing to use git worktrees for isolated feature development.\n\n* Add recipe to configure Dependabot cooldown periods\n\nAdds AddDependabotCooldown recipe to insert cooldown configuration into\ndependabot.yml files. Cooldowns delay adoption of newly published dependen\n[…]\nnd\ncomprehensive test coverage (10 tests).\n\n* Override `validate` instead of doing that in `getVisitor`\n\n* Only compose cooldown yaml when used\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
          "is_bot": false,
          "headline": "Add recipe to configure Dependabot cooldown periods (#162)",
          "author_name": "Scott Jungling",
          "author_login": "sjungling",
          "committed_at": "2025-11-25T12:37:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e068ad48fb643f4edc646f8a63b4a5dc2df3de84",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "OpenRewrite recipe best practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-11-12T09:12:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88ceea206d4b144578a63d8fd14e89c8e0273ce9",
          "body": "* Allow both `.yml` and `.yaml` for GitHub workflow files\n\n* Extract a named precondition\n\n* Organize imports\n\n* Override `getVisitor` instead of `getRecipeList`\n\n* Do not mention path in description\n\n* Remove unused imports and update example to use .yaml extension\n\nApplied best practice recipes th\n[…]\ncom/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n* Test precondition separately\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Allow to rewrite both `.yml` and `.yaml` GitHub workflow files (#159)",
          "author_name": "Willem Jan Glerum",
          "author_login": "wjglerum",
          "committed_at": "2025-11-10T17:49:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d26aad0ff4db9d77c22c1fc202ae00ea0bf7e486",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/builder/Sh3Bg6DMd?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Gradle 9.2.0 (#158)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-10-29T21:01:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab2dfd599f40aa68795bcfc78d24ea35f9939ac6",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/builder/FHYMFao9c?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Gradle 9.1.0 on Java 25 (#157)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-10-28T16:47:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8008dbb532ce70ec2d6978ee2790725b82cf3883",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "OpenRewrite recipe best practices (#156)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-10-23T09:29:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b23cbd4a26a72a8ad85688322457e0508ecdb601",
          "body": "Implements a declarative OpenRewrite recipe to automate migration\nfrom astral-sh/setup-uv@v6 to v7, handling breaking changes introduced\nin the v7.0.0 release.\n\nChanges:\n- Updates action version from v6 to v7\n- Removes deprecated server-url input (replaced by manifest-file in v7)\n- Preserves all oth\n[…]\n uses composition of existing ChangeActionVersion and\nDeleteKey recipes for a clean, maintainable implementation.\n\nFixes breaking changes from https://github.com/astral-sh/setup-uv/releases/tag/v7.0.0",
          "is_bot": false,
          "headline": "feat: add recipe to migrate astral-sh/setup-uv from v6 to v7 (#155)",
          "author_name": "Scott Jungling",
          "author_login": "sjungling",
          "committed_at": "2025-10-22T20:18:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6fec7fa095fff531e3953d01d3474dc2a825e461",
          "body": null,
          "is_bot": false,
          "headline": "Fix recipe validation issue",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-10-20T09:27:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52cd6c71bc01a252b9fe051330323408eb7b6ed2",
          "body": null,
          "is_bot": false,
          "headline": "Update suppressions (#153)",
          "author_name": "Laurens Westerlaken",
          "author_login": null,
          "committed_at": "2025-10-15T10:07:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2baa6388d70fbcc081600be446094ce2a748d51",
          "body": "* Refactor security recipes to use YamlHelper utility\n\nAdd YamlHelper utility class with common YAML LST traversal patterns and refactor 7 security recipes to use it, eliminating ~60-80 lines of repetitive instanceof checks and improving code consistency.\n\nChanges:\n- Add YamlHelper utility class wit\n[…]\n\n* Add @Nullable annotations to YamlHelper methods\n\n* Inline method used once, and reduce visibility\n\n* Don't extract a method used once so far\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>",
          "is_bot": false,
          "headline": "Refactor security recipes with YamlHelper utility (#152)",
          "author_name": "Scott Jungling",
          "author_login": "sjungling",
          "committed_at": "2025-10-11T12:37:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "310f94487434871a8b5ea883a728961e76c0653b",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Update recipe documentation examples (#151)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-10-04T11:19:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ed538d7f75f0fa0d9a08a1b5b16d9b5d56e9f96",
          "body": "…-github-app-token (#150)\n\nAdds a new declarative recipe that migrates from tibdex/github-app-token@v2\nto the official actions/create-github-app-token@v2, updates parameter names\nfrom snake_case to kebab-case, and adds the required owner parameter.",
          "is_bot": false,
          "headline": "feat: add recipe to migrate tibdex/github-app-token to actions/create…",
          "author_name": "Scott Jungling",
          "author_login": "sjungling",
          "committed_at": "2025-10-01T16:05:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05e3bd33a79cb0322d197244ca713fdfa980b87c",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "OpenRewrite recipe best practices (#149)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-10-01T10:06:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ec60241e87643f327b51bb61fd0eba9c8152a73",
          "body": "… (#148)\n\n* fix: no update non-python cache keys\n\n* refactor: update to more idiomatic Rewrite recipe\n\n* feat: add `actions/setup-node` node version recipe\n\nUpdate security recipes to use more idiomatic means for yaml traversal",
          "is_bot": false,
          "headline": "refactor: fix invalid `uv` change and add `actions/setup-node` recipe…",
          "author_name": "Scott Jungling",
          "author_login": "sjungling",
          "committed_at": "2025-09-24T23:40:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d69cf5f324b1e8d4a8b3708d4875c29eef024dbc",
          "body": "Add SetupPythonToUv recipe that migrates workflows from actions/setup-python\nto astral-sh/setup-uv for faster Python environment setup.",
          "is_bot": false,
          "headline": "feat: add OpenRewrite recipe to convert setup-python to UV action (#147)",
          "author_name": "Scott Jungling",
          "author_login": "sjungling",
          "committed_at": "2025-09-23T17:38:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4b6bc9fe2d4b2691dba17a13db2122d8175db13",
          "body": "* Apply best practices\n\n* Apply formatter\n\n* Add package-info.java\n\n* Sort security recipes\n\n* Fix ForbiddenUsesRecipe",
          "is_bot": false,
          "headline": "Apply best practices (#146)",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-09-23T10:21:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8714b3fc6892f06219ff5478457e729d803bf60",
          "body": null,
          "is_bot": false,
          "headline": "feat: add new recipes to security insights",
          "author_name": "Scott Jungling",
          "author_login": "sjungling",
          "committed_at": "2025-09-23T03:34:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "806e8bff99767733adf0108d9d1cc29a4f25d091",
          "body": null,
          "is_bot": false,
          "headline": "feat: add more GitHub Action security-centric find recipes (#145)",
          "author_name": "Scott Jungling",
          "author_login": "sjungling",
          "committed_at": "2025-09-23T03:28:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5182cc8587a57251c3ff6b396c9188af8668bc59",
          "body": null,
          "is_bot": false,
          "headline": "feat: additional GitHub Action security insight recipes (#144)",
          "author_name": "Scott Jungling",
          "author_login": "sjungling",
          "committed_at": "2025-09-22T23:59:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7307df24411686a1c73695bddac5ab996467513c",
          "body": null,
          "is_bot": false,
          "headline": "feat: check for excessive permissions in GA (#143)",
          "author_name": "Scott Jungling",
          "author_login": "sjungling",
          "committed_at": "2025-09-22T23:22:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11fd2bf1f2fce87e6ac05bc417cf06825dc6f90e",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "OpenRewrite recipe best practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-08-09T17:41:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "849b0c7e89f6fddee40406ae039e69d498282255",
          "body": "* Implementation stub\n\n* Simplify implementation\n\n* Removing with: if no arguments\n\n* Apply suggestions from code review\n\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>\n\n* Apply suggestions from code review\n\nCo-authored-by: github-actions[bot] <41898282+g\n[…]\nions[bot]@users.noreply.github.com>\n\n* Import order\n\n---------\n\nCo-authored-by: Tim te Beek <tim@moderne.io>\nCo-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": false,
          "headline": "`RemoveWorkflowInputArgument` recipe (#139)",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2025-08-08T13:21:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "48aa42592a0c746407fcc67e833edcaf583a420f",
          "body": "…ames (#141)\n\n* Regex to allow hyphens\n\n* Adapting tests to cover hyphens\n\n* Digits in tests",
          "is_bot": false,
          "headline": "`RemoveUnusedWorkflowDispatchInputs` - amend the detection of input n…",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2025-08-08T05:50:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0021b35d1768dbafa652f630d8a90f0206c0dcd5",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.RenameFile?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl#defaults%3DW3sidmFsdWUiOiIuY2xhdWRlL3NldHRpbmdzLmxvY2FsLmpzb24iLCJuYW1lIjoiZmlsZU1hdGNoZXIifSx7InZhbHVlIjoic2V0dGluZ3MuanNvbiIsIm5hbWUiOiJmaWxlTmFtZSJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "rename settings.local.json to settings.json (#140)",
          "author_name": "Kyle Scully",
          "author_login": "zieka",
          "committed_at": "2025-08-05T17:52:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "faa88b0d8945336764c6c2dddd23a447eef0cffc",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "OpenRewrite recipe best practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-08-05T09:51:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3eaa7d72f99aed0c9740eb8a67f67240d2789abc",
          "body": null,
          "is_bot": false,
          "headline": "Safety check against empty workflow_dispatch (#138)",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2025-08-01T12:22:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d98f92bea3bc5d1c7eeb815dd9105bf87734df1",
          "body": null,
          "is_bot": false,
          "headline": "Handling alternate syntax for inputs (#137)",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2025-08-01T12:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1583a469d29ee840179959f3992abfc8709404f6",
          "body": "* Basic impl\n\n* Regexp as constant\n\n* Use JsonPathMatcher\n\n* Simplify removal\n\n* Merge test cases\n\n* Simplify usage detection\n\n* Merge two visitors\n\n* Test case for multiple inputs used\n\n* Fix handling of all inputs removed\n\n* Code suggestions",
          "is_bot": false,
          "headline": "`RemoveUnusedWorkflowDispatchInputs` recipe (#136)",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2025-08-01T11:32:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e5f22b85943f9f5c65aa0eeaad372b853986f1a",
          "body": null,
          "is_bot": false,
          "headline": "Fixing markdown for link (#135)",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2025-08-01T05:44:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e02235ceaf1a49549765d9aec8616bf020cbae51",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/builder/m9HsHwu2Z?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "refactor: Static imports for Collections and Collectors",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-07-30T21:20:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "379fdbe4351be2444058b663603e7cfda4d14874",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "refactor: OpenRewrite Recipe best practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-07-08T15:48:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bfe8ac936d5e6f88c38d458e6d762a534f2baee3",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.staticanalysis.ReorderAnnotations?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "refactor: Reorder annotations alphabetically",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-07-07T10:00:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30f6874ae5716bc11bab5f92bee2693754603d59",
          "body": null,
          "is_bot": false,
          "headline": "ReplaceSecrets and ReplaceSecretKeys",
          "author_name": "Jonathan Schneider",
          "author_login": "jkschneider",
          "committed_at": "2025-07-05T13:33:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22ce8b302d09c58acd9e6eba118df3a1673b62f1",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl#defaults%3DW3sidmFsdWUiOmZhbHNlLCJuYW1lIjoiYWRkSWZNaXNzaW5nIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "refactor: Update Gradle wrapper",
          "author_name": "Shannon Pamperl",
          "author_login": "shanman190",
          "committed_at": "2025-07-04T15:51:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59907b1f5cfb3943b4227e1ccc20b170ad09ff8b",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/builder/zYwEKw0Gm?organizationId=QUxML09wZW4gU291cmNlL09wZW5SZXdyaXRl\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "refactor: org.openrewrite.mavencentral (#133)",
          "author_name": "Laurens Westerlaken",
          "author_login": null,
          "committed_at": "2025-07-02T12:09:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed1d671fd7af73a15e470088169d98d27219fa88",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sidmFsdWUiOiJiaW4iLCJuYW1lIjoiZGlzdHJpYnV0aW9uIn0seyJ2YWx1ZSI6IkZhbHNlIiwibmFtZSI6ImFkZElmTWlzc2luZyJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "refactor: Update Gradle wrapper",
          "author_name": "Shannon Pamperl",
          "author_login": "shanman190",
          "committed_at": "2025-06-05T15:10:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "be068ba3c4ba85c486b0e6b5c43f0240b781f592",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sibmFtZSI6ImRpc3RyaWJ1dGlvbiIsInZhbHVlIjoiYmluIn0seyJuYW1lIjoiYWRkSWZNaXNzaW5nIiwidmFsdWUiOiJGYWxzZSJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "refactor: Update Gradle wrapper",
          "author_name": "Shannon Pamperl",
          "author_login": "shanman190",
          "committed_at": "2025-05-22T17:26:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bd4a35b685b3bf35c6e544f5138c8be1bf098cc",
          "body": null,
          "is_bot": false,
          "headline": "Added symlink to license, added link to licensing page",
          "author_name": "Johan Kragt",
          "author_login": "JohannisK",
          "committed_at": "2025-05-01T14:10:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e81514028566f11f3d3f4f9c28feb7a802f5ff74",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.recipes.rewrite.OpenRewriteRecipeBestPractices?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "refactor: OpenRewrite Recipe best practices",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-04-26T21:33:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ad29f4dc2f3704ab9ae70cbd3efe97ba5c676d2",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.gradle.UpdateGradleWrapper?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sibmFtZSI6ImRpc3RyaWJ1dGlvbiIsInZhbHVlIjoiYmluIn0seyJuYW1lIjoiYWRkSWZNaXNzaW5nIiwidmFsdWUiOiJGYWxzZSJ9XQ%3D%3D\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "refactor: Update Gradle wrapper",
          "author_name": "Shannon Pamperl",
          "author_login": "shanman190",
          "committed_at": "2025-04-25T13:40:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0fcdcf0ee59a864710cd44e0c8e04244f50cc790",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.text.CreateTextFile?organizationId=T3BlblJld3JpdGU%3D#defaults%3DW3sidmFsdWUiOiItLS1cbm5hbWU6IGNpXG5cbm9uOlxuICBwdXNoOlxuICAgIGJyYW5jaGVzOlxuICAgICAgLSBtYWluXG4gICAgdGFncy1pZ25vcmU6XG4gICAgICAtIFwiKlwiXG4gIHB1bGxfcmVx\n[…]\nDb250ZW50cyJ9LHsidmFsdWUiOiIuZ2l0aHViL3dvcmtmbG93cy9jaS55bWwiLCJuYW1lIjoicmVsYXRpdmVGaWxlTmFtZSJ9LHsidmFsdWUiOiJUcnVlIiwibmFtZSI6Im92ZXJ3cml0ZUV4aXN0aW5nIn1d\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Adding OPS_GITHUB_ACTIONS_WEBHOOK for Slack notification of failures",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2025-04-23T07:27:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cc7233103861b913a9dbd1c61b87b14de7f6f81d",
          "body": null,
          "is_bot": false,
          "headline": "Fix MergeYaml constructor calls (#131)",
          "author_name": "Greg Oledzki",
          "author_login": "greg-at-moderne",
          "committed_at": "2025-04-23T06:17:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86dc7d0f602c5db4d71de8a8f9b3294cc9981df4",
          "body": "Use this link to re-run the recipe: https://app.moderne.io/recipes/org.openrewrite.java.recipes.ExamplesExtractor?organizationId=ODQ2MGExMTUtNDg0My00N2EwLTgzMGMtNGE1NGExMTBmZDkw\n\nCo-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "refactor: Extract documentation examples from tests",
          "author_name": "Tim te Beek",
          "author_login": "timtebeek",
          "committed_at": "2025-04-21T20:31:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 87,
      "latest_release_at": "2026-07-14T05:22:32Z",
      "latest_release_tag": "v3.27.0",
      "releases_from_tags": false,
      "days_since_last_push": 3,
      "active_weeks_last_year": 36,
      "days_since_latest_release": 11,
      "mean_days_between_releases": 12.3
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 62,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 5,
      "stars": 1,
      "watchers": 3,
      "fork_history": {
        "days": [
          {
            "date": "2025-03-10",
            "count": 1
          },
          {
            "date": "2025-10-26",
            "count": 1
          },
          {
            "date": "2025-11-10",
            "count": 1
          },
          {
            "date": "2026-03-22",
            "count": 1
          },
          {
            "date": "2026-04-28",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 5,
        "total_forks": 5
      },
      "star_history": null,
      "open_issues_and_prs": 51
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "build.gradle.kts"
      ],
      "largest_source_bytes": 28457,
      "source_files_sampled": 100,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "build.gradle.kts"
      ],
      "advisories": {
        "error": "No resolved dependencies to assess",
        "scope": "repository_graph",
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [],
        "collected": true,
        "truncated": false,
        "total_count": 0,
        "direct_count": 0,
        "indirect_count": 0
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 122,
        "open_issues": 50,
        "closed_ratio": 0.315,
        "closed_issues": 23,
        "closed_unmerged_prs": 10
      },
      "bus_factor": 2,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "timtebeek",
          "commits": 99,
          "avatar_url": "https://avatars.githubusercontent.com/u/1027334?v=4"
        },
        {
          "type": "User",
          "login": "jkschneider",
          "commits": 33,
          "avatar_url": "https://avatars.githubusercontent.com/u/1697736?v=4"
        },
        {
          "type": "User",
          "login": "aegershman",
          "commits": 31,
          "avatar_url": "https://avatars.githubusercontent.com/u/5619476?v=4"
        },
        {
          "type": "User",
          "login": "greg-at-moderne",
          "commits": 15,
          "avatar_url": "https://avatars.githubusercontent.com/u/192309513?v=4"
        },
        {
          "type": "User",
          "login": "shanman190",
          "commits": 13,
          "avatar_url": "https://avatars.githubusercontent.com/u/1707798?v=4"
        },
        {
          "type": "User",
          "login": "sjungling",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/8387?v=4"
        },
        {
          "type": "User",
          "login": "yeikel",
          "commits": 8,
          "avatar_url": "https://avatars.githubusercontent.com/u/8935151?v=4"
        },
        {
          "type": "User",
          "login": "sambsnyd",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/8549033?v=4"
        },
        {
          "type": "User",
          "login": "knutwannheden",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/408765?v=4"
        },
        {
          "type": "User",
          "login": "natedanner",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/882752?v=4"
        }
      ],
      "contributors_sampled": 28,
      "top_contributor_share": 0.381
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "publish.yml",
        "repository-backup.yml",
        "stale.yml",
        "update-known-shas.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": true,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 9,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 9,
            "reason": "22 out of 23 merged PRs checked by a CI test -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 2,
            "reason": "Found 4/19 approved changesets -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 9 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "48c75c3e1fce15a5bbc459f3d2a8fac62a24400d",
        "ran_at": "2026-07-25T17:13:37Z",
        "aggregate_score": 5.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T19:22:11Z",
      "oldest_open_prs": [
        {
          "number": 204,
          "created_at": "2026-07-13T09:31:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-22T14:56:05Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 7,
          "created_at": "2021-10-12T20:45:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 10,
          "created_at": "2021-10-16T19:29:57Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 11,
          "created_at": "2021-11-03T20:16:50Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 20,
          "created_at": "2023-01-05T09:23:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 26,
          "created_at": "2023-01-26T19:01:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 27,
          "created_at": "2023-01-26T19:03:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 28,
          "created_at": "2023-01-26T19:10:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 30,
          "created_at": "2023-01-26T20:21:13Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 32,
          "created_at": "2023-01-28T23:34:48Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 33,
          "created_at": "2023-01-28T23:48:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 34,
          "created_at": "2023-01-28T23:51:46Z",
          "last_comment_at": "2024-08-21T07:50:01Z",
          "last_comment_author": "timtebeek"
        },
        {
          "number": 35,
          "created_at": "2023-01-28T23:53:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 36,
          "created_at": "2023-01-29T09:08:25Z",
          "last_comment_at": "2023-01-29T10:33:20Z",
          "last_comment_author": "timtebeek"
        },
        {
          "number": 40,
          "created_at": "2023-02-05T06:00:35Z",
          "last_comment_at": "2023-06-02T16:21:49Z",
          "last_comment_author": "timtebeek"
        },
        {
          "number": 41,
          "created_at": "2023-02-05T06:07:35Z",
          "last_comment_at": "2023-06-02T16:20:20Z",
          "last_comment_author": "timtebeek"
        },
        {
          "number": 42,
          "created_at": "2023-02-07T22:38:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 46,
          "created_at": "2023-02-11T04:29:33Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 47,
          "created_at": "2023-02-11T23:52:37Z",
          "last_comment_at": "2023-02-13T09:06:40Z",
          "last_comment_author": "timtebeek"
        },
        {
          "number": 48,
          "created_at": "2023-02-13T04:38:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 49,
          "created_at": "2023-02-21T20:12:56Z",
          "last_comment_at": "2023-02-22T10:33:51Z",
          "last_comment_author": "timtebeek"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/openrewrite/rewrite-github-actions",
    "host": "github.com",
    "name": "rewrite-github-actions",
    "owner": "openrewrite"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 63,
      "inputs": {
        "security": 52,
        "vitality": 93,
        "community": 37,
        "governance": 64,
        "engineering": 63
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 93,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 88,
            "inputs": {
              "commits_last_year": 87,
              "human_commit_share": 0.89,
              "days_since_last_push": 3,
              "active_weeks_last_year": 36
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 3 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "36/52 weeks with commits",
                "points": 24.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 36
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "87 commits in the last year",
                "points": 17.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 87
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v3.27.0",
              "releases_from_tags": false,
              "days_since_latest_release": 11,
              "mean_days_between_releases": 12.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 11 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 11
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~12.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 12.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 3,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 3 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 3
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 37,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 7,
            "inputs": {
              "forks": 5,
              "stars": 1,
              "watchers": 3,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "5 forks",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "3 watchers",
                "points": 1.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 64,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 63,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 28,
              "top_contributor_share": 0.381
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 38% of commits",
                "points": 13.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 38
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "28 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 28
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 9 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "merged_prs": 122,
              "open_issues": 50,
              "closed_issues": 23,
              "issue_closed_ratio": 0.315,
              "closed_unmerged_prs": 10
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "32% of issues closed",
                "points": 14.7,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 32
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "122/132 decided PRs merged",
                "points": 35.4,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 122,
                      "decided": 132
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 4/19 approved changesets -- score normalized to 2",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "followers": 984,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "openrewrite",
              "public_repos": 75,
              "account_age_days": 2341
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "984 followers of openrewrite",
                "points": 21.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 984,
                      "login": "openrewrite"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "75 public repos, account ~6 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 75
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 63,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "22 out of 23 merged PRs checked by a CI test -- score normalized to 9",
                "points": 18,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [
                "openrewrite",
                "openrewrite-recipes"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "2 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 52,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 52,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 5.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "22 out of 23 merged PRs checked by a CI test -- score normalized to 9",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 4/19 approved changesets -- score normalized to 2",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 9 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 17
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 58,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.921,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "82 of 89 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 82,
                      "sampled": 89
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.01,
              "toolchain_manifests": [
                "build.gradle.kts"
              ],
              "dependency_bot_commit_share": 0.02
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "build.gradle.kts (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "build.gradle.kts"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "1 of the last 100 commits agent-authored or agent-credited",
                "points": 2,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "2 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 28457,
              "source_files_sampled": 100,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/100 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 100,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T17:14:00.764938Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/openrewrite/rewrite-github-actions.svg",
  "full_name": "openrewrite/rewrite-github-actions",
  "license_state": "custom",
  "license_spdx": null
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистика.