Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-25 22:23 UTC

wso2 / transport-http

JavaApache-2.0★ 49 зірок⑂ 73 форкиз жовт. 2017 р.Переглянути на GitHub ↗

wso2/transport-http має індекс здоров’я 60 зі 100, що відповідає смузі «Помірний». Найвищий показник — Sustainability & Governance (83/100), найнижчий — Security (42/100). Останнє оновлення було 9 днів тому. Більшість нещодавньої роботи виконують 4 учасники.

60
загалом / 100
Помірний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

60
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

WSO2Організація
1 719 підписників383 публічні репозиторіїз груд. 2010 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікація
Mavenorg.wso2.transport.http:org.wso2.transport.http.netty6.4.2-3589 днів тому
Mavenorg.wso2.transport.http:org.wso2.transport.http.netty.feature6.4.2-3589 днів тому
Mavenorg.wso2.transport.http:org.wso2.transport.http.netty.statistics6.4.2-3589 днів тому
Mavenorg.wso2.transport.http:org.wso2.transport.http.netty.statistics.feature6.4.2-3589 днів тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

63Помірний · 22% загального індексу
Як обчислюється оцінка
28.8/36Свіжість push — останній push 9 дн. тому
5.5/36Ритм комітів — 8/52 тижнів із комітами
14.6/18Обсяг комітів — 41 комітів за останній рік
3/10OpenSSF Scorecard: Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3
Використані вхідні дані
commits_last_year41
human_commit_share1
days_since_last_push9
active_weeks_last_year8
Як обчислюється оцінка
16.2/27Випускає релізи — 100 тегів версій (без релізів GitHub)
36/36Свіжість релізів — останній реліз 9 дн. тому
19.8/27Ритм релізів — реліз кожні ~56,2 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count100
latest_release_tagv6.4.2
releases_from_tagsтак
days_since_latest_release9
mean_days_between_releases56,2
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

59Помірний · 18% загального індексу
Як обчислюється оцінка
27.3/60Зірки — 49 зірок
15.5/25Форки — 73 форків
11.6/15Спостерігачі — 122 спостерігачів
Використані вхідні дані
forks73
stars49
watchers122
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (Apache-2.0)
0/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
7.2/7.2Шаблон issue
6.3/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingні
has_issue_templateтак
has_code_of_conductні
has_pull_request_templateтак

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

83Добрий · 24% загального індексу
Як обчислюється оцінка
43.2/54Бас-фактор — на 4 контриб’ютор(ів) припадає половина всіх комітів
17.3/22.5Розподіл комітів — головний контриб’ютор — автор 23% комітів
13.5/13.5Широта контриб’юторів — 68 контриб’юторів
10/10OpenSSF Scorecard: Contributors — project has 21 contributing companies or organizations
Використані вхідні дані
bus_factor4
contributors_sampled68
top_contributor_share0,23
Як обчислюється оцінка
35.1/46.8Вирішення issue — закрито 75% issue
35.8/38.3Прийняття PR — злито 428/457 вирішених PR
4.5/15OpenSSF Scorecard: Code-Review — Found 7/22 approved changesets -- score normalized to 3
Використані вхідні дані
merged_prs428
open_issues8
closed_issues24
issue_closed_ratio0,75
closed_unmerged_prs29
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
23.3/25Охоплення власника — 1 719 підписників у wso2
25/25Послужний список — 383 публічних репозиторіїв, вік облікового запису ~15 р.
Використані вхідні дані
followers1 719
owner_typeOrganization
is_verified
owner_loginwso2
public_repos383
account_age_days5 694

Супровід пакетів

100Відмінний
Як обчислюється оцінка
25/25Опубліковано й доступно — 4 пакет(ів) у maven
35/35Свіжість публікацій — остання публікація 9 дн. тому
20/20Історія версій — 358 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesorg.wso2.transport.http:org.wso2.transport.http.netty, org.wso2.transport.http:org.wso2.transport.http.netty.feature, org.wso2.transport.http:org.wso2.transport.http.netty.statistics, org.wso2.transport.http:org.wso2.transport.http.netty.statistics.feature
ecosystemsmaven
any_deprecatedні
min_days_since_publish9

Інженерна якість

Чи наявні базові інженерні практики та документація?

45У зоні ризику · 20% загального індексу

Інженерні практики

48У зоні ризику
Як обчислюється оцінка
24/24Процеси CI — 1 процес(ів) CI
24/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — 0 out of 7 merged PRs checked by a CI test -- score normalized to 0
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configні
has_precommit_configні

Документація

40У зоні ризику
Як обчислюється оцінка
30/30README
0/25Каталог документації
0/15Сайт документації / домашня сторінка
0/10Опис репозиторію
0/10Теми
10/10Wiki
Використані вхідні дані
topics
has_wikiтак
homepage
has_readmeтак
has_docs_dirні
has_descriptionні

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

42У зоні ризику · 16% загального індексу

Стан безпеки

40У зоні ризику
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — немає даних
0/2.5CI-Tests — 0 out of 7 merged PRs checked by a CI test -- score normalized to 0
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
2.2/7.5Code-Review — Found 7/22 approved changesets -- score normalized to 3
2.5/2.5Contributors — project has 21 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
2.2/7.5Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3
0/5Packaging — немає даних
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate4,1
Виключено з оцінювання (немає даних або не застосовно): branch_protection, packaging, signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
16.3/35Прямі залежності без відомих сповіщень — уражено 2: org.bouncycastle:bcpkix-jdk15on 1.69 (moderate 5.3), org.bouncycastle:bcprov-jdk15on 1.69 (moderate 5.9)
1.8/25Непрямі залежності без відомих сповіщень — уражено 19: io.netty:netty-codec-classes-quic 4.2.12.Final (high 7.5), io.netty:netty-codec-compression 4.2.12.Final (high 7.5), io.netty:netty-codec-dns 4.2.12.Final (high 7.5), ще +16
31.2/40Немає задавнених сповіщень — 2 пакет(ів) зі сповіщеннями без реакції понад 90 дн.; найдавніше опубліковано 1 116 дн. тому
Використані вхідні дані
sourceosv
advisories64
affected_packages21
assessed_packages51
unassessed_packages0
affected_by_severityhigh 15, moderate 6
direct_affected_packages2
Звірено з runtime-замиканням залежностей maven:org.wso2.transport.http:org.wso2.transport.http.netty@6.4.2 — тим, що тягне за собою встановлення опублікованого пакета, — 51 пакетів. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

52Помірний · 0% загального індексу
Як обчислюється оцінка
0/45Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора
0/15Машиночитана документація (llms.txt)
36.3/40Читабельна історія комітів — намір зазначено у 68 з 100 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,68
agent_instruction_files
agent_instruction_max_bytes
Як обчислюється оцінка
12.6/18Розгортання однією командою — components/org.wso2.transport.http.netty.statistics/pom.xml, components/org.wso2.transport.http.netty/pom.xml, features/org.wso2.transport.http.netty.feature/pom.xml (домовленість інструментарію, без раннера задач)
22/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
11/11Статична перевірка типів — Java (статично типізована)
0/10Відтворюване середовище
0/10Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом
0/8Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsтак
lockfiles
has_dockerfileні
typed_languageтак
bootstrap_files
has_devcontainerні
has_linter_configні
typecheck_configs
agent_commit_share0
toolchain_manifestscomponents/org.wso2.transport.http.netty.statistics/pom.xml, components/org.wso2.transport.http.netty/pom.xml, features/org.wso2.transport.http.netty.feature/pom.xml, features/org.wso2.transport.http.netty.statistics.feature/pom.xml, pom.xml
dependency_bot_commit_share0
Як обчислюється оцінка
45/45Типізований код — Java (статично типізована)
55/55Керовані розміри файлів — 0/460 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageJava
largest_source_bytes52 524
source_files_sampled460
oversized_source_files0

Ключові факти

49зірок GitHub
68контриб'юторів
41комітів за останні 12 місяців
9днів від останнього пушу
100релізів
4бас-фактор
8відкритих issue
Mavenпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Докладніше

Історія зірок і форків 0 ★ / 73 ⇿
0Зірки
73Форки
99Релізи

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

01325385063757242017-112022-032026-07
Мажорні 0Мінорні 3Патчі 96

Кожна точка охоплює 8 днів.

OpenSSF Scorecard 4.1 / 10
4.1сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-25 22:22 UTC

10Binary-Artifactsno binaries found in the repo
н/дBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
0CI-Tests0 out of 7 merged PRs checked by a CI test -- score normalized to 0
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
3Code-ReviewFound 7/22 approved changesets -- score normalized to 3
10Contributorsproject has 21 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
3Maintained4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3
н/дPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Прямі залежності 36
РеєстрПакетОбмеження версіїМаніфест
Mavenorg.wso2.eclipse.osgi:org.eclipse.osgi${equinox.osgi.version}pom.xml
Mavenorg.wso2.eclipse.osgi:org.eclipse.osgi.services${equinox.osgi.services.version}pom.xml
Mavenorg.wso2.orbit.io.netty:netty-all${netty.wso2.version}pom.xml
Mavenorg.slf4j:slf4j-api${slf4j.version}pom.xml
Mavenorg.yaml:snakeyaml${org.snakeyaml.version}pom.xml
Mavenorg.wso2.transport.http:org.wso2.transport.http.netty${project.version}pom.xml
Mavenorg.wso2.carbon.messaging:org.wso2.carbon.messaging${carbon.messaging.version}pom.xml
Mavencommons-pool.wso2:commons-pool${commons.pool.version}pom.xml
Mavencom.jcraft:jsch${jsch.version}pom.xml
Mavenorg.wso2.transport.http:org.wso2.transport.http.netty.statistics${project.version}pom.xml
Mavenorg.wso2.carbon.metrics:org.wso2.carbon.metrics.core${carbon.metrics.version}pom.xml
Mavenorg.apache.commons:commons-pool2${org.apache.commons.pool2.version}pom.xml
Mavencommons-net:commons-net${commons-net.version}pom.xml
Mavenorg.bouncycastle:bcprov-jdk15on${bcprov-jdk15on.version}pom.xml
Mavenorg.bouncycastle:bcpkix-jdk15on${bcpkix-jdk15on.version}pom.xml
Mavenio.netty:netty-tcnative-boringssl-static${netty-tcnative-boringssl-static.version}pom.xml
Mavenjavax.xml.bind:jaxb-api${jaxb.api.version}pom.xml
Mavenorg.wso2.eclipse.osgi:org.eclipse.osgicomponents/org.wso2.transport.http.netty.statistics/pom.xml
Mavenorg.wso2.eclipse.osgi:org.eclipse.osgi.servicescomponents/org.wso2.transport.http.netty.statistics/pom.xml
Mavenorg.wso2.carbon.messaging:org.wso2.carbon.messagingcomponents/org.wso2.transport.http.netty.statistics/pom.xml
Mavenorg.wso2.carbon.metrics:org.wso2.carbon.metrics.corecomponents/org.wso2.transport.http.netty.statistics/pom.xml
Mavenorg.wso2.transport.http:org.wso2.transport.http.nettycomponents/org.wso2.transport.http.netty.statistics/pom.xml
Mavenorg.wso2.eclipse.osgi:org.eclipse.osgicomponents/org.wso2.transport.http.netty/pom.xml
Mavenorg.wso2.eclipse.osgi:org.eclipse.osgi.servicescomponents/org.wso2.transport.http.netty/pom.xml
Mavenorg.wso2.orbit.io.netty:netty-allcomponents/org.wso2.transport.http.netty/pom.xml
Mavenorg.slf4j:slf4j-apicomponents/org.wso2.transport.http.netty/pom.xml
Mavencommons-pool.wso2:commons-poolcomponents/org.wso2.transport.http.netty/pom.xml
Mavenorg.yaml:snakeyamlcomponents/org.wso2.transport.http.netty/pom.xml
Mavenorg.bouncycastle:bcprov-jdk15on${bcprov-jdk15on.version}components/org.wso2.transport.http.netty/pom.xml
Mavenorg.bouncycastle:bcpkix-jdk15on${bcpkix-jdk15on.version}components/org.wso2.transport.http.netty/pom.xml
Mavenio.netty:netty-tcnative-boringssl-static${netty-tcnative-boringssl-static.version}components/org.wso2.transport.http.netty/pom.xml
Mavenjavax.xml.bind:jaxb-apicomponents/org.wso2.transport.http.netty/pom.xml
Mavenorg.wso2.transport.http:org.wso2.transport.http.nettyfeatures/org.wso2.transport.http.netty.feature/pom.xml
Mavenorg.wso2.orbit.io.netty:netty-allfeatures/org.wso2.transport.http.netty.feature/pom.xml
Mavencommons-pool.wso2:commons-poolfeatures/org.wso2.transport.http.netty.feature/pom.xml
Mavenorg.wso2.transport.http:org.wso2.transport.http.netty.statisticsfeatures/org.wso2.transport.http.netty.statistics.feature/pom.xml
Усі залежності 56

Повний розв'язаний набір залежностей із графа залежностей GitHub: 31 прямих і 25 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
Mavencom.jcraft:jsch0.1.51.wso2v1пряма
Mavencommons-net:commons-net3.6пряма
Mavencommons-pool.wso2:commons-poolпряма
Mavencommons-pool.wso2:commons-pool1.5.6.wso2v1пряма
Mavenio.netty:netty-tcnative-boringssl-staticпряма
Mavenio.netty:netty-tcnative-boringssl-static2.0.65пряма
Mavenjavax.xml.bind:jaxb-apiпряма
Mavenjavax.xml.bind:jaxb-api2.3.1пряма
Mavenorg.apache.commons:commons-pool22.4.2пряма
Mavenorg.bouncycastle:bcpkix-jdk15onпряма
Mavenorg.bouncycastle:bcpkix-jdk15on1.69пряма
Mavenorg.bouncycastle:bcprov-jdk15onпряма
Mavenorg.bouncycastle:bcprov-jdk15on1.69пряма
Mavenorg.slf4j:slf4j-apiпряма
Mavenorg.slf4j:slf4j-api1.7.5пряма
Mavenorg.wso2.carbon.messaging:org.wso2.carbon.messagingпряма
Mavenorg.wso2.carbon.messaging:org.wso2.carbon.messaging3.0.2пряма
Mavenorg.wso2.carbon.metrics:org.wso2.carbon.metrics.coreпряма
Mavenorg.wso2.carbon.metrics:org.wso2.carbon.metrics.core2.0.0пряма
Mavenorg.wso2.eclipse.osgi:org.eclipse.osgiпряма
Mavenorg.wso2.eclipse.osgi:org.eclipse.osgi3.10.2.v20150203-1939пряма
Mavenorg.wso2.eclipse.osgi:org.eclipse.osgi.servicesпряма
Mavenorg.wso2.eclipse.osgi:org.eclipse.osgi.services3.4.0.v20140312-2051пряма
Mavenorg.wso2.orbit.io.netty:netty-allпряма
Mavenorg.wso2.orbit.io.netty:netty-all4.2.12.wso2v1пряма
Mavenorg.wso2.transport.http:org.wso2.transport.http.nettyпряма
Mavenorg.wso2.transport.http:org.wso2.transport.http.netty6.4.3-SNAPSHOTпряма
Mavenorg.wso2.transport.http:org.wso2.transport.http.netty.statisticsпряма
Mavenorg.wso2.transport.http:org.wso2.transport.http.netty.statistics6.4.3-SNAPSHOTпряма
Mavenorg.yaml:snakeyamlпряма
Mavenorg.yaml:snakeyaml2.6пряма
Mavencom.google.guava:guavaнепряма
Mavencom.google.guava:guava33.0.0-jreнепряма
Mavencom.mashape.unirest:unirest-javaнепряма
Mavencom.mashape.unirest:unirest-java1.4.9непряма
Mavencommons-io.wso2:commons-ioнепряма
Mavencommons-io:commons-io2.11.0непряма
Mavenorg.apache.httpcomponents:httpasyncclient4.0.2непряма
Mavenorg.apache.httpcomponents:httpclient4.3.6непряма
Mavenorg.apache.httpcomponents:httpmime4.3.6непряма
Mavenorg.apache.maven.plugins:maven-antrun-pluginнепряма
Mavenorg.apache.maven.plugins:maven-checkstyle-plugin2.17непряма
Mavenorg.apache.maven.plugins:maven-compiler-pluginнепряма
Mavenorg.apache.maven.plugins:maven-deploy-pluginнепряма
Mavenorg.apache.maven.plugins:maven-javadoc-pluginнепряма
Mavenorg.apache.maven.plugins:maven-release-pluginнепряма
Mavenorg.apache.maven.plugins:maven-surefire-plugin2.22.2непряма
Mavenorg.atomikos.wso2:atomikos3.8.0.wso2v1непряма
Mavenorg.codehaus.mojo:cobertura-maven-plugin2.7непряма
Mavenorg.codehaus.mojo:findbugs-maven-plugin3.0.5непряма
Mavenorg.jacoco:jacoco-maven-plugin0.7.8непряма
Mavenorg.mock-server:mockserver-netty3.11непряма
Mavenorg.slf4j:slf4j-log4j121.7.5непряма
Mavenorg.testng:testngнепряма
Mavenorg.testng:testng6.9.10непряма
Mavenorg.wso2.carbon.maven:carbon-feature-pluginнепряма
Сповіщення про залежності 21

Встановлення maven:org.wso2.transport.http:org.wso2.transport.http.netty@6.4.2 тягне 51 пакетів, прямих і транзитивних: 21 мають відомі сповіщення, з них 2 — прямі залежності.

ПакетВерсіяЗв'язокКритичністьСповіщеньВиправлено в
io.netty:netty-codec-classes-quic4.2.12.Finalнепрямависока24.2.15.Final
io.netty:netty-codec-compression4.2.12.Finalнепрямависока24.2.16.Final
io.netty:netty-codec-dns4.2.12.Finalнепрямависока24.2.16.Final
io.netty:netty-codec-haproxy4.2.12.Finalнепрямависока44.2.16.Final
io.netty:netty-codec-http4.2.12.Finalнепрямависока144.2.16.Final
io.netty:netty-codec-http24.2.12.Finalнепрямависока54.2.16.Final
io.netty:netty-codec-http34.2.12.Finalнепрямависока44.2.16.Final
io.netty:netty-codec-redis4.2.12.Finalнепрямависока54.2.15.Final
io.netty:netty-codec-stomp4.2.12.Finalнепрямависока24.2.16.Final
io.netty:netty-codec-xml4.2.12.Finalнепрямависока24.2.16.Final
io.netty:netty-handler4.2.12.Finalнепрямависока34.2.15.Final
io.netty:netty-handler-ssl-ocsp4.2.12.Finalнепрямависока34.2.16.Final
io.netty:netty-resolver-dns4.2.12.Finalнепрямависока34.2.15.Final
io.netty:netty-transport-classes-epoll4.2.12.Finalнепрямависока14.2.13.Final
io.netty:netty-transport-sctp4.2.12.Finalнепрямависока14.2.15.Final
org.bouncycastle:bcpkix-jdk15on1.69прямапомірна22.0.8
org.bouncycastle:bcprov-jdk15on1.69прямапомірна52.73.6
io.netty:netty-codec-mqtt4.2.12.Finalнепрямапомірна14.2.13.Final
io.netty:netty-handler-proxy4.2.12.Finalнепрямапомірна14.2.13.Final
io.netty:netty-transport-native-epoll4.2.12.Finalнепрямапомірна14.2.15.Final
io.netty:netty-transport-native-kqueue4.2.12.Finalнепрямапомірна14.2.15.Final

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 12947,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Java": 2345722
      },
      "pushed_at": "2026-07-16T09:10:56Z",
      "created_at": "2017-10-18T03:18:32Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-16T09:23:20Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "master",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Java",
      "significant_languages": [
        "Java"
      ]
    },
    "owner": {
      "blog": "https://wso2.com",
      "name": "WSO2",
      "type": "Organization",
      "login": "wso2",
      "company": null,
      "location": "787 Castro Street, Mountain View, CA 94041",
      "followers": 1719,
      "avatar_url": "https://avatars.githubusercontent.com/u/533043?v=4",
      "created_at": "2010-12-22T08:54:38Z",
      "is_verified": null,
      "public_repos": 383,
      "account_age_days": 5694
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v6.4.2",
          "kind": "patch",
          "published_at": "2026-07-16T08:52:33Z"
        },
        {
          "tag": "v6.4.1",
          "kind": "patch",
          "published_at": "2026-04-07T08:38:17Z"
        },
        {
          "tag": "v6.4.0",
          "kind": "minor",
          "published_at": "2026-03-23T10:24:34Z"
        },
        {
          "tag": "v6.3.60",
          "kind": "patch",
          "published_at": "2026-02-18T08:36:06Z"
        },
        {
          "tag": "v6.3.59",
          "kind": "patch",
          "published_at": "2026-02-15T11:50:33Z"
        },
        {
          "tag": "v6.3.58",
          "kind": "patch",
          "published_at": "2026-01-29T16:24:04Z"
        },
        {
          "tag": "v6.3.57",
          "kind": "patch",
          "published_at": "2026-01-27T09:11:53Z"
        },
        {
          "tag": "v6.3.56",
          "kind": "patch",
          "published_at": "2025-10-09T06:10:46Z"
        },
        {
          "tag": "v6.3.55",
          "kind": "patch",
          "published_at": "2025-09-09T07:55:41Z"
        },
        {
          "tag": "v6.3.54",
          "kind": "patch",
          "published_at": "2025-02-25T05:07:35Z"
        },
        {
          "tag": "v6.3.53",
          "kind": "patch",
          "published_at": "2025-02-13T05:35:03Z"
        },
        {
          "tag": "v6.3.52",
          "kind": "patch",
          "published_at": "2025-01-22T06:34:31Z"
        },
        {
          "tag": "v6.3.51",
          "kind": "patch",
          "published_at": "2024-03-26T19:18:00Z"
        },
        {
          "tag": "v6.3.50",
          "kind": "patch",
          "published_at": "2024-01-26T05:03:35Z"
        },
        {
          "tag": "v6.3.49",
          "kind": "patch",
          "published_at": "2023-10-13T12:06:17Z"
        },
        {
          "tag": "v6.3.48",
          "kind": "patch",
          "published_at": "2023-10-12T11:28:19Z"
        },
        {
          "tag": "v6.3.47",
          "kind": "patch",
          "published_at": "2023-09-17T06:01:04Z"
        },
        {
          "tag": "v6.3.46",
          "kind": "patch",
          "published_at": "2023-07-28T03:08:38Z"
        },
        {
          "tag": "v6.3.45",
          "kind": "patch",
          "published_at": "2023-06-27T11:37:04Z"
        },
        {
          "tag": "v6.3.44",
          "kind": "patch",
          "published_at": "2023-02-24T06:31:54Z"
        },
        {
          "tag": "v6.3.43",
          "kind": "patch",
          "published_at": "2023-02-09T04:16:20Z"
        },
        {
          "tag": "v6.3.42",
          "kind": "patch",
          "published_at": "2023-02-02T06:44:01Z"
        },
        {
          "tag": "v6.3.41",
          "kind": "patch",
          "published_at": "2023-01-28T09:36:48Z"
        },
        {
          "tag": "v6.3.40",
          "kind": "patch",
          "published_at": "2022-11-01T09:49:34Z"
        },
        {
          "tag": "v6.3.39",
          "kind": "patch",
          "published_at": "2022-11-01T08:13:08Z"
        },
        {
          "tag": "v6.3.38",
          "kind": "patch",
          "published_at": "2022-09-27T06:27:08Z"
        },
        {
          "tag": "v6.3.37",
          "kind": "patch",
          "published_at": "2022-09-16T05:00:34Z"
        },
        {
          "tag": "v6.3.36",
          "kind": "patch",
          "published_at": "2022-05-13T11:08:22Z"
        },
        {
          "tag": "v6.3.35",
          "kind": "patch",
          "published_at": "2022-02-10T10:20:21Z"
        },
        {
          "tag": "v6.3.34",
          "kind": "patch",
          "published_at": "2022-02-10T07:27:10Z"
        },
        {
          "tag": "v6.3.33",
          "kind": "patch",
          "published_at": "2022-02-08T11:39:00Z"
        },
        {
          "tag": "v6.3.32",
          "kind": "patch",
          "published_at": "2022-02-04T06:38:35Z"
        },
        {
          "tag": "v6.3.31",
          "kind": "patch",
          "published_at": "2022-02-03T04:13:53Z"
        },
        {
          "tag": "v6.3.30",
          "kind": "patch",
          "published_at": "2022-01-20T04:20:40Z"
        },
        {
          "tag": "v6.3.29",
          "kind": "patch",
          "published_at": "2022-01-19T07:21:45Z"
        },
        {
          "tag": "v6.3.28",
          "kind": "patch",
          "published_at": "2022-01-18T02:55:34Z"
        },
        {
          "tag": "v6.3.27",
          "kind": "patch",
          "published_at": "2021-12-12T12:35:11Z"
        },
        {
          "tag": "v6.3.26",
          "kind": "patch",
          "published_at": "2021-12-12T08:58:39Z"
        },
        {
          "tag": "v6.3.25",
          "kind": "patch",
          "published_at": "2021-05-12T06:36:27Z"
        },
        {
          "tag": "v6.3.24",
          "kind": "patch",
          "published_at": "2021-04-30T06:18:22Z"
        },
        {
          "tag": "v6.3.23",
          "kind": "patch",
          "published_at": "2021-04-28T04:02:19Z"
        },
        {
          "tag": "v6.3.22",
          "kind": "patch",
          "published_at": "2021-04-02T10:49:07Z"
        },
        {
          "tag": "v6.3.21",
          "kind": "patch",
          "published_at": "2021-03-09T09:54:12Z"
        },
        {
          "tag": "v6.3.20",
          "kind": "patch",
          "published_at": "2021-01-05T05:40:25Z"
        },
        {
          "tag": "v6.3.19",
          "kind": "patch",
          "published_at": "2020-12-18T13:44:28Z"
        },
        {
          "tag": "v6.3.18",
          "kind": "patch",
          "published_at": "2020-12-03T04:12:14Z"
        },
        {
          "tag": "v6.3.17",
          "kind": "patch",
          "published_at": "2020-11-29T15:15:01Z"
        },
        {
          "tag": "v6.3.16",
          "kind": "patch",
          "published_at": "2020-10-28T11:53:45Z"
        },
        {
          "tag": "v6.3.15",
          "kind": "patch",
          "published_at": "2020-10-22T04:19:56Z"
        },
        {
          "tag": "v6.3.14",
          "kind": "patch",
          "published_at": "2020-10-19T14:23:35Z"
        },
        {
          "tag": "v6.3.13",
          "kind": "patch",
          "published_at": "2020-10-15T03:38:03Z"
        },
        {
          "tag": "v6.3.12",
          "kind": "patch",
          "published_at": "2020-09-28T06:22:48Z"
        },
        {
          "tag": "v6.3.11",
          "kind": "patch",
          "published_at": "2020-08-10T09:35:41Z"
        },
        {
          "tag": "v6.3.10",
          "kind": "patch",
          "published_at": "2020-06-26T10:48:23Z"
        },
        {
          "tag": "v6.3.9",
          "kind": "patch",
          "published_at": "2020-06-14T19:36:36Z"
        },
        {
          "tag": "v6.3.8",
          "kind": "patch",
          "published_at": "2020-03-30T16:07:27Z"
        },
        {
          "tag": "v6.3.7",
          "kind": "patch",
          "published_at": "2020-03-30T04:49:31Z"
        },
        {
          "tag": "v6.3.6",
          "kind": "patch",
          "published_at": "2020-03-25T06:46:56Z"
        },
        {
          "tag": "v6.3.5",
          "kind": "patch",
          "published_at": "2020-03-11T04:56:42Z"
        },
        {
          "tag": "v6.3.4",
          "kind": "patch",
          "published_at": "2020-02-26T11:21:29Z"
        },
        {
          "tag": "v6.3.3",
          "kind": "patch",
          "published_at": "2020-02-11T03:46:18Z"
        },
        {
          "tag": "v6.3.2",
          "kind": "patch",
          "published_at": "2020-02-10T05:58:39Z"
        },
        {
          "tag": "v6.3.1",
          "kind": "patch",
          "published_at": "2020-02-10T04:27:21Z"
        },
        {
          "tag": "v6.3.0",
          "kind": "minor",
          "published_at": "2020-01-26T16:18:43Z"
        },
        {
          "tag": "v6.2.34",
          "kind": "patch",
          "published_at": "2019-12-03T05:10:33Z"
        },
        {
          "tag": "v6.2.33",
          "kind": "patch",
          "published_at": "2019-11-14T10:17:52Z"
        },
        {
          "tag": "v6.2.32",
          "kind": "patch",
          "published_at": "2019-11-14T09:22:38Z"
        },
        {
          "tag": "v6.2.31",
          "kind": "patch",
          "published_at": "2019-11-06T05:16:34Z"
        },
        {
          "tag": "v6.2.30",
          "kind": "patch",
          "published_at": "2019-10-21T08:36:14Z"
        },
        {
          "tag": "v6.2.29",
          "kind": "patch",
          "published_at": "2019-10-20T02:33:42Z"
        },
        {
          "tag": "v6.2.28",
          "kind": "patch",
          "published_at": "2019-10-16T09:23:07Z"
        },
        {
          "tag": "v6.2.27",
          "kind": "patch",
          "published_at": "2019-10-14T06:46:16Z"
        },
        {
          "tag": "v6.2.26",
          "kind": "patch",
          "published_at": "2019-09-16T05:35:52Z"
        },
        {
          "tag": "v6.2.25",
          "kind": "patch",
          "published_at": "2019-09-09T10:55:39Z"
        },
        {
          "tag": "v6.2.24",
          "kind": "patch",
          "published_at": "2019-09-09T09:38:55Z"
        },
        {
          "tag": "v6.2.23",
          "kind": "patch",
          "published_at": "2019-09-08T10:02:59Z"
        },
        {
          "tag": "v6.2.22",
          "kind": "patch",
          "published_at": "2019-09-06T19:52:52Z"
        },
        {
          "tag": "v6.2.21",
          "kind": "patch",
          "published_at": "2019-09-06T18:55:07Z"
        },
        {
          "tag": "v6.2.20",
          "kind": "patch",
          "published_at": "2019-09-06T18:16:43Z"
        },
        {
          "tag": "v6.2.19",
          "kind": "patch",
          "published_at": "2019-09-06T16:05:45Z"
        },
        {
          "tag": "v6.2.18",
          "kind": "patch",
          "published_at": "2019-09-06T07:10:43Z"
        },
        {
          "tag": "v6.2.17",
          "kind": "patch",
          "published_at": "2019-09-06T05:28:19Z"
        },
        {
          "tag": "v6.2.16",
          "kind": "patch",
          "published_at": "2019-09-06T04:51:15Z"
        },
        {
          "tag": "v6.2.15",
          "kind": "patch",
          "published_at": "2019-09-03T10:02:48Z"
        },
        {
          "tag": "v6.2.14",
          "kind": "patch",
          "published_at": "2019-09-02T14:14:12Z"
        },
        {
          "tag": "v6.2.13",
          "kind": "patch",
          "published_at": "2019-08-30T15:37:21Z"
        },
        {
          "tag": "v6.2.12",
          "kind": "patch",
          "published_at": "2019-08-30T08:57:57Z"
        },
        {
          "tag": "v6.2.11",
          "kind": "patch",
          "published_at": "2019-08-29T12:06:32Z"
        },
        {
          "tag": "v6.2.10",
          "kind": "patch",
          "published_at": "2019-08-29T10:59:08Z"
        },
        {
          "tag": "v6.2.9",
          "kind": "patch",
          "published_at": "2019-08-28T11:35:14Z"
        },
        {
          "tag": "v6.2.8",
          "kind": "patch",
          "published_at": "2019-08-27T05:55:28Z"
        },
        {
          "tag": "v6.2.7",
          "kind": "patch",
          "published_at": "2019-08-27T04:01:21Z"
        },
        {
          "tag": "v6.2.6",
          "kind": "patch",
          "published_at": "2019-08-26T11:20:09Z"
        },
        {
          "tag": "v6.2.5",
          "kind": "patch",
          "published_at": "2019-08-22T08:38:01Z"
        },
        {
          "tag": "v6.2.4",
          "kind": "patch",
          "published_at": "2019-08-20T06:23:34Z"
        },
        {
          "tag": "v6.2.3",
          "kind": "patch",
          "published_at": "2019-08-20T05:49:40Z"
        },
        {
          "tag": "v6.2.2",
          "kind": "patch",
          "published_at": "2019-08-19T11:35:04Z"
        },
        {
          "tag": "v6.2.1",
          "kind": "patch",
          "published_at": "2019-08-19T06:42:48Z"
        },
        {
          "tag": "v6.2.0",
          "kind": "minor",
          "published_at": "2019-08-16T15:59:54Z"
        },
        {
          "tag": "v6.1.12",
          "kind": "patch",
          "published_at": "2019-08-15T01:45:20Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "cec8d3ac2705cb8ad32a1a8e5796c60ee9f37fc8",
          "body": "…pment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #918] [Release 6.4.2] prepare for next develo…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-07-16T08:52:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f375cb6163decd2e866b10bce2fb1d8ba2a6a9a0",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #918] [Release 6.4.2] prepare release v6.4.2",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-07-16T08:52:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c62799c17c9e18b2a46939db359f40b4eef9c18",
          "body": "Upgrade snakeyaml version",
          "is_bot": false,
          "headline": "Merge pull request #490 from chanikag/470libs",
          "author_name": "chanikag",
          "author_login": "chanikag",
          "committed_at": "2026-07-16T08:33:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a30c28dfa849eb41988cea3fd106b13443ad8b9",
          "body": "$subject",
          "is_bot": false,
          "headline": "Upgrade snakeyaml version",
          "author_name": "chanikag",
          "author_login": "chanikag",
          "committed_at": "2026-07-16T04:07:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31d7e478331459ee717f4aec6a599bf2f57cc568",
          "body": "…pment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #916] [Release 6.4.1] prepare for next develo…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-04-07T08:38:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab478f395fd532f5850782032833396bee4fc5f4",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #916] [Release 6.4.1] prepare release v6.4.1",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-04-07T08:38:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b58e3dba34b6c6a6f97c5c1af8f4a69e8234e2c",
          "body": "Bump netty version",
          "is_bot": false,
          "headline": "Merge pull request #489 from DedunuKarunarathne/master",
          "author_name": "chanikag",
          "author_login": "chanikag",
          "committed_at": "2026-04-07T08:17:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b57afb6744e33294edd9dd18af3722d048833132",
          "body": null,
          "is_bot": false,
          "headline": "Bump netty version",
          "author_name": "DedunuKarunarathne",
          "author_login": "DedunuKarunarathne",
          "committed_at": "2026-04-07T08:14:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1e7e9888aed783311ea241867c9c37e7d198b8b",
          "body": "…pment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #914] [Release 6.4.0] prepare for next develo…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-03-23T10:24:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3bd6abfc626269a038894e15a821b2884df2fca6",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #914] [Release 6.4.0] prepare release v6.4.0",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-03-23T10:24:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7cabc7921861e2b9588f3a4cd3f394817390423c",
          "body": "Provide support to compile the repo in JDK 21",
          "is_bot": false,
          "headline": "Merge pull request #488 from arunans23/jdk21",
          "author_name": "Arunan Sugunakumar",
          "author_login": "arunans23",
          "committed_at": "2026-03-23T10:04:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5b71600cfca533836aedffe790d680c42422874",
          "body": null,
          "is_bot": false,
          "headline": "Provide support to compile the repo in JDK 21",
          "author_name": "Arunan Sugunakumar",
          "author_login": "arunans23",
          "committed_at": "2026-03-19T05:21:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb3a665d1ab944000d5dbdb7a7ddb642a193cc70",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #912] [Release 6.3.60] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-02-18T08:36:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5bd2bf3e85352a5a9787e12e56bc7cabce53b899",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #912] [Release 6.3.60] prepare release v6.3.60",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-02-18T08:36:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2a81a73d69a0eaa5e656f5b8067dec0c2f3e4f0",
          "body": "fix(http2): configure max header size for HTTP2 requests",
          "is_bot": false,
          "headline": "Merge pull request #487 from wso2/fix/max-header-size-http2",
          "author_name": "Thisaru Guruge",
          "author_login": "ThisaruGuruge",
          "committed_at": "2026-02-18T08:16:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bcb5598da74d6221af5f58f86c735eb06f81a7d",
          "body": null,
          "is_bot": false,
          "headline": "Apply suggestions from code review",
          "author_name": "Thisaru Guruge",
          "author_login": "ThisaruGuruge",
          "committed_at": "2026-02-18T08:12:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "400666a9d5959d237041090d7b115e6ef8df24e4",
          "body": null,
          "is_bot": false,
          "headline": "fix(http2): configure max header size for HTTP2 requests",
          "author_name": "Thisaru Guruge",
          "author_login": "ThisaruGuruge",
          "committed_at": "2026-02-18T08:03:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "213a72c2168754ebef6c0009d0113d34d6de58f5",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #910] [Release 6.3.59] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-02-15T11:50:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9d776653c09f4cd1d4b3747b5f7bc62b082ec12",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #910] [Release 6.3.59] prepare release v6.3.59",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-02-15T11:50:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f3b2834910510e9c71fae360d42a4f369f98e88",
          "body": "Update netty version",
          "is_bot": false,
          "headline": "Merge pull request #486 from DedunuKarunarathne/netty-up",
          "author_name": "DedunuKarunarathne",
          "author_login": "DedunuKarunarathne",
          "committed_at": "2026-02-15T11:31:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42f35e2370f13998cf8a825239ca0332a438858c",
          "body": null,
          "is_bot": false,
          "headline": "Update netty version",
          "author_name": "DedunuKarunarathne",
          "author_login": "DedunuKarunarathne",
          "committed_at": "2026-02-15T11:27:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e53bfc5425e71a09ff4aaa0fa96d56479e5da397",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #908] [Release 6.3.58] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-01-29T16:24:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec97fcf8667e7fb6762db96357617edc623fe2db",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #908] [Release 6.3.58] prepare release v6.3.58",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-01-29T16:24:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6874fb55f8afd21547a9cedda2019b74841e7a9d",
          "body": "Upgrade netty version to 4.2.9.wso2v1",
          "is_bot": false,
          "headline": "Merge pull request #483 from wso2/netty-4.2.9-upgrade",
          "author_name": "DedunuKarunarathne",
          "author_login": "DedunuKarunarathne",
          "committed_at": "2026-01-29T16:03:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dab1734235beaa65e93ca413fb276cd696c4172c",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade netty version to 4.2.9.wso2v1",
          "author_name": "DedunuKarunarathne",
          "author_login": "DedunuKarunarathne",
          "committed_at": "2026-01-29T09:14:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a79049a88745a1f1c9cafcda776860158aef230c",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #906] [Release 6.3.57] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-01-27T09:11:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dcbe2a28303be5b97a9941f223b2f5d45abe160c",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #906] [Release 6.3.57] prepare release v6.3.57",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2026-01-27T09:11:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72203f90f9c3f61bf520359fcfce8589fff20fe2",
          "body": "Update snakeyaml version",
          "is_bot": false,
          "headline": "Merge pull request #482 from chanikag/master",
          "author_name": "chanikag",
          "author_login": "chanikag",
          "committed_at": "2026-01-27T08:50:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f40a1e5529625285723787e652ddab33d31d954",
          "body": "$subject",
          "is_bot": false,
          "headline": "Update snakeyaml version",
          "author_name": "chanikag",
          "author_login": "chanikag",
          "committed_at": "2026-01-27T08:48:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04c3305b9cef5716c27e9b04b61a0dabbfd5ef01",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #904] [Release 6.3.56] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2025-10-09T06:10:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce6a09e2ec8d151e8c7f23bc9b9b38d18cf6c928",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #904] [Release 6.3.56] prepare release v6.3.56",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2025-10-09T06:10:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "499dbe9ea481c970060267762540df32e2bb4c5f",
          "body": "Bump Netty version",
          "is_bot": false,
          "headline": "Merge pull request #481 from wso2/DedunuKarunarathne-patch-2",
          "author_name": "DedunuKarunarathne",
          "author_login": "DedunuKarunarathne",
          "committed_at": "2025-10-09T05:51:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4b5369b9ef466bd0ddc9ac2d5f254c2c6d3c37f",
          "body": null,
          "is_bot": false,
          "headline": "Bump Netty version",
          "author_name": "DedunuKarunarathne",
          "author_login": "DedunuKarunarathne",
          "committed_at": "2025-10-09T05:48:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8a6d46f8fbe0b82daefcc36dc57db762d3f75b0",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #902] [Release 6.3.55] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2025-09-09T07:55:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72602efcef79d33139feae5b8444127dce2267f3",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #902] [Release 6.3.55] prepare release v6.3.55",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2025-09-09T07:55:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b111fa1e9ed823858766b29e3c289f22b5e40c5",
          "body": "…ewal\n\nRenew expired OCSP certificates",
          "is_bot": false,
          "headline": "Merge pull request #479 from DakshithaS/expired-ocsp-certificates-ren…",
          "author_name": "Heshan Sudarshana",
          "author_login": "HeshanSudarshana",
          "committed_at": "2025-09-09T07:25:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9ecabef46051591b60eddf9503de28aef52ba63",
          "body": null,
          "is_bot": false,
          "headline": "Renew expired OCSP certificates",
          "author_name": "dakshithas",
          "author_login": "DakshithaS",
          "committed_at": "2025-09-09T07:21:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fec41b8738bd9cb74eae5ccc2e714fd448ae9656",
          "body": "…-renewal\n\nRenew expired OCSP certificates",
          "is_bot": false,
          "headline": "Merge pull request #478 from DakshithaS/fix/expired-ocsp-certificates…",
          "author_name": "Heshan Sudarshana",
          "author_login": "HeshanSudarshana",
          "committed_at": "2025-09-09T06:16:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c288df0d49a918a91ba77c5c012080989737b5b6",
          "body": null,
          "is_bot": false,
          "headline": "Renew expired OCSP certificates",
          "author_name": "dakshithas",
          "author_login": "DakshithaS",
          "committed_at": "2025-09-09T05:57:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f25a679e37baf03e797521cbd7e1cca1ddb4b15e",
          "body": "Update io.netty version from 4.1.118.Final to 4.1.126.Final",
          "is_bot": false,
          "headline": "Merge pull request #477 from DakshithaS/dependency-updates",
          "author_name": "Heshan Sudarshana",
          "author_login": "HeshanSudarshana",
          "committed_at": "2025-09-08T07:13:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02452da878f2679da20c30eb4c9765e4520b6beb",
          "body": null,
          "is_bot": false,
          "headline": "Update io.netty version from 4.1.118.Final to 4.1.126.Final",
          "author_name": "dakshithas",
          "author_login": "DakshithaS",
          "committed_at": "2025-09-08T06:31:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b47ee589352677a1afe1685e3f0ff90b98c8fb87",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #894] [Release 6.3.54] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2025-02-25T05:07:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93c2eec198f3030ac12b74a42d5e4561039a5db0",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #894] [Release 6.3.54] prepare release v6.3.54",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2025-02-25T05:07:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3511016c40f9510411acd15ccec725535c8258a3",
          "body": "Initialise SSL context in the client initialisation",
          "is_bot": false,
          "headline": "Merge pull request #476 from TharmiganK/ssl-context",
          "author_name": "Bhashinee",
          "author_login": "Bhashinee",
          "committed_at": "2025-02-25T04:48:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f0873582ea905cffb76c1094e528598a9c36722",
          "body": null,
          "is_bot": false,
          "headline": "Fix the logic in ssl context initialization",
          "author_name": "TharmiganK",
          "author_login": "TharmiganK",
          "committed_at": "2025-02-24T13:28:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ff0b4dc293f8821a10df0c4108e4eaa03cebb5a",
          "body": null,
          "is_bot": false,
          "headline": "Fix test failure",
          "author_name": "TharmiganK",
          "author_login": "TharmiganK",
          "committed_at": "2025-02-24T11:17:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd5731b5c0a24a8bb5c3bcf4e420687854a17d82",
          "body": null,
          "is_bot": false,
          "headline": "Update HTTPS test cases",
          "author_name": "TharmiganK",
          "author_login": "TharmiganK",
          "committed_at": "2025-02-24T10:59:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e598a596756abb195a00d90f1481eafe35c82b34",
          "body": null,
          "is_bot": false,
          "headline": "Introduce an API to initialize SSL context",
          "author_name": "TharmiganK",
          "author_login": "TharmiganK",
          "committed_at": "2025-02-24T10:58:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f794bf9ee9681d86b760c55944af79779a2cc26d",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #892] [Release 6.3.53] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2025-02-13T05:35:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a14f911c73e36eee9b13d0575b73801ccefdd95",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #892] [Release 6.3.53] prepare release v6.3.53",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2025-02-13T05:35:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a11c5ef6d27f02a1d34fa87471c2257fd08a67e1",
          "body": "Update Netty version to the latest",
          "is_bot": false,
          "headline": "Merge pull request #475 from wso2/DedunuKarunarathne-patch-1",
          "author_name": "Arunan Sugunakumar",
          "author_login": "arunans23",
          "committed_at": "2025-02-13T05:16:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0fcd87160d9671338c7b7209c11e2c490dcad618",
          "body": null,
          "is_bot": false,
          "headline": "Update pom.xml",
          "author_name": "DedunuKarunarathne",
          "author_login": "DedunuKarunarathne",
          "committed_at": "2025-02-13T05:11:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08e5aa48fc56a50ce33fcfd21a5c88d756fdebcd",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #890] [Release 6.3.52] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2025-01-22T06:34:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d80121dfe2bd03c3d13f94b2089623352af75828",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #890] [Release 6.3.52] prepare release v6.3.52",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2025-01-22T06:34:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c32dee43cb16b0c839ad73fb477e1c57039bc11",
          "body": "Upgrade netty version",
          "is_bot": false,
          "headline": "Merge pull request #474 from kalaiyarasiganeshalingam/master",
          "author_name": "Arunan Sugunakumar",
          "author_login": "arunans23",
          "committed_at": "2025-01-22T06:15:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99bc545c24c4455a7a4c862d29b9841921a81165",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade netty version",
          "author_name": "Kalaiyarasiganeshalingam",
          "author_login": "kalaiyarasiganeshalingam",
          "committed_at": "2025-01-22T05:45:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76ac4d28a8b312fcbfdbe44b554b40ae4487f598",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #888] [Release 6.3.51] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2024-03-26T19:18:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46a6fe7555dab8894ca92116e84323bb06b97829",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #888] [Release 6.3.51] prepare release v6.3.51",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2024-03-26T19:18:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "705a43f7c9aa76738bce9c044818ffccfb0c7426",
          "body": "Bump netty version to 4.1.108.Final to fix CVE-2024-29025",
          "is_bot": false,
          "headline": "Merge pull request #473 from AnuGayan/master",
          "author_name": "Anusha Jayasundara",
          "author_login": "AnuGayan",
          "committed_at": "2024-03-26T17:42:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "432a7fc5aa74aa6185cd72725ee82d3951adf95a",
          "body": null,
          "is_bot": false,
          "headline": "Bump netty version to 4.1.108.Final to fix CVE-2024-29025",
          "author_name": "AnuGayan",
          "author_login": "AnuGayan",
          "committed_at": "2024-03-26T17:23:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "534ea29380fdb94b48f83c9538307007b0fb53da",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #884] [Release 6.3.50] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2024-01-26T05:03:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38c42b74858d13b2f91735cc0d05863f7599b4c8",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #884] [Release 6.3.50] prepare release v6.3.50",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2024-01-26T05:03:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef7d506f03d7eb5592d542b2d0d941a3caad21c6",
          "body": "Upgrade Netty and Guava versions",
          "is_bot": false,
          "headline": "Merge pull request #472 from YasasRangika/master",
          "author_name": "Yasas Rangika Mendis",
          "author_login": "YasasRangika",
          "committed_at": "2024-01-26T04:43:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a44944096761b7dea838acf9e513f93bfd44d43",
          "body": null,
          "is_bot": false,
          "headline": "upgrade guava version to the latest",
          "author_name": "yasasrangika",
          "author_login": "YasasRangika",
          "committed_at": "2024-01-23T04:38:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d27c5449fcb552a43e36b3d8423a9d2fdc928d27",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade netty version",
          "author_name": "yasasrangika",
          "author_login": "YasasRangika",
          "committed_at": "2024-01-17T10:17:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70efff5368e665f84338a925b55e60467114dd45",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #882] [Release 6.3.49] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-10-13T12:06:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0945af2aeaa2191ad5546b6fd4bc456657b5f830",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #882] [Release 6.3.49] prepare release v6.3.49",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-10-13T12:06:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "031d319ebe60c93eeae236358db66eb50aaa16a4",
          "body": "Bump snakeyaml version",
          "is_bot": false,
          "headline": "Merge pull request #471 from IsuruMaduranga/snakeyaml",
          "author_name": "Isuru Wijesiri",
          "author_login": null,
          "committed_at": "2023-10-13T11:45:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "429aba293e75bba3e7f115fd8c931031d1c0439a",
          "body": null,
          "is_bot": false,
          "headline": "Bump snakeyaml version",
          "author_name": "Isuru Wijesiri",
          "author_login": null,
          "committed_at": "2023-10-13T09:13:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "517a790cb52cc86393b83d558c012884d2a9b018",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #880] [Release 6.3.48] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-10-12T11:28:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fa60171e3f1c224185dfad5da3c0f0e7bee52de",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #880] [Release 6.3.48] prepare release v6.3.48",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-10-12T11:28:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "483abdb28065a2562c2300c82d7ce98d0245d2ba",
          "body": "Update netty version",
          "is_bot": false,
          "headline": "Merge pull request #470 from TharmiganK/update-netty-version",
          "author_name": "Shafreen Anfar",
          "author_login": "shafreenAnfar",
          "committed_at": "2023-10-12T11:07:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "292f532334c18e779ca67e4773dbce0540ac9c1b",
          "body": null,
          "is_bot": false,
          "headline": "Update netty version",
          "author_name": "TharmiganK",
          "author_login": "TharmiganK",
          "committed_at": "2023-10-12T10:27:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9bbd9d853a4e2a6db5d7c10c10ef03bc9a035b92",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #878] [Release 6.3.47] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-09-17T06:01:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8eb59e933ac02a27d6d391277463119fb3ec39f7",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #878] [Release 6.3.47] prepare release v6.3.47",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-09-17T06:01:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a33a91b3629fa73bd0ea7971b6bc605a474709d8",
          "body": "Upgrading guava and netty versions",
          "is_bot": false,
          "headline": "Merge pull request #469 from tgtshanika/master",
          "author_name": "Anusha Jayasundara",
          "author_login": "AnuGayan",
          "committed_at": "2023-09-17T05:40:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5fed3bcf1209aa4da78c6288fb986300cbb0300e",
          "body": null,
          "is_bot": false,
          "headline": "Upgrading guava and netty versions",
          "author_name": "Thilini Shanika",
          "author_login": "tgtshanika",
          "committed_at": "2023-09-15T04:04:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9032c6ace0f39cb0742be4ade6b754d345dda27e",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #876] [Release 6.3.46] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-07-28T03:08:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f279ad5c9bba2e8873c87a06bbad33ac13a3c3b9",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #876] [Release 6.3.46] prepare release v6.3.46",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-07-28T03:08:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3427dabea4608b7aa160c4b0250161f2cbbd24ef",
          "body": "Include maven repositories",
          "is_bot": false,
          "headline": "Merge pull request #468 from rdulmina/master",
          "author_name": "Tharik Kanaka",
          "author_login": "keizer619",
          "committed_at": "2023-07-27T16:31:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27f9c51c663cdb92345362817b18b1699ac0fe4a",
          "body": null,
          "is_bot": false,
          "headline": "Include maven repositories",
          "author_name": "rdulmina",
          "author_login": "rdulmina",
          "committed_at": "2023-07-27T16:30:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7cfa2c44885a6b62a88751c645b4d03cba065448",
          "body": "Downgrade org.wso2 version to 5",
          "is_bot": false,
          "headline": "Merge pull request #466 from rdulmina/master",
          "author_name": "Tharik Kanaka",
          "author_login": "keizer619",
          "committed_at": "2023-07-27T11:10:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d75ecd3a01952f15fb87204a29a3e20da52b0a3c",
          "body": null,
          "is_bot": false,
          "headline": "Downgrade org.wso2 version to `5`",
          "author_name": "rdulmina",
          "author_login": "rdulmina",
          "committed_at": "2023-07-27T11:07:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78cce44acecab00d5f290d3b96d2c20d36e5b889",
          "body": "This reverts commit 457c12bac2f4fa53a887e322be8deed4b2240cc9.",
          "is_bot": false,
          "headline": "Revert \"Downgrade org.wso2 version to `5.0`\"",
          "author_name": "rdulmina",
          "author_login": "rdulmina",
          "committed_at": "2023-07-27T11:06:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c354ccdc47f74cfd3ec76a1cea460e65af6c3cb4",
          "body": "Downgrade org.wso2 version to `5.0`",
          "is_bot": false,
          "headline": "Merge pull request #465 from rdulmina/master",
          "author_name": "Tharik Kanaka",
          "author_login": "keizer619",
          "committed_at": "2023-07-27T11:00:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "457c12bac2f4fa53a887e322be8deed4b2240cc9",
          "body": null,
          "is_bot": false,
          "headline": "Downgrade org.wso2 version to `5.0`",
          "author_name": "rdulmina",
          "author_login": "rdulmina",
          "committed_at": "2023-07-27T10:59:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35dcde4727528aeb3d696c54f1fb2106e995f82c",
          "body": "Fix the build after snakeyaml upgrade to 2.0",
          "is_bot": false,
          "headline": "Merge pull request #464 from rdulmina/master",
          "author_name": "Tharik Kanaka",
          "author_login": "keizer619",
          "committed_at": "2023-07-27T10:42:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08213f38f0bac20db19551be95be8e4495da94f6",
          "body": null,
          "is_bot": false,
          "headline": "Fix the build after snakeyaml upgrade to 2.0",
          "author_name": "rdulmina",
          "author_login": "rdulmina",
          "committed_at": "2023-07-27T10:39:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64564eeb008f04a00d9c81822c5b279aecfbe960",
          "body": "Update snakeyaml version",
          "is_bot": false,
          "headline": "Merge pull request #463 from keizer619/master",
          "author_name": "Tharik Kanaka",
          "author_login": "keizer619",
          "committed_at": "2023-07-26T09:29:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37aa6d3c303dd97230b7dad03b94a74b19f517d1",
          "body": null,
          "is_bot": false,
          "headline": "Update snakeyaml version",
          "author_name": "Tharik Kanaka",
          "author_login": "keizer619",
          "committed_at": "2023-07-26T09:07:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8891d85542df4110055b20aae445a46ac6136852",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #865] [Release 6.3.45] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-06-27T11:37:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d4e62d2cd86bbb0a47f8d2219074fb8e36d2e32",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #865] [Release 6.3.45] prepare release v6.3.45",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-06-27T11:37:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c6c6ea4c164307ca40877933dad7dcd322d3240",
          "body": "Update test cases to fix ssl failures",
          "is_bot": false,
          "headline": "Merge pull request #462 from dilanSachi/master",
          "author_name": "Dilan Sachintha Nayanajith",
          "author_login": "dilanSachi",
          "committed_at": "2023-06-27T11:16:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b2ba9896ae0ef2c9a11c2e43141e251943c5d82",
          "body": null,
          "is_bot": false,
          "headline": "Update test cases to fix ssl failures",
          "author_name": "dilanSachi",
          "author_login": "dilanSachi",
          "committed_at": "2023-06-27T11:05:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8249d00af26479e045ce4ee2c5ad50c1827a7c26",
          "body": "Update vulnerable netty version",
          "is_bot": false,
          "headline": "Merge pull request #461 from wso2/dilanSachi-patch-1",
          "author_name": "Shafreen Anfar",
          "author_login": "shafreenAnfar",
          "committed_at": "2023-06-22T09:56:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f55821f2572d12ec516c80a2bdd76707a985b6b",
          "body": null,
          "is_bot": false,
          "headline": "Update vulnerable netty version",
          "author_name": "Dilan Sachintha Nayanajith",
          "author_login": "dilanSachi",
          "committed_at": "2023-06-22T09:47:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ca31dc16633b9b3e07ed0bf8608b0faaef5e361",
          "body": "…opment iteration",
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #827] [Release 6.3.44] prepare for next devel…",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-02-24T06:31:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90a0935a0885a2cf5a2e346e23a8f3d6136b9bcb",
          "body": null,
          "is_bot": false,
          "headline": "[WSO2 Release] [Jenkins #827] [Release 6.3.44] prepare release v6.3.44",
          "author_name": "WSO2 Builder",
          "author_login": "wso2-jenkins-bot",
          "committed_at": "2023-02-24T06:31:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "240eff94ecfd2929a674965eab0f99b0fbafc229",
          "body": "Introduce system property to change crypto provider",
          "is_bot": false,
          "headline": "Merge pull request #458 from lasanthaS/master",
          "author_name": "Lasantha Samarakoon",
          "author_login": "lasanthaS",
          "committed_at": "2023-02-24T06:12:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66f4e9c59636acbfc9384824771769b7e66d727d",
          "body": null,
          "is_bot": false,
          "headline": "Introduce system property to change crypto provider",
          "author_name": "lasanthaS",
          "author_login": "lasanthaS",
          "committed_at": "2023-02-22T04:29:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 41,
      "latest_release_at": "2026-07-16T08:52:33Z",
      "latest_release_tag": "v6.4.2",
      "releases_from_tags": true,
      "days_since_last_push": 9,
      "active_weeks_last_year": 8,
      "days_since_latest_release": 9,
      "mean_days_between_releases": 56.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": true,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "org.wso2.transport.http:org.wso2.transport.http.netty",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": true,
          "registry_url": "https://central.sonatype.com/artifact/org.wso2.transport.http/org.wso2.transport.http.netty",
          "is_deprecated": false,
          "latest_version": "6.4.2",
          "repository_url": "https://github.com/wso2/transport-http.git",
          "versions_count": 358,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-16T09:11:00Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "org.wso2.transport.http:org.wso2.transport.http.netty.feature",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/org.wso2.transport.http/org.wso2.transport.http.netty.feature",
          "is_deprecated": false,
          "latest_version": "6.4.2",
          "repository_url": null,
          "versions_count": 358,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-16T09:11:01Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "org.wso2.transport.http:org.wso2.transport.http.netty.statistics",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/org.wso2.transport.http/org.wso2.transport.http.netty.statistics",
          "is_deprecated": false,
          "latest_version": "6.4.2",
          "repository_url": null,
          "versions_count": 358,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-16T09:11:02Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "org.wso2.transport.http:org.wso2.transport.http.netty.statistics.feature",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/org.wso2.transport.http/org.wso2.transport.http.netty.statistics.feature",
          "is_deprecated": false,
          "latest_version": "6.4.2",
          "repository_url": null,
          "versions_count": 358,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-16T09:11:03Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        }
      ]
    },
    "popularity": {
      "forks": 73,
      "stars": 49,
      "watchers": 122,
      "fork_history": {
        "days": [
          {
            "date": "2017-11-17",
            "count": 1
          },
          {
            "date": "2017-11-20",
            "count": 2
          },
          {
            "date": "2017-11-23",
            "count": 1
          },
          {
            "date": "2017-11-30",
            "count": 1
          },
          {
            "date": "2017-12-06",
            "count": 1
          },
          {
            "date": "2017-12-07",
            "count": 1
          },
          {
            "date": "2017-12-14",
            "count": 1
          },
          {
            "date": "2017-12-18",
            "count": 1
          },
          {
            "date": "2017-12-22",
            "count": 1
          },
          {
            "date": "2018-01-26",
            "count": 1
          },
          {
            "date": "2018-01-30",
            "count": 1
          },
          {
            "date": "2018-02-05",
            "count": 1
          },
          {
            "date": "2018-02-10",
            "count": 1
          },
          {
            "date": "2018-03-06",
            "count": 1
          },
          {
            "date": "2018-03-30",
            "count": 1
          },
          {
            "date": "2018-05-11",
            "count": 1
          },
          {
            "date": "2018-05-21",
            "count": 1
          },
          {
            "date": "2018-05-31",
            "count": 1
          },
          {
            "date": "2018-06-01",
            "count": 1
          },
          {
            "date": "2018-06-22",
            "count": 1
          },
          {
            "date": "2018-09-14",
            "count": 1
          },
          {
            "date": "2018-09-17",
            "count": 1
          },
          {
            "date": "2018-09-29",
            "count": 1
          },
          {
            "date": "2018-10-08",
            "count": 1
          },
          {
            "date": "2019-01-17",
            "count": 1
          },
          {
            "date": "2019-02-22",
            "count": 1
          },
          {
            "date": "2019-04-02",
            "count": 1
          },
          {
            "date": "2019-04-11",
            "count": 1
          },
          {
            "date": "2019-07-08",
            "count": 1
          },
          {
            "date": "2019-08-13",
            "count": 1
          },
          {
            "date": "2019-08-29",
            "count": 1
          },
          {
            "date": "2019-12-02",
            "count": 2
          },
          {
            "date": "2020-01-22",
            "count": 2
          },
          {
            "date": "2020-06-04",
            "count": 1
          },
          {
            "date": "2020-07-08",
            "count": 1
          },
          {
            "date": "2020-07-29",
            "count": 1
          },
          {
            "date": "2020-11-16",
            "count": 1
          },
          {
            "date": "2021-02-08",
            "count": 1
          },
          {
            "date": "2021-02-16",
            "count": 1
          },
          {
            "date": "2021-03-08",
            "count": 1
          },
          {
            "date": "2021-04-23",
            "count": 1
          },
          {
            "date": "2021-05-12",
            "count": 1
          },
          {
            "date": "2021-09-08",
            "count": 1
          },
          {
            "date": "2021-10-14",
            "count": 1
          },
          {
            "date": "2022-01-13",
            "count": 1
          },
          {
            "date": "2022-02-22",
            "count": 1
          },
          {
            "date": "2022-05-04",
            "count": 1
          },
          {
            "date": "2022-08-05",
            "count": 1
          },
          {
            "date": "2022-09-27",
            "count": 1
          },
          {
            "date": "2022-11-02",
            "count": 1
          },
          {
            "date": "2022-12-13",
            "count": 1
          },
          {
            "date": "2023-01-28",
            "count": 1
          },
          {
            "date": "2023-02-07",
            "count": 1
          },
          {
            "date": "2023-02-23",
            "count": 1
          },
          {
            "date": "2023-03-15",
            "count": 1
          },
          {
            "date": "2023-07-26",
            "count": 1
          },
          {
            "date": "2023-07-27",
            "count": 1
          },
          {
            "date": "2023-09-07",
            "count": 1
          },
          {
            "date": "2023-10-12",
            "count": 1
          },
          {
            "date": "2024-01-17",
            "count": 1
          },
          {
            "date": "2024-03-26",
            "count": 1
          },
          {
            "date": "2025-08-26",
            "count": 1
          },
          {
            "date": "2026-01-25",
            "count": 1
          },
          {
            "date": "2026-01-26",
            "count": 1
          },
          {
            "date": "2026-01-27",
            "count": 1
          },
          {
            "date": "2026-03-19",
            "count": 1
          },
          {
            "date": "2026-04-06",
            "count": 1
          },
          {
            "date": "2026-06-15",
            "count": 1
          },
          {
            "date": "2026-07-16",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 72,
        "total_forks": 73
      },
      "star_history": null,
      "open_issues_and_prs": 9
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "components/org.wso2.transport.http.netty.statistics/pom.xml",
        "components/org.wso2.transport.http.netty/pom.xml",
        "features/org.wso2.transport.http.netty.feature/pom.xml",
        "features/org.wso2.transport.http.netty.statistics.feature/pom.xml",
        "pom.xml"
      ],
      "largest_source_bytes": 52524,
      "source_files_sampled": 460,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "io.netty:netty-codec-classes-quic",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-cmm3-54f8-px4j",
              "GHSA-cq4q-cv5g-r8q5"
            ],
            "fixed_version": "4.2.15.Final",
            "advisory_count": 2,
            "oldest_advisory_days": 46
          },
          {
            "name": "io.netty:netty-codec-compression",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-558v-64gr-wgg4",
              "GHSA-mj4r-2hfc-f8p6"
            ],
            "fixed_version": "4.2.16.Final",
            "advisory_count": 2,
            "oldest_advisory_days": 79
          },
          {
            "name": "io.netty:netty-codec-dns",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-cm33-6792-r9fm",
              "GHSA-mfg7-5gfp-c4w3"
            ],
            "fixed_version": "4.2.16.Final",
            "advisory_count": 2,
            "oldest_advisory_days": 79
          },
          {
            "name": "io.netty:netty-codec-haproxy",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-cc37-9q2j-3hfv",
              "GHSA-h2qv-fj59-j46j",
              "GHSA-q6cq-mhr2-jmr5",
              "GHSA-wh89-7897-x99h"
            ],
            "fixed_version": "4.2.16.Final",
            "advisory_count": 4,
            "oldest_advisory_days": 47
          },
          {
            "name": "io.netty:netty-codec-http",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-38f8-5428-x5cv",
              "GHSA-4mp9-239f-g9hg",
              "GHSA-57rv-r2g8-2cj3",
              "GHSA-6cqp-g7gg-8hr5",
              "GHSA-6jqx-86gh-f27w",
              "GHSA-f6hv-jmp6-3vwv",
              "GHSA-gcjf-9mgh-3p7g",
              "GHSA-hvcg-qmg6-jm4c",
              "GHSA-jppx-w49h-x2qq",
              "GHSA-m4cv-j2px-7723"
            ],
            "fixed_version": "4.2.16.Final",
            "advisory_count": 14,
            "oldest_advisory_days": 81
          },
          {
            "name": "io.netty:netty-codec-http2",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-563q-j3cm-6jxm",
              "GHSA-5x3r-wrvg-rp6q",
              "GHSA-c2gf-v879-257j",
              "GHSA-c69g-56f8-xwqj",
              "GHSA-f6hv-jmp6-3vwv"
            ],
            "fixed_version": "4.2.16.Final",
            "advisory_count": 5,
            "oldest_advisory_days": 79
          },
          {
            "name": "io.netty:netty-codec-http3",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-2c5c-chwr-9hqw",
              "GHSA-4grm-h2qv-h6w6",
              "GHSA-c2rx-5r8w-8xr2",
              "GHSA-hpcc-26xq-25fv"
            ],
            "fixed_version": "4.2.16.Final",
            "advisory_count": 4,
            "oldest_advisory_days": 79
          },
          {
            "name": "io.netty:netty-codec-redis",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3244-j874-rhc2",
              "GHSA-5w86-c3rq-vjj7",
              "GHSA-6ghj-frrj-jjj3",
              "GHSA-6jv9-x5w9-2ccm",
              "GHSA-rgrr-p7gp-5xj7"
            ],
            "fixed_version": "4.2.15.Final",
            "advisory_count": 5,
            "oldest_advisory_days": 79
          },
          {
            "name": "io.netty:netty-codec-stomp",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3g8r-4pfx-jmfh",
              "GHSA-vhch-2wf3-m8rp"
            ],
            "fixed_version": "4.2.16.Final",
            "advisory_count": 2,
            "oldest_advisory_days": 11
          },
          {
            "name": "io.netty:netty-codec-xml",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 8.2,
            "advisory_ids": [
              "GHSA-4qhr-g3c6-fcfx",
              "GHSA-v74w-7mr3-4qg3"
            ],
            "fixed_version": "4.2.16.Final",
            "advisory_count": 2,
            "oldest_advisory_days": 3
          },
          {
            "name": "io.netty:netty-handler",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-3qp7-7mw8-wx86",
              "GHSA-c653-97m9-rcg9",
              "GHSA-x4gw-5cx5-pgmh"
            ],
            "fixed_version": "4.2.15.Final",
            "advisory_count": 3,
            "oldest_advisory_days": 47
          },
          {
            "name": "io.netty:netty-handler-ssl-ocsp",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.4,
            "advisory_ids": [
              "GHSA-272m-gcwp-mpwg",
              "GHSA-g7hg-vrcf-mvmr",
              "GHSA-wc96-39fc-566f"
            ],
            "fixed_version": "4.2.16.Final",
            "advisory_count": 3,
            "oldest_advisory_days": 3
          },
          {
            "name": "io.netty:netty-resolver-dns",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 8.7,
            "advisory_ids": [
              "GHSA-5pvg-856g-cp85",
              "GHSA-676x-f7gg-47vc",
              "GHSA-xmv7-r254-6q78"
            ],
            "fixed_version": "4.2.15.Final",
            "advisory_count": 3,
            "oldest_advisory_days": 46
          },
          {
            "name": "io.netty:netty-transport-classes-epoll",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-rwm7-x88c-3g2p"
            ],
            "fixed_version": "4.2.13.Final",
            "advisory_count": 1,
            "oldest_advisory_days": 79
          },
          {
            "name": "io.netty:netty-transport-sctp",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-5xrh-qmmq-w6ch"
            ],
            "fixed_version": "4.2.15.Final",
            "advisory_count": 1,
            "oldest_advisory_days": 46
          },
          {
            "name": "org.bouncycastle:bcpkix-jdk15on",
            "direct": true,
            "version": "1.69",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-4cx2-fc23-5wg6",
              "GHSA-wg6q-6289-32hp"
            ],
            "fixed_version": "2.0.8",
            "advisory_count": 2,
            "oldest_advisory_days": 346
          },
          {
            "name": "org.bouncycastle:bcprov-jdk15on",
            "direct": true,
            "version": "1.69",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-4h8f-2wvx-gg5w",
              "GHSA-8xfc-gm6g-vgpv",
              "GHSA-hr8g-6v94-x4m9",
              "GHSA-v435-xc8x-wvr9",
              "GHSA-wjxj-5m7g-mg7q"
            ],
            "fixed_version": "2.73.6",
            "advisory_count": 5,
            "oldest_advisory_days": 1116
          },
          {
            "name": "io.netty:netty-codec-mqtt",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-jfg9-48mv-9qgx"
            ],
            "fixed_version": "4.2.13.Final",
            "advisory_count": 1,
            "oldest_advisory_days": 79
          },
          {
            "name": "io.netty:netty-handler-proxy",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-45q3-82m4-75jr"
            ],
            "fixed_version": "4.2.13.Final",
            "advisory_count": 1,
            "oldest_advisory_days": 79
          },
          {
            "name": "io.netty:netty-transport-native-epoll",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 4,
            "advisory_ids": [
              "GHSA-w573-9ffj-6ff9"
            ],
            "fixed_version": "4.2.15.Final",
            "advisory_count": 1,
            "oldest_advisory_days": 46
          },
          {
            "name": "io.netty:netty-transport-native-kqueue",
            "direct": false,
            "version": "4.2.12.Final",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": 4,
            "advisory_ids": [
              "GHSA-w573-9ffj-6ff9"
            ],
            "fixed_version": "4.2.15.Final",
            "advisory_count": 1,
            "oldest_advisory_days": 46
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 15,
          "moderate": 6
        },
        "advisory_count": 64,
        "affected_count": 21,
        "assessed_count": 51,
        "malicious_count": 0,
        "assessed_package": "maven:org.wso2.transport.http:org.wso2.transport.http.netty@6.4.2",
        "unassessed_count": 0,
        "direct_affected_count": 2
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "org.wso2.eclipse.osgi:org.eclipse.osgi",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${equinox.osgi.version}"
        },
        {
          "name": "org.wso2.eclipse.osgi:org.eclipse.osgi.services",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${equinox.osgi.services.version}"
        },
        {
          "name": "org.wso2.orbit.io.netty:netty-all",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${netty.wso2.version}"
        },
        {
          "name": "org.slf4j:slf4j-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${slf4j.version}"
        },
        {
          "name": "org.yaml:snakeyaml",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${org.snakeyaml.version}"
        },
        {
          "name": "org.wso2.transport.http:org.wso2.transport.http.netty",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.wso2.carbon.messaging:org.wso2.carbon.messaging",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${carbon.messaging.version}"
        },
        {
          "name": "commons-pool.wso2:commons-pool",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${commons.pool.version}"
        },
        {
          "name": "com.jcraft:jsch",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${jsch.version}"
        },
        {
          "name": "org.wso2.transport.http:org.wso2.transport.http.netty.statistics",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.wso2.carbon.metrics:org.wso2.carbon.metrics.core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${carbon.metrics.version}"
        },
        {
          "name": "org.apache.commons:commons-pool2",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${org.apache.commons.pool2.version}"
        },
        {
          "name": "commons-net:commons-net",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${commons-net.version}"
        },
        {
          "name": "org.bouncycastle:bcprov-jdk15on",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${bcprov-jdk15on.version}"
        },
        {
          "name": "org.bouncycastle:bcpkix-jdk15on",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${bcpkix-jdk15on.version}"
        },
        {
          "name": "io.netty:netty-tcnative-boringssl-static",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${netty-tcnative-boringssl-static.version}"
        },
        {
          "name": "javax.xml.bind:jaxb-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${jaxb.api.version}"
        },
        {
          "name": "org.wso2.eclipse.osgi:org.eclipse.osgi",
          "manifest": "components/org.wso2.transport.http.netty.statistics/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.wso2.eclipse.osgi:org.eclipse.osgi.services",
          "manifest": "components/org.wso2.transport.http.netty.statistics/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.wso2.carbon.messaging:org.wso2.carbon.messaging",
          "manifest": "components/org.wso2.transport.http.netty.statistics/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.wso2.carbon.metrics:org.wso2.carbon.metrics.core",
          "manifest": "components/org.wso2.transport.http.netty.statistics/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.wso2.transport.http:org.wso2.transport.http.netty",
          "manifest": "components/org.wso2.transport.http.netty.statistics/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.wso2.eclipse.osgi:org.eclipse.osgi",
          "manifest": "components/org.wso2.transport.http.netty/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.wso2.eclipse.osgi:org.eclipse.osgi.services",
          "manifest": "components/org.wso2.transport.http.netty/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.wso2.orbit.io.netty:netty-all",
          "manifest": "components/org.wso2.transport.http.netty/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.slf4j:slf4j-api",
          "manifest": "components/org.wso2.transport.http.netty/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "commons-pool.wso2:commons-pool",
          "manifest": "components/org.wso2.transport.http.netty/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.yaml:snakeyaml",
          "manifest": "components/org.wso2.transport.http.netty/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.bouncycastle:bcprov-jdk15on",
          "manifest": "components/org.wso2.transport.http.netty/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${bcprov-jdk15on.version}"
        },
        {
          "name": "org.bouncycastle:bcpkix-jdk15on",
          "manifest": "components/org.wso2.transport.http.netty/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${bcpkix-jdk15on.version}"
        },
        {
          "name": "io.netty:netty-tcnative-boringssl-static",
          "manifest": "components/org.wso2.transport.http.netty/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${netty-tcnative-boringssl-static.version}"
        },
        {
          "name": "javax.xml.bind:jaxb-api",
          "manifest": "components/org.wso2.transport.http.netty/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.wso2.transport.http:org.wso2.transport.http.netty",
          "manifest": "features/org.wso2.transport.http.netty.feature/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.wso2.orbit.io.netty:netty-all",
          "manifest": "features/org.wso2.transport.http.netty.feature/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "commons-pool.wso2:commons-pool",
          "manifest": "features/org.wso2.transport.http.netty.feature/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.wso2.transport.http:org.wso2.transport.http.netty.statistics",
          "manifest": "features/org.wso2.transport.http.netty.statistics.feature/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "com.jcraft:jsch",
            "direct": true,
            "version": "0.1.51.wso2v1",
            "ecosystem": "maven"
          },
          {
            "name": "commons-net:commons-net",
            "direct": true,
            "version": "3.6",
            "ecosystem": "maven"
          },
          {
            "name": "commons-pool.wso2:commons-pool",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "commons-pool.wso2:commons-pool",
            "direct": true,
            "version": "1.5.6.wso2v1",
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-tcnative-boringssl-static",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.netty:netty-tcnative-boringssl-static",
            "direct": true,
            "version": "2.0.65",
            "ecosystem": "maven"
          },
          {
            "name": "javax.xml.bind:jaxb-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "javax.xml.bind:jaxb-api",
            "direct": true,
            "version": "2.3.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-pool2",
            "direct": true,
            "version": "2.4.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.bouncycastle:bcpkix-jdk15on",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.bouncycastle:bcpkix-jdk15on",
            "direct": true,
            "version": "1.69",
            "ecosystem": "maven"
          },
          {
            "name": "org.bouncycastle:bcprov-jdk15on",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.bouncycastle:bcprov-jdk15on",
            "direct": true,
            "version": "1.69",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": true,
            "version": "1.7.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.carbon.messaging:org.wso2.carbon.messaging",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.carbon.messaging:org.wso2.carbon.messaging",
            "direct": true,
            "version": "3.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.carbon.metrics:org.wso2.carbon.metrics.core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.carbon.metrics:org.wso2.carbon.metrics.core",
            "direct": true,
            "version": "2.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.eclipse.osgi:org.eclipse.osgi",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.eclipse.osgi:org.eclipse.osgi",
            "direct": true,
            "version": "3.10.2.v20150203-1939",
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.eclipse.osgi:org.eclipse.osgi.services",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.eclipse.osgi:org.eclipse.osgi.services",
            "direct": true,
            "version": "3.4.0.v20140312-2051",
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.orbit.io.netty:netty-all",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.orbit.io.netty:netty-all",
            "direct": true,
            "version": "4.2.12.wso2v1",
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.transport.http:org.wso2.transport.http.netty",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.transport.http:org.wso2.transport.http.netty",
            "direct": true,
            "version": "6.4.3-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.transport.http:org.wso2.transport.http.netty.statistics",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.transport.http:org.wso2.transport.http.netty.statistics",
            "direct": true,
            "version": "6.4.3-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.yaml:snakeyaml",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.yaml:snakeyaml",
            "direct": true,
            "version": "2.6",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.guava:guava",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.google.guava:guava",
            "direct": false,
            "version": "33.0.0-jre",
            "ecosystem": "maven"
          },
          {
            "name": "com.mashape.unirest:unirest-java",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.mashape.unirest:unirest-java",
            "direct": false,
            "version": "1.4.9",
            "ecosystem": "maven"
          },
          {
            "name": "commons-io.wso2:commons-io",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": false,
            "version": "2.11.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpasyncclient",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpclient",
            "direct": false,
            "version": "4.3.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpmime",
            "direct": false,
            "version": "4.3.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-antrun-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-checkstyle-plugin",
            "direct": false,
            "version": "2.17",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-deploy-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-release-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": "2.22.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.atomikos.wso2:atomikos",
            "direct": false,
            "version": "3.8.0.wso2v1",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:cobertura-maven-plugin",
            "direct": false,
            "version": "2.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:findbugs-maven-plugin",
            "direct": false,
            "version": "3.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.jacoco:jacoco-maven-plugin",
            "direct": false,
            "version": "0.7.8",
            "ecosystem": "maven"
          },
          {
            "name": "org.mock-server:mockserver-netty",
            "direct": false,
            "version": "3.11",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-log4j12",
            "direct": false,
            "version": "1.7.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.testng:testng",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.testng:testng",
            "direct": false,
            "version": "6.9.10",
            "ecosystem": "maven"
          },
          {
            "name": "org.wso2.carbon.maven:carbon-feature-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 56,
        "direct_count": 31,
        "indirect_count": 25
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 428,
        "open_issues": 8,
        "closed_ratio": 0.75,
        "closed_issues": 24,
        "closed_unmerged_prs": 29
      },
      "bus_factor": 4,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "wso2-jenkins-bot",
          "commits": 792,
          "avatar_url": "https://avatars.githubusercontent.com/u/6748256?v=4"
        },
        {
          "type": "User",
          "login": "chamil321",
          "commits": 341,
          "avatar_url": "https://avatars.githubusercontent.com/u/8381003?v=4"
        },
        {
          "type": "User",
          "login": "irunika",
          "commits": 336,
          "avatar_url": "https://avatars.githubusercontent.com/u/9251082?v=4"
        },
        {
          "type": "User",
          "login": "isudana",
          "commits": 293,
          "avatar_url": "https://avatars.githubusercontent.com/u/748819?v=4"
        },
        {
          "type": "User",
          "login": "shafreenAnfar",
          "commits": 280,
          "avatar_url": "https://avatars.githubusercontent.com/u/6178058?v=4"
        },
        {
          "type": "User",
          "login": "Bhashinee",
          "commits": 230,
          "avatar_url": "https://avatars.githubusercontent.com/u/11239305?v=4"
        },
        {
          "type": "User",
          "login": "isururanawaka",
          "commits": 200,
          "avatar_url": "https://avatars.githubusercontent.com/u/3985350?v=4"
        },
        {
          "type": "User",
          "login": "bsenduran",
          "commits": 166,
          "avatar_url": "https://avatars.githubusercontent.com/u/1879762?v=4"
        },
        {
          "type": "User",
          "login": "arukshani",
          "commits": 118,
          "avatar_url": "https://avatars.githubusercontent.com/u/12377918?v=4"
        },
        {
          "type": "User",
          "login": "ldclakmal",
          "commits": 93,
          "avatar_url": "https://avatars.githubusercontent.com/u/9639050?v=4"
        }
      ],
      "contributors_sampled": 68,
      "top_contributor_share": 0.23
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "pull-request.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 0,
            "reason": "0 out of 7 merged PRs checked by a CI test -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 3,
            "reason": "Found 7/22 approved changesets -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 21 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 3,
            "reason": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "cec8d3ac2705cb8ad32a1a8e5796c60ee9f37fc8",
        "ran_at": "2026-07-25T22:22:52Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-16T09:14:51Z",
      "oldest_open_prs": [
        {
          "number": 485,
          "created_at": "2026-02-05T08:11:22Z",
          "last_comment_at": "2026-03-09T05:54:48Z",
          "last_comment_author": "manodyaSenevirathne"
        }
      ],
      "last_merged_pr_at": "2026-07-16T08:33:31Z",
      "ci_last_conclusion": "FAILURE",
      "oldest_open_issues": [
        {
          "number": 33,
          "created_at": "2018-01-05T04:39:43Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 203,
          "created_at": "2018-06-15T06:05:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 212,
          "created_at": "2018-06-21T03:23:43Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 284,
          "created_at": "2018-12-19T04:37:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 288,
          "created_at": "2019-01-22T04:22:13Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 370,
          "created_at": "2019-08-29T12:06:43Z",
          "last_comment_at": "2019-08-29T12:06:54Z",
          "last_comment_author": "dilini-muthumala"
        },
        {
          "number": 459,
          "created_at": "2023-04-27T09:09:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 460,
          "created_at": "2023-05-05T02:33:17Z",
          "last_comment_at": "2023-05-09T09:31:10Z",
          "last_comment_author": "oyz1314"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/wso2/transport-http",
    "host": "github.com",
    "name": "transport-http",
    "owner": "wso2"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 60,
      "inputs": {
        "security": 42,
        "vitality": 63,
        "community": 59,
        "governance": 83,
        "engineering": 45
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 63,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "commits_last_year": 41,
              "human_commit_share": 1,
              "days_since_last_push": 9,
              "active_weeks_last_year": 8
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 9 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "8/52 weeks with commits",
                "points": 5.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "41 commits in the last year",
                "points": 14.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 41
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v6.4.2",
              "releases_from_tags": true,
              "days_since_latest_release": 9,
              "mean_days_between_releases": 56.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 9 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~56.2 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 56.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 9,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 9 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 59,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "forks": 73,
              "stars": 49,
              "watchers": 122,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "49 stars",
                "points": 27.3,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 49
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "73 forks",
                "points": 15.5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 73
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "122 watchers",
                "points": 11.6,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 122
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": true,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 7.2,
                "status": "met",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 83,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "bus_factor": 4,
              "contributors_sampled": 68,
              "top_contributor_share": 0.23
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "4 contributor(s) cover half of all commits",
                "points": 43.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 23% of commits",
                "points": 17.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 23
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "68 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 68
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 21 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "merged_prs": 428,
              "open_issues": 8,
              "closed_issues": 24,
              "issue_closed_ratio": 0.75,
              "closed_unmerged_prs": 29
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "75% of issues closed",
                "points": 35.1,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 75
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "428/457 decided PRs merged",
                "points": 35.8,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 428,
                      "decided": 457
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 7/22 approved changesets -- score normalized to 3",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "followers": 1719,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "wso2",
              "public_repos": 383,
              "account_age_days": 5694
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1,719 followers of wso2",
                "points": 23.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1719,
                      "login": "wso2"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "383 public repos, account ~15 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 383
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "org.wso2.transport.http:org.wso2.transport.http.netty",
                "org.wso2.transport.http:org.wso2.transport.http.netty.feature",
                "org.wso2.transport.http:org.wso2.transport.http.netty.statistics",
                "org.wso2.transport.http:org.wso2.transport.http.netty.statistics.feature"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 9
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "4 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 4,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 9 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "358 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 358
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 45,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "at_risk",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 48,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "0 out of 7 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 42,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 40,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "0 out of 7 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 7/22 approved changesets -- score normalized to 3",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 21 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "at_risk",
            "name": "Dependency advisories",
            "note": "Matched the maven:org.wso2.transport.http:org.wso2.transport.http.netty@6.4.2 runtime dependency closure — what installing the published package pulls in — 51 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:org.wso2.transport.http:org.wso2.transport.http.netty@6.4.2",
                  "assessed": 51
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 49,
            "inputs": {
              "source": "osv",
              "advisories": 64,
              "affected_packages": 21,
              "assessed_packages": 51,
              "unassessed_packages": 0,
              "affected_by_severity": "high 15, moderate 6",
              "direct_affected_packages": 2
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "2 affected: org.bouncycastle:bcpkix-jdk15on 1.69 (moderate 5.3), org.bouncycastle:bcprov-jdk15on 1.69 (moderate 5.9)",
                "points": 16.3,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 2,
                      "packages": "org.bouncycastle:bcpkix-jdk15on 1.69 (moderate 5.3), org.bouncycastle:bcprov-jdk15on 1.69 (moderate 5.9)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "19 affected: io.netty:netty-codec-classes-quic 4.2.12.Final (high 7.5), io.netty:netty-codec-compression 4.2.12.Final (high 7.5), io.netty:netty-codec-dns 4.2.12.Final (high 7.5), +16 more",
                "points": 1.8,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 19,
                      "packages": "io.netty:netty-codec-classes-quic 4.2.12.Final (high 7.5), io.netty:netty-codec-compression 4.2.12.Final (high 7.5), io.netty:netty-codec-dns 4.2.12.Final (high 7.5)"
                    }
                  },
                  {
                    "code": "advisories_affected_more",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "2 advisory-carrying package(s) unaddressed past 90 days; oldest published 1116 days ago",
                "points": 31.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 2,
                      "oldest": 1116
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 51,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 12
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 52,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 36,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.68,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "68 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 36.3,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 68,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 46,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "components/org.wso2.transport.http.netty.statistics/pom.xml",
                "components/org.wso2.transport.http.netty/pom.xml",
                "features/org.wso2.transport.http.netty.feature/pom.xml",
                "features/org.wso2.transport.http.netty.statistics.feature/pom.xml",
                "pom.xml"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "components/org.wso2.transport.http.netty.statistics/pom.xml, components/org.wso2.transport.http.netty/pom.xml, features/org.wso2.transport.http.netty.feature/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "components/org.wso2.transport.http.netty.statistics/pom.xml, components/org.wso2.transport.http.netty/pom.xml, features/org.wso2.transport.http.netty.feature/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 52524,
              "source_files_sampled": 460,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/460 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 460,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T22:23:12.619880Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/w/wso2/transport-http.svg",
  "full_name": "wso2/transport-http",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаMaven.