apache / maven-assembly-plugin

每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。

每个点涵盖 8 天。

来自 GitHub 依赖图的完整解析依赖集合：18 个直接依赖与 103 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

安装 maven:org.apache.maven.plugins:maven-assembly-plugin@3.8.0 会引入 47 个包（直接与传递）：其中 2 个存在已知公告，1 个为直接依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "java",
        "build-management",
        "maven",
        "maven-plugins",
        "maven-assembly-plugin"
      ],
      "is_fork": false,
      "size_kb": 3775,
      "has_wiki": false,
      "homepage": "https://maven.apache.org/plugins/maven-assembly-plugin/",
      "languages": {
        "HTML": 29949,
        "Java": 896471,
        "Shell": 3385,
        "Groovy": 50950
      },
      "pushed_at": "2026-07-27T05:42:33Z",
      "created_at": "2017-12-09T15:04:05Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-22T02:34:11Z",
      "description": "Apache Maven Assembly Plugin",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "master",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Java",
      "significant_languages": [
        "Java"
      ]
    },
    "owner": {
      "blog": "https://www.apache.org/",
      "name": "The Apache Software Foundation",
      "type": "Organization",
      "login": "apache",
      "company": null,
      "location": null,
      "followers": 23594,
      "avatar_url": "https://avatars.githubusercontent.com/u/47359?v=4",
      "created_at": "2009-01-17T20:14:40Z",
      "is_verified": null,
      "public_repos": 3148,
      "account_age_days": 6400
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "maven-assembly-plugin-3.8.0",
          "kind": "other",
          "published_at": "2025-11-29T12:59:40Z"
        },
        {
          "tag": "maven-assembly-plugin-3.7.1",
          "kind": "other",
          "published_at": "2024-03-18T18:10:13Z"
        },
        {
          "tag": "maven-assembly-plugin-3.7.0",
          "kind": "other",
          "published_at": "2024-03-15T07:57:07Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "83c4e723404549380c96a0d5d5aacd67deb66fc6",
          "body": null,
          "is_bot": false,
          "headline": "Fix ITs for Maven 4 compat (#1325)",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2026-07-16T04:56:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c19bd1c2264187a3130266cdb00bbbc36a935c76",
          "body": "….yml\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-sha\n[…]\n.github/workflows/release-drafter.yml\n  dependency-version: '5'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-15T21:00:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "acd297709e7d30ce5b96ada9c6859eef355e3fd2",
          "body": "…l (#1331)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-s\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.ym…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-15T04:43:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d8d3fee69039e6d2f825d984224eea69250d50a4",
          "body": "…ml (#1332)\n\nBumps [apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.y…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-15T04:38:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fb92f114022423a188b6b752149d58f7b37376e4",
          "body": "Bumps [apache/maven-gh-actions-shared/.github/workflows/stale.yml](https://github.com/apache/maven-gh-actions-shared) from 4 to 5.\n- [Commits](https://github.com/apache/maven-gh-actions-shared/compare/v4...v5)\n\n---\nupdated-dependencies:\n- dependency-name: apache/maven-gh-actions-shared/.github/workf\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml (#1333)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-15T04:38:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2d2fad4f628bac6f2998a2c38f45d53f67037483",
          "body": "Bumps [org.apache.maven.shared:maven-filtering](https://github.com/apache/maven-filtering) from 3.5.0 to 3.5.1.\n- [Release notes](https://github.com/apache/maven-filtering/releases)\n- [Commits](https://github.com/apache/maven-filtering/compare/maven-filtering-3.5.0...maven-filtering-3.5.1)\n\n---\nupda\n[…]\napache.maven.shared:maven-filtering\n  dependency-version: 3.5.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.shared:maven-filtering from 3.5.0 to 3.5.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-08T21:43:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba367964555c664972c98035b56a3b61e88ba91a",
          "body": "…erability\n\nGenerated-by: Claude Code",
          "is_bot": false,
          "headline": "Add AGENTS.md + SECURITY.md security-model pointer for scanner discov…",
          "author_name": "Jarek Potiuk",
          "author_login": "potiuk",
          "committed_at": "2026-07-08T12:13:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "180e8118f512007a880e1ab0e1a105e29a1b3799",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 48 to 49.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1328)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-29T15:25:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "36353e0ecfeb4952a46c40a223eb81c405d4a6f1",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-10 to 1.5.7-11.\n- [Commits](https://github.com/luben/zstd-jni/commits/v1.5.7-11)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-version: 1.5.7-11\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.7-10 to 1.5.7-11",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-15T10:44:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "607132a9637201c45fe6444da52ac074348b5381",
          "body": "Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.5 to 2.0.6.\n- [Release notes](https://github.com/jaxen-xpath/jaxen/releases)\n- [Commits](https://github.com/jaxen-xpath/jaxen/compare/v2.0.5...v2.0.6)\n\n---\nupdated-dependencies:\n- dependency-name: jaxen:jaxen\n  dependency-version: 2.0.6\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump jaxen:jaxen from 2.0.5 to 2.0.6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-09T18:23:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51bfd9e03e7f3339073f581faba9f03e114a6600",
          "body": "Bumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.11.0 to 4.12.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)\n- [Commi\n[…]\nrg.codehaus.plexus:plexus-archiver\n  dependency-version: 4.12.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-09T17:58:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "92856b0d4a7b577a7613d4b0323a1a11ef3b8b06",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-9 to 1.5.7-10.\n- [Commits](https://github.com/luben/zstd-jni/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-version: 1.5.7-10\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.7-9 to 1.5.7-10 (#1321)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-04T05:28:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d48c93e5889e8cf4eae94f67482ae8f09fd4e911",
          "body": "Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.4 to 2.0.5.\n- [Release notes](https://github.com/jaxen-xpath/jaxen/releases)\n- [Commits](https://github.com/jaxen-xpath/jaxen/compare/v2.0.4...v2.0.5)\n\n---\nupdated-dependencies:\n- dependency-name: jaxen:jaxen\n  dependency-version: 2.\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump jaxen:jaxen from 2.0.4 to 2.0.5 (#1322)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-04T05:28:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1dfa4082353e5a028e1f3025c575eea5fc22c3eb",
          "body": "as it changes output timestamp with Maven 3.10 and Maven 4, where RB is active by default (super-POM)",
          "is_bot": false,
          "headline": "disable Reproducible Builds if enabled by default",
          "author_name": "Hervé Boutemy",
          "author_login": "hboutemy",
          "committed_at": "2026-05-31T12:30:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "daa5c255f728d9149071f374560d26125bd72f57",
          "body": "Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.3 to 2.0.4.\n- [Release notes](https://github.com/jaxen-xpath/jaxen/releases)\n- [Commits](https://github.com/jaxen-xpath/jaxen/compare/v2.0.3...v2.0.4)\n\n---\nupdated-dependencies:\n- dependency-name: jaxen:jaxen\n  dependency-version: 2.\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump jaxen:jaxen from 2.0.3 to 2.0.4 (#1318)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-29T07:18:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "693620b44d3bbf13b7bb6eda80f3f9aa595a68d7",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-8 to 1.5.7-9.\n- [Commits](https://github.com/luben/zstd-jni/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-version: 1.5.7-9\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.7-8 to 1.5.7-9 (#1316)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-22T14:54:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4d5e7633076ff08218d412523aacd9612cf59c7",
          "body": "Bumps [org.codehaus.plexus:plexus-classworlds](https://github.com/codehaus-plexus/plexus-classworlds) from 2.11.0 to 2.12.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-classworlds/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-classworlds/compare/plexus-classworlds-\n[…]\ncodehaus.plexus:plexus-classworlds\n  dependency-version: 2.12.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-classworlds from 2.11.0 to 2.12.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-20T14:05:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "79907740124afdb2ffe6965e471ce6e0045a34c0",
          "body": "Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.2 to 2.0.3.\n- [Release notes](https://github.com/jaxen-xpath/jaxen/releases)\n- [Commits](https://github.com/jaxen-xpath/jaxen/compare/v2.0.2...v2.0.3)\n\n---\nupdated-dependencies:\n- dependency-name: jaxen:jaxen\n  dependency-version: 2.\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump jaxen:jaxen from 2.0.2 to 2.0.3 (#1314)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T04:46:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3a5a11a008fb71da7123ad0fc6558798f73e1a21",
          "body": "Bumps `mavenVersion` from 3.9.15 to 3.9.16.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.15 to 3.9.16\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.15...maven-3.9.16)\n\nUpdates `org.apache.maven:maven-core` from 3.9.\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump mavenVersion from 3.9.15 to 3.9.16 (#1313)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-19T04:45:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f8f136b78a59d96ef7dcd1e3efacd513d6e5db93",
          "body": "Bumps [org.codehaus.plexus:plexus-classworlds](https://github.com/codehaus-plexus/plexus-classworlds) from 2.9.0 to 2.11.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-classworlds/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-classworlds/compare/plexus-classworlds-2\n[…]\ncodehaus.plexus:plexus-classworlds\n  dependency-version: 2.11.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-classworlds from 2.9.0 to 2.11.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T16:44:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a506506dfc8db403443e749451cdf537b332c8ea",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 47 to 48.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1309)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-11T18:41:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "caeb88c032d947390e1c5c42cb5294e3c9962675",
          "body": "Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.1 to 2.0.2.\n- [Release notes](https://github.com/jaxen-xpath/jaxen/releases)\n- [Commits](https://github.com/jaxen-xpath/jaxen/compare/v2.0.1...v2.0.2)\n\n---\nupdated-dependencies:\n- dependency-name: jaxen:jaxen\n  dependency-version: 2.0.2\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump jaxen:jaxen from 2.0.1 to 2.0.2",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-11T18:03:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0bf451448c98fe58b334c15ce265ec06a728a49",
          "body": "Bumps [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) from 42.7.2 to 42.7.11.\n- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)\n- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/pgjdbc/pgjdbc/compare/REL42.7.2...REL42.7.11)\n\n---\nupdated-dependencies:\n- dependency-name: org.postgresql:postgresql\n  dependency-version: 42.7.11\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.postgresql:postgresql in /src/it/projects/bugs/massembly-730",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-10T14:06:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b134fbc0fdbf18a1ca2aa5870a55bf7e3b82778",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-7 to 1.5.7-8.\n- [Commits](https://github.com/luben/zstd-jni/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-version: 1.5.7-8\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.7-7 to 1.5.7-8",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-06T17:20:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "913c98cbec85b2df9c725cc2f640b11a7ab06cdc",
          "body": "Bumps commons-io:commons-io from 2.21.0 to 2.22.0.\n\n---\nupdated-dependencies:\n- dependency-name: commons-io:commons-io\n  dependency-version: 2.22.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#1305)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-24T07:25:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88591328de49dba4c1b6840c982588cf838d885a",
          "body": "Bumps `mavenVersion` from 3.9.14 to 3.9.15.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.14 to 3.9.15\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.14...maven-3.9.15)\n\nUpdates `org.apache.maven:maven-core` from 3.9.\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump mavenVersion from 3.9.14 to 3.9.15 (#1303)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-20T12:02:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "88abf6d37ad9209c21f1f06065267a4618766a01",
          "body": "Bumps [jaxen:jaxen](https://github.com/jaxen-xpath/jaxen) from 2.0.0 to 2.0.1.\n- [Release notes](https://github.com/jaxen-xpath/jaxen/releases)\n- [Commits](https://github.com/jaxen-xpath/jaxen/compare/v2.0.0...v2.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: jaxen:jaxen\n  dependency-version: 2.\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump jaxen:jaxen from 2.0.0 to 2.0.1 (#1304)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-20T12:01:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5664d52827a74c19f84019d5b83418abfaaf3806",
          "body": "Bumps [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) from 3.5.1 to 3.6.1.\n- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-utils/compare/plexus-utils-3.5.1...plexus-utils-3.6.1)\n\n---\n[…]\nendency-version: 3.6.1\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-utils (#1300)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-14T16:32:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "86cf9e5e510d360f296ab835fc69ff77f8563ead",
          "body": "Bumps `mavenVersion` from 3.9.12 to 3.9.14.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.12 to 3.9.14\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.12...maven-3.9.14)\n\nUpdates `org.apache.maven:maven-core` from 3.9.\n[…]\ng.apache.maven:maven-model-builder\n  dependency-version: 3.9.14\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump mavenVersion from 3.9.12 to 3.9.14",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-14T15:04:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb6fcbbda045f0d309e7e1f94f933a0c629c5e1d",
          "body": "Bumps [org.apache.maven.shared:maven-filtering](https://github.com/apache/maven-filtering) from 3.4.0 to 3.5.0.\n- [Release notes](https://github.com/apache/maven-filtering/releases)\n- [Commits](https://github.com/apache/maven-filtering/compare/maven-filtering-3.4.0...maven-filtering-3.5.0)\n\n---\nupda\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.shared:maven-filtering from 3.4.0 to 3.5.0 (#1295)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-06T16:14:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9aa0261a99962ea46775e180ab31bc8321234e9f",
          "body": "…27 (#1294)\n\nBumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 1.9.26 to 1.9.27.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.26...maven-resolver-\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 1.9.26 to 1.9.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-24T06:52:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "64a6a2cc4ad0cf76a0f5736ead147102d3103785",
          "body": null,
          "is_bot": false,
          "headline": "Update to Pareten 47 (#1291)",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2026-02-18T05:10:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13d24410bc399c0d199bb99a2fd2cea638ea68ae",
          "body": "…26 (#1293)\n\nBumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 1.9.25 to 1.9.26.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.25...maven-resolver-\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 1.9.25 to 1.9.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-17T06:47:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f6ffeba4e4cac60fc9c74ed4ccb8435e918d750e",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-6 to 1.5.7-7.\n- [Commits](https://github.com/luben/zstd-jni/compare/v1.5.7-6...v1.5.7-7)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-version: 1.5.7-7\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.7-6 to 1.5.7-7 (#1290)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-05T16:36:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "202f505e28866b5d107898b59cd10b8a267c0bb2",
          "body": "Bumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.10.4 to 4.11.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)\n- [Commi\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0 (#1288)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-01-12T15:24:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c7a07cc9ec690546ad70b91846725b3afadf385f",
          "body": "Bumps [org.apache.maven:maven-archiver](https://github.com/apache/maven-archiver) from 3.6.5 to 3.6.6.\n- [Release notes](https://github.com/apache/maven-archiver/releases)\n- [Commits](https://github.com/apache/maven-archiver/compare/maven-archiver-3.6.5...maven-archiver-3.6.6)\n\n---\nupdated-dependenc\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven:maven-archiver from 3.6.5 to 3.6.6 (#1286)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-26T05:53:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d39303e330009baf44c26f51e0fd8d2262f240e",
          "body": "Co-authored-by: Moderne <team@moderne.io>",
          "is_bot": false,
          "headline": "Cleanup tests (#1285)",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-12-21T16:30:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54fc67610ea09333ae98707aaf4774b533ec7b59",
          "body": "…25 (#1283)\n\nBumps [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) from 1.9.24 to 1.9.25.\n- [Release notes](https://github.com/apache/maven-resolver/releases)\n- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.24...maven-resolver-\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.resolver:maven-resolver-api from 1.9.24 to 1.9.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-17T17:33:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "141541bfee1f6beaa76c83c6238f269b46e48394",
          "body": "Bumps `mavenVersion` from 3.9.11 to 3.9.12.\n\nUpdates `org.apache.maven:maven-plugin-api` from 3.9.11 to 3.9.12\n- [Release notes](https://github.com/apache/maven/releases)\n- [Commits](https://github.com/apache/maven/compare/maven-3.9.11...maven-3.9.12)\n\nUpdates `org.apache.maven:maven-core` from 3.9.\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump mavenVersion from 3.9.11 to 3.9.12 (#1284)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-17T17:33:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9be41fc45428026c9c64e583e2bc6d3149c93242",
          "body": null,
          "is_bot": false,
          "headline": "Privatize renderTo (#1278)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-12-08T13:09:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53dcfc025117ee06dcb71a5ae5ceffb08c3b914f",
          "body": null,
          "is_bot": false,
          "headline": "Remove redundant escaping (#1277)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-11-23T19:29:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04cbbb337d5e486a6bd03195d1493c8afe394ec2",
          "body": null,
          "is_bot": false,
          "headline": "some nits (#1279)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-11-23T19:29:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c9e58a45f3ded2b342c36d7b1b1fcc52a71b5dd",
          "body": "* Plug memory leak\n\n* spotless",
          "is_bot": false,
          "headline": "Plug ThreadLocal memory leak (#1276)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-11-23T19:28:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ceef4b01476f04067bef1660229bf69e109394c2",
          "body": null,
          "is_bot": false,
          "headline": "commons-io version is now the same (#1274)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-11-23T16:04:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a06350eb17630b256c7825ed76e7520b359d4f0",
          "body": null,
          "is_bot": false,
          "headline": "Declare used dependencies (#1271)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-11-23T16:04:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31ac192dbee96da6afd81aaed434e33703dff9ce",
          "body": "* Remove commented code\n\n* spotless",
          "is_bot": false,
          "headline": "Remove commented code (#1273)",
          "author_name": "Elliotte Rusty Harold",
          "author_login": "elharo",
          "committed_at": "2025-11-23T16:03:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5b8aff698c9ac93925530a31181b68ae04f9749",
          "body": "* Document that include/exclude can be regex - assembly\n\n* Document that include/exclude can be regex - assembly-component\n\n* Document that include/exclude can be regex - advanced-descriptor-topics",
          "is_bot": false,
          "headline": "Document regex support in include/exclude patterns (#1243)",
          "author_name": "Tim Lander",
          "author_login": "VirtualTim",
          "committed_at": "2025-11-23T13:00:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd8cafc839e49b670564f1ba99438498a1e85810",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare for next development iteration",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-11-22T23:23:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "434b3aa2b516cb03fdccdd63548a53013c7368f0",
          "body": null,
          "is_bot": false,
          "headline": "[maven-release-plugin] prepare release maven-assembly-plugin-3.8.0",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-11-22T23:23:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43666c313d9a5df248646337b750bd82e51a0bc5",
          "body": null,
          "is_bot": false,
          "headline": "Bump Maven to 3.9.11. Prerequisite still 3.6.3",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-11-22T23:14:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ecbf31db2ac6cdfdfbe5c3cb7cecfc89ad506852",
          "body": "Bumps org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-lang3\n  dependency-version: 3.20.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 (#1269)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-17T05:28:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3cdb9417c510ef19a15e9af859916f5ff9deb0e",
          "body": "* chore: migrate junit3/4 to junit5\n\ndelete src/functional-test because no reference found\n\n* refactor: use junit property version and add junit to  dependency mgmt for the ITs.",
          "is_bot": false,
          "headline": "chore: migrate junit3/4 to junit5 (#1260)",
          "author_name": "Sandra Parsick",
          "author_login": "sparsick",
          "committed_at": "2025-11-11T13:35:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58e3a23c1d86d77e449cc8eb88944d1e4f475144",
          "body": "Bumps [org.codehaus.plexus:plexus-io](https://github.com/codehaus-plexus/plexus-io) from 3.5.2 to 3.6.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-io/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-io/compare/plexus-io-3.5.2...plexus-io-3.6.0)\n\n---\nupdated-dependenc\n[…]\nname: org.codehaus.plexus:plexus-io\n  dependency-version: 3.6.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-io from 3.5.2 to 3.6.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-11T00:13:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0f6e7c9535667f21a6f319a777766913015a49f9",
          "body": "Bumps [org.codehaus.plexus:plexus-interpolation](https://github.com/codehaus-plexus/plexus-interpolation) from 1.28 to 1.29.\n- [Release notes](https://github.com/codehaus-plexus/plexus-interpolation/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-interpolation/compare/plexus-interpol\n[…]\ndehaus.plexus:plexus-interpolation\n  dependency-version: '1.29'\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-interpolation from 1.28 to 1.29",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-11T00:13:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "579cbbac9af7b77d75bf27ff5313569f54ee7602",
          "body": "Bumps [commons-io:commons-io](https://github.com/apache/commons-io) from 2.20.0 to 2.21.0.\n- [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt)\n- [Commits](https://github.com/apache/commons-io/compare/rel/commons-io-2.20.0...rel/commons-io-2.21.0)\n\n---\nupdated-dependenci\n[…]\nndency-name: commons-io:commons-io\n  dependency-version: 2.21.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump commons-io:commons-io from 2.20.0 to 2.21.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-11T00:13:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b11bf731a667476b945d593f313cf65f62abc8e2",
          "body": "Bumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.10.3 to 4.10.4.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)\n- [Commi\n[…]\nrg.codehaus.plexus:plexus-archiver\n  dependency-version: 4.10.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-11T00:13:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "88be8ce2a128f259993729ec7484727a94d39b3d",
          "body": "Bumps [org.apache.maven:maven-archiver](https://github.com/apache/maven-archiver) from 3.6.4 to 3.6.5.\n- [Release notes](https://github.com/apache/maven-archiver/releases)\n- [Commits](https://github.com/apache/maven-archiver/compare/maven-archiver-3.6.4...maven-archiver-3.6.5)\n\n---\nupdated-dependenc\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven:maven-archiver from 3.6.4 to 3.6.5 (#1258)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-10-26T14:38:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "aaf49df4f020bbd93a0e66bc05ca7f57620230c9",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-5 to 1.5.7-6.\n- [Commits](https://github.com/luben/zstd-jni/commits)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-version: 1.5.7-6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.7-5 to 1.5.7-6 (#1259)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-10-26T14:37:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07906edc55f5cde12e80c14655edbf6ba486f564",
          "body": null,
          "is_bot": false,
          "headline": "Maven 4 needs more work",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-10-08T20:23:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b340ee28f92f84a11cd83c0c759451181d98ca8",
          "body": "Should help with OOM issues",
          "is_bot": false,
          "headline": "Bump plexus-archiver to 4.10.3",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-10-08T20:23:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0962bf6a6abbaea308f1626f742d4c3569a56ee",
          "body": null,
          "is_bot": false,
          "headline": "Bump m-invoker-p to 3.9.1 for Java 25",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-10-08T19:31:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14e37ff09dcbf75e1e2f923178431849e02ab171",
          "body": null,
          "is_bot": false,
          "headline": "Enable Maven 4 in verification workflow",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-10-05T20:10:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86c6f46f588291fe0c1cfcdc263ab2b4fb9f5320",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-4 to 1.5.7-5.\n- [Commits](https://github.com/luben/zstd-jni/compare/v1.5.7-4...v1.5.7-5)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-version: 1.5.7-5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.7-4 to 1.5.7-5 (#1254)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-10-03T11:14:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bd97b637d3e10073c55f9a725738008990299df",
          "body": null,
          "is_bot": false,
          "headline": "feat: enable prevent branch protection rules (#1252)",
          "author_name": "Sebastian Tiemann",
          "author_login": "sebtiem",
          "committed_at": "2025-08-27T23:20:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17308240d8a161e12e286273c12fc6ea200d7456",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 44 to 45.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-version: '45'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 44 to 45",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-08-25T23:11:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9d50ed23e2d71feee2fb45523291d1d3dc3a208",
          "body": "Signed-off-by: Olivier Lamy <olamy@apache.org>",
          "is_bot": false,
          "headline": "fix lookup",
          "author_name": "Olivier Lamy",
          "author_login": "olamy",
          "committed_at": "2025-08-25T21:36:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8669d88e7f011823aa1e99bb8a1c1b747abf0236",
          "body": "Signed-off-by: Olivier Lamy <olamy@apache.org>",
          "is_bot": false,
          "headline": "cleanup checkstyle",
          "author_name": "Olivier Lamy",
          "author_login": "olamy",
          "committed_at": "2025-08-25T21:36:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fb87920ecdf0aa3d415fbacde318d2e48391b00",
          "body": null,
          "is_bot": false,
          "headline": "add missing version tag",
          "author_name": "Sylwester Lachiewicz",
          "author_login": "slachiewicz",
          "committed_at": "2025-08-25T21:36:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e31c568ebd375b10cb7e5573ad43ef16d419000e",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 42 to 44.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits/v44)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 42 to 44",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-08-25T21:36:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "329cf32c72f414c296c7263d9d566bf305edc598",
          "body": "Bumps [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) from 1.27.1 to 1.28.0.\n- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)\n- [Commits](https://github.com/apache/commons-compress/compare/rel/commons-compress-1.27.1...rel/comm\n[…]\nrg.apache.commons:commons-compress\n  dependency-version: 1.28.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-08-22T19:37:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "524f350329ab0beb6a5679047dd136fb8eff9395",
          "body": "Bumps [org.apache.maven:maven-archiver](https://github.com/apache/maven-archiver) from 3.6.3 to 3.6.4.\n- [Release notes](https://github.com/apache/maven-archiver/releases)\n- [Commits](https://github.com/apache/maven-archiver/compare/maven-archiver-3.6.3...maven-archiver-3.6.4)\n\n---\nupdated-dependenc\n[…]\nme: org.apache.maven:maven-archiver\n  dependency-version: 3.6.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven:maven-archiver from 3.6.3 to 3.6.4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-08-22T19:37:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fa20146db6929cd2cdafc7b2bc6043440972990f",
          "body": "Bumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.10.0 to 4.10.1.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)\n- [Commi\n[…]\nrg.codehaus.plexus:plexus-archiver\n  dependency-version: 4.10.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-08-22T19:37:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e04bfbd644e3f610aa356ae10b6e2ed3da6d5c3",
          "body": null,
          "is_bot": false,
          "headline": "Add Apache 2.0 LICENSE file (#1246)",
          "author_name": "Noah Tayebwa",
          "author_login": "Ndacyayisenga-droid",
          "committed_at": "2025-07-22T08:37:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a204833813643944e0b844b302366b9f09f9a7c0",
          "body": "---\nupdated-dependencies:\n- dependency-name: commons-io:commons-io\n  dependency-version: 2.20.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#1247)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-21T08:11:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2da1cf50f00988f55a8cfdc20d2bd6b7f51d4187",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-3 to 1.5.7-4.\n- [Commits](https://github.com/luben/zstd-jni/compare/v1.5.7-3...v1.5.7-4)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-version: 1.5.7-4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.7-3 to 1.5.7-4 (#1244)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-10T04:44:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a404e78854840250bf3d47c3b20bd293abafa40",
          "body": "Bumps commons-fileupload:commons-fileupload from 1.5 to 1.6.0.\n\n---\nupdated-dependencies:\n- dependency-name: commons-fileupload:commons-fileupload\n  dependency-version: 1.6.0\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump commons-fileupload:commons-fileupload (#1245)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-07-10T04:40:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55c1dc7744fb2395607bff97820b481a97720be1",
          "body": "Signed-off-by: Olivier Lamy <olamy@apache.org>",
          "is_bot": false,
          "headline": "restore notifications",
          "author_name": "Olivier Lamy",
          "author_login": "olamy",
          "committed_at": "2025-06-18T01:47:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed0cb20a8195079279321469f800fe4850aa8100",
          "body": "Signed-off-by: Olivier Lamy <olamy@apache.org>",
          "is_bot": false,
          "headline": "disable notifications during import, remove jira",
          "author_name": "Olivier Lamy",
          "author_login": "olamy",
          "committed_at": "2025-06-17T21:53:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ada2cc1c9025f32edb7bfd7fe7e630e9719a71d3",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-2 to 1.5.7-3.\n- [Commits](https://github.com/luben/zstd-jni/compare/v1.5.7-2...v1.5.7-3)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-version: 1.5.7-3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.7-2 to 1.5.7-3 (#225)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-05T19:43:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c083f341280d2524ad357c4ac4edc62f02a442a6",
          "body": "Bumps [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) from 4.9.2 to 4.10.0.\n- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)\n- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)\n- [Commit\n[…]\ndencies:\n- dependency-name: org.codehaus.plexus:plexus-archiver\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-archiver from 4.9.2 to 4.10.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-02T21:59:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "66e20223558e979b1d29295d6e79d33daaf19a36",
          "body": "Bumps [org.apache.maven.shared:maven-common-artifact-filters](https://github.com/apache/maven-common-artifact-filters) from 3.3.2 to 3.4.0.\n- [Release notes](https://github.com/apache/maven-common-artifact-filters/releases)\n- [Commits](https://github.com/apache/maven-common-artifact-filters/compare/\n[…]\nncy-name: org.apache.maven.shared:maven-common-artifact-filters\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.shared:maven-common-artifact-filters",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-02T19:14:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "46549d5795aefecaeec627d0ea18843fe9d76a9e",
          "body": "Bumps commons-io:commons-io from 2.16.1 to 2.19.0.\n\n---\nupdated-dependencies:\n- dependency-name: commons-io:commons-io\n  dependency-version: 2.19.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump commons-io:commons-io from 2.16.1 to 2.19.0 (#224)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-02T07:31:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a01283f69e16ad7aedc4a709cbf9270a13735c9",
          "body": "Bumps [org.codehaus.plexus:plexus-interpolation](https://github.com/codehaus-plexus/plexus-interpolation) from 1.27 to 1.28.\n- [Release notes](https://github.com/codehaus-plexus/plexus-interpolation/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-interpolation/compare/plexus-interpol\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28 (#223)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-02T07:31:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c2e99f22b86f1bc69a57e2c10d88de2ccb09233",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.6-3 to 1.5.7-2.\n- [Commits](https://github.com/luben/zstd-jni/compare/v1.5.6-3...v1.5.7-2)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-version: 1.5.7-2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.6-3 to 1.5.7-2 (#222)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-02T04:48:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6037e21a5e560224c0fc02ffe38a9b2873d0bbd3",
          "body": "Bumps [org.apache.maven:maven-archiver](https://github.com/apache/maven-archiver) from 3.6.2 to 3.6.3.\n- [Release notes](https://github.com/apache/maven-archiver/releases)\n- [Commits](https://github.com/apache/maven-archiver/compare/maven-archiver-3.6.2...maven-archiver-3.6.3)\n\n---\nupdated-dependenc\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven:maven-archiver from 3.6.2 to 3.6.3 (#221)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-02T04:48:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5b4fedde0c68eef44e8658c048814b05d43e562f",
          "body": "Bumps org.apache.commons:commons-compress from 1.27.0 to 1.27.1.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-compress\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.commons:commons-compress from 1.27.0 to 1.27.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-30T11:55:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07a68d7b406bb783f3cd2a0c275782db9b1154fe",
          "body": "Bumps [org.apache.maven.shared:maven-filtering](https://github.com/apache/maven-filtering) from 3.3.2 to 3.4.0.\n- [Release notes](https://github.com/apache/maven-filtering/releases)\n- [Commits](https://github.com/apache/maven-filtering/compare/maven-filtering-3.3.2...maven-filtering-3.4.0)\n\n---\nupda\n[…]\napache.maven.shared:maven-filtering\n  dependency-version: 3.4.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.shared:maven-filtering from 3.3.2 to 3.4.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-30T11:54:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2346f7a68e6b4bbbd9ed74dc83360f0bece4176e",
          "body": "Bumps [org.codehaus.plexus:plexus-io](https://github.com/codehaus-plexus/plexus-io) from 3.4.2 to 3.5.1.\n- [Release notes](https://github.com/codehaus-plexus/plexus-io/releases)\n- [Commits](https://github.com/codehaus-plexus/plexus-io/compare/plexus-io-3.4.2...plexus-io-3.5.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.codehaus.plexus:plexus-io\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.codehaus.plexus:plexus-io from 3.4.2 to 3.5.1",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-29T22:27:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c7e9e8ca34afbd69b4576084e7c3265b9987873e",
          "body": null,
          "is_bot": false,
          "headline": "Enable Github Issues (#219)",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2025-04-27T05:54:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d390c23406447acc1b6e32377f298cfcc45b9887",
          "body": null,
          "is_bot": false,
          "headline": "[MNGSITE-529] Rename \"Goals\" to \"Plugin Documentation\"",
          "author_name": "Matthias Bünger",
          "author_login": "Bukama",
          "committed_at": "2025-02-12T16:40:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f9def031952139f543852459548629c2af9b249",
          "body": "Bumps [org.hamcrest:hamcrest](https://github.com/hamcrest/JavaHamcrest) from 2.2 to 3.0.\r\n- [Release notes](https://github.com/hamcrest/JavaHamcrest/releases)\r\n- [Changelog](https://github.com/hamcrest/JavaHamcrest/blob/master/CHANGES.md)\r\n- [Commits](https://github.com/hamcrest/JavaHamcrest/compare\n[…]\ndevelopment\r\n  update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Bump org.hamcrest:hamcrest from 2.2 to 3.0 (#212)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-08-31T17:07:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "da98f29bf6a1cab7318386fa503505ff28b37c96",
          "body": null,
          "is_bot": false,
          "headline": "use new Reproducible Central badge endpoint",
          "author_name": "Hervé Boutemy",
          "author_login": "hboutemy",
          "committed_at": "2024-08-18T23:20:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c704bd1a43e1f5080136a44d4cf2e1f96d33be6",
          "body": "Bumps org.apache.commons:commons-compress from 1.26.1 to 1.27.0.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.commons:commons-compress\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.commons:commons-compress from 1.26.1 to 1.27.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-08-11T20:44:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6f86188d097f58453c7fcf662c02c691020877d1",
          "body": "…added in final MANIFEST (#205)\n\n* [MASSEMBLY-1030] Manifest entries from archive configuration are not added in final MANIFEST\r\n\r\nSigned-off-by: Olivier Lamy <olamy@apache.org>\r\n\r\n* force war plugin version to get it working with more recent Java version\r\n\r\nSigned-off-by: Olivier Lamy <olamy@apache.org>\r\n\r\n---------\r\n\r\nSigned-off-by: Olivier Lamy <olamy@apache.org>",
          "is_bot": false,
          "headline": "[MASSEMBLY-1030] Manifest entries from archive configuration are not …",
          "author_name": "Olivier Lamy",
          "author_login": "olamy",
          "committed_at": "2024-05-12T11:17:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d525e126f34d79daeb709bee5c042ea1bc09eca",
          "body": "Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.6-1 to 1.5.6-3.\n- [Commits](https://github.com/luben/zstd-jni/compare/v1.5.6-1...v1.5.6-3)\n\n---\nupdated-dependencies:\n- dependency-name: com.github.luben:zstd-jni\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump com.github.luben:zstd-jni from 1.5.6-1 to 1.5.6-3",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-05-11T09:24:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e822d6c1b763fa13d29876a922616d833f5d0a31",
          "body": "Bumps [org.apache.maven.plugins:maven-plugins](https://github.com/apache/maven-parent) from 41 to 42.\n- [Release notes](https://github.com/apache/maven-parent/releases)\n- [Commits](https://github.com/apache/maven-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-plugins\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump org.apache.maven.plugins:maven-plugins from 41 to 42",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-05-11T09:23:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99ad545393050de19603728817f2b5c8482107a9",
          "body": null,
          "is_bot": false,
          "headline": "[MASSEMBLY-1029] Use minimal level for model validation (#204)",
          "author_name": "Guillaume Nodet",
          "author_login": "gnodet",
          "committed_at": "2024-04-25T17:26:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d745bc4eea22f5fca662ee4a9b3120031908789f",
          "body": "---\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[MASSEMBLY-1027] Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#201)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-09T08:35:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a19fcb91998bc62b561e4d8f43f4ff06e4b3f9b9",
          "body": "….6.2 (#197)\n\nBumps [org.apache.maven:maven-archiver](https://github.com/apache/maven-archiver) from 3.6.1 to 3.6.2.\r\n- [Release notes](https://github.com/apache/maven-archiver/releases)\r\n- [Commits](https://github.com/apache/maven-archiver/compare/maven-archiver-3.6.1...maven-archiver-3.6.2)\r\n\r\n---\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[MASSEMBLY-1028] Bump org.apache.maven:maven-archiver from 3.6.1 to 3…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-03-31T20:39:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4f254ee378bdd5dc729e272579110dbfaa9f69ba",
          "body": "---\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "[MASSEMBLY-1027] Bump commons-io:commons-io from 2.15.1 to 2.16.0 (#198)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-03-31T20:37:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 3,
      "commits_last_year": 70,
      "latest_release_at": "2025-11-29T12:59:40Z",
      "latest_release_tag": "maven-assembly-plugin-3.8.0",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 32,
      "days_since_latest_release": 241,
      "mean_days_between_releases": 312.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "org.apache.maven.plugins:maven-assembly-plugin",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": true,
          "registry_url": "https://central.sonatype.com/artifact/org.apache.maven.plugins/maven-assembly-plugin",
          "is_deprecated": false,
          "latest_version": "3.8.0",
          "repository_url": "https://github.com/apache/maven-assembly-plugin/tree/${project.scm.tag}",
          "versions_count": 36,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2025-11-29T00:28:45Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 241
        }
      ]
    },
    "popularity": {
      "forks": 75,
      "stars": 110,
      "watchers": 25,
      "fork_history": {
        "days": [
          {
            "date": "2018-01-21",
            "count": 1
          },
          {
            "date": "2018-01-22",
            "count": 1
          },
          {
            "date": "2018-01-31",
            "count": 1
          },
          {
            "date": "2018-02-01",
            "count": 1
          },
          {
            "date": "2018-02-15",
            "count": 1
          },
          {
            "date": "2018-04-09",
            "count": 1
          },
          {
            "date": "2018-06-21",
            "count": 1
          },
          {
            "date": "2018-08-25",
            "count": 1
          },
          {
            "date": "2018-09-19",
            "count": 1
          },
          {
            "date": "2018-10-09",
            "count": 1
          },
          {
            "date": "2018-10-13",
            "count": 1
          },
          {
            "date": "2018-10-22",
            "count": 1
          },
          {
            "date": "2018-12-20",
            "count": 1
          },
          {
            "date": "2018-12-21",
            "count": 1
          },
          {
            "date": "2019-04-11",
            "count": 1
          },
          {
            "date": "2019-06-07",
            "count": 1
          },
          {
            "date": "2019-06-14",
            "count": 1
          },
          {
            "date": "2019-07-09",
            "count": 1
          },
          {
            "date": "2019-08-09",
            "count": 1
          },
          {
            "date": "2019-09-04",
            "count": 1
          },
          {
            "date": "2019-10-14",
            "count": 1
          },
          {
            "date": "2019-11-12",
            "count": 1
          },
          {
            "date": "2019-12-17",
            "count": 1
          },
          {
            "date": "2019-12-19",
            "count": 1
          },
          {
            "date": "2019-12-30",
            "count": 1
          },
          {
            "date": "2020-03-25",
            "count": 1
          },
          {
            "date": "2020-04-13",
            "count": 1
          },
          {
            "date": "2020-05-08",
            "count": 1
          },
          {
            "date": "2020-07-16",
            "count": 1
          },
          {
            "date": "2020-09-23",
            "count": 1
          },
          {
            "date": "2020-11-18",
            "count": 1
          },
          {
            "date": "2020-12-02",
            "count": 1
          },
          {
            "date": "2021-01-19",
            "count": 1
          },
          {
            "date": "2021-02-01",
            "count": 1
          },
          {
            "date": "2021-03-13",
            "count": 1
          },
          {
            "date": "2021-03-17",
            "count": 1
          },
          {
            "date": "2021-05-10",
            "count": 1
          },
          {
            "date": "2021-06-24",
            "count": 1
          },
          {
            "date": "2021-08-13",
            "count": 1
          },
          {
            "date": "2021-09-10",
            "count": 1
          },
          {
            "date": "2021-09-27",
            "count": 1
          },
          {
            "date": "2021-10-27",
            "count": 1
          },
          {
            "date": "2021-12-01",
            "count": 1
          },
          {
            "date": "2021-12-15",
            "count": 1
          },
          {
            "date": "2022-06-20",
            "count": 1
          },
          {
            "date": "2022-07-05",
            "count": 1
          },
          {
            "date": "2022-07-13",
            "count": 1
          },
          {
            "date": "2022-08-02",
            "count": 1
          },
          {
            "date": "2022-09-10",
            "count": 1
          },
          {
            "date": "2022-10-21",
            "count": 1
          },
          {
            "date": "2022-11-18",
            "count": 1
          },
          {
            "date": "2022-11-22",
            "count": 1
          },
          {
            "date": "2023-02-13",
            "count": 1
          },
          {
            "date": "2023-04-04",
            "count": 1
          },
          {
            "date": "2023-04-06",
            "count": 1
          },
          {
            "date": "2023-06-16",
            "count": 1
          },
          {
            "date": "2023-07-10",
            "count": 1
          },
          {
            "date": "2023-07-26",
            "count": 1
          },
          {
            "date": "2023-08-19",
            "count": 1
          },
          {
            "date": "2023-11-01",
            "count": 1
          },
          {
            "date": "2023-11-02",
            "count": 1
          },
          {
            "date": "2023-12-05",
            "count": 1
          },
          {
            "date": "2024-04-05",
            "count": 1
          },
          {
            "date": "2024-07-23",
            "count": 1
          },
          {
            "date": "2025-02-11",
            "count": 1
          },
          {
            "date": "2025-04-01",
            "count": 1
          },
          {
            "date": "2025-07-16",
            "count": 1
          },
          {
            "date": "2025-08-27",
            "count": 1
          },
          {
            "date": "2025-11-02",
            "count": 1
          },
          {
            "date": "2025-11-29",
            "count": 1
          },
          {
            "date": "2026-02-08",
            "count": 1
          },
          {
            "date": "2026-05-14",
            "count": 1
          },
          {
            "date": "2026-06-26",
            "count": 1
          },
          {
            "date": "2026-07-08",
            "count": 1
          },
          {
            "date": "2026-07-24",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 75,
        "total_forks": 75
      },
      "star_history": null,
      "open_issues_and_prs": 88
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "pom.xml",
        "src/it/it-project-parent/pom.xml",
        "src/it/projects/basic-features/ExecutionRoot/child/pom.xml",
        "src/it/projects/basic-features/ExecutionRoot/pom.xml",
        "src/it/projects/basic-features/add-classpath/pom.xml",
        "src/it/projects/basic-features/classpath-descriptor/pom.xml",
        "src/it/projects/basic-features/descriptorDirectoryScan/pom.xml",
        "src/it/projects/basic-features/file-copyIntoTopDir/pom.xml",
        "src/it/projects/basic-features/file-sameName/pom.xml",
        "src/it/projects/basic-features/formats-in-pom-win/pom.xml",
        "src/it/projects/basic-features/formats-zstd/pom.xml",
        "src/it/projects/basic-features/formats/pom.xml",
        "src/it/projects/basic-features/inline-descriptor/pom.xml",
        "src/it/projects/basic-features/local-repo-interp/pom.xml",
        "src/it/projects/basic-features/massembly-256-pomPropertiesInterp/pom.xml",
        "src/it/projects/basic-features/massembly-351-projectPrefixInterp/pom.xml",
        "src/it/projects/basic-features/outputFileNameMapping-simple/pom.xml",
        "src/it/projects/basic-features/outputFileNameMapping-withArtifactBaseVersion/pom.xml",
        "src/it/projects/basic-features/relative-project-paths/pom.xml",
        "src/it/projects/basic-features/space & special char/pom.xml",
        "src/it/projects/bugs/massembly-1022/pom.xml",
        "src/it/projects/bugs/massembly-190/child-1/pom.xml",
        "src/it/projects/bugs/massembly-190/child-2/pom.xml",
        "src/it/projects/bugs/massembly-190/child-3/pom.xml",
        "src/it/projects/bugs/massembly-190/pom.xml",
        "src/it/projects/bugs/massembly-285/massembly-285-assembly/pom.xml",
        "src/it/projects/bugs/massembly-285/massembly-285-mod1/pom.xml",
        "src/it/projects/bugs/massembly-285/massembly-285-mod2/pom.xml",
        "src/it/projects/bugs/massembly-285/pom.xml",
        "src/it/projects/bugs/massembly-306/pom.xml",
        "src/it/projects/bugs/massembly-324/pom.xml",
        "src/it/projects/bugs/massembly-375/pom.xml",
        "src/it/projects/bugs/massembly-559/pom.xml",
        "src/it/projects/bugs/massembly-580/pom.xml",
        "src/it/projects/bugs/massembly-583/child1/pom.xml",
        "src/it/projects/bugs/massembly-583/child2/pom.xml",
        "src/it/projects/bugs/massembly-583/pom.xml",
        "src/it/projects/bugs/massembly-730/pom.xml",
        "src/it/projects/bugs/massembly-731/pom.xml",
        "src/it/projects/bugs/massembly-732/pom.xml",
        "src/it/projects/bugs/massembly-733/pom.xml",
        "src/it/projects/bugs/massembly-737/pom.xml",
        "src/it/projects/bugs/massembly-739/pom.xml",
        "src/it/projects/bugs/massembly-743/pom.xml",
        "src/it/projects/bugs/massembly-891/pom.xml",
        "src/it/projects/bugs/massembly-919/bundle/pom.xml",
        "src/it/projects/bugs/massembly-919/maindep/pom.xml",
        "src/it/projects/bugs/massembly-919/pom.xml",
        "src/it/projects/bugs/massembly-919/testdep/pom.xml",
        "src/it/projects/bugs/massembly-920/pom.xml",
        "src/it/projects/bugs/massembly-956/pom.xml",
        "src/it/projects/bugs/massembly-964/pom.xml",
        "src/it/projects/components/component-dependencySet/pom.xml",
        "src/it/projects/components/component-moduleSet/child1/pom.xml",
        "src/it/projects/components/component-moduleSet/child2/pom.xml",
        "src/it/projects/components/component-moduleSet/pom.xml",
        "src/it/projects/container-descriptors/configured-handler/pom.xml",
        "src/it/projects/container-descriptors/custom-containerDescriptorHandler/assembly/pom.xml",
        "src/it/projects/container-descriptors/custom-containerDescriptorHandler/handler-def/pom.xml",
        "src/it/projects/container-descriptors/custom-containerDescriptorHandler/pom.xml",
        "src/it/projects/container-descriptors/custom-handler-withFileEntries/assembly/pom.xml",
        "src/it/projects/container-descriptors/custom-handler-withFileEntries/handler-def/pom.xml",
        "src/it/projects/container-descriptors/custom-handler-withFileEntries/pom.xml",
        "src/it/projects/container-descriptors/custom-handler-withMixedEntries/assembly/pom.xml",
        "src/it/projects/container-descriptors/custom-handler-withMixedEntries/handler-def/pom.xml",
        "src/it/projects/container-descriptors/custom-handler-withMixedEntries/pom.xml",
        "src/it/projects/container-descriptors/metaInf-services-aggregation/child1/pom.xml",
        "src/it/projects/container-descriptors/metaInf-services-aggregation/child2/pom.xml",
        "src/it/projects/container-descriptors/metaInf-services-aggregation/pom.xml",
        "src/it/projects/container-descriptors/metaInf-spring-aggregation/child1/pom.xml",
        "src/it/projects/container-descriptors/metaInf-spring-aggregation/child2/pom.xml",
        "src/it/projects/container-descriptors/metaInf-spring-aggregation/pom.xml",
        "src/it/projects/dependency-sets/dep-transfilter-wildcard-massembly544/pom.xml",
        "src/it/projects/dependency-sets/dep-with-transitive-filter/pom.xml",
        "src/it/projects/dependency-sets/depMgmt-override/child/pom.xml",
        "src/it/projects/dependency-sets/depMgmt-override/pom.xml",
        "src/it/projects/dependency-sets/depSet-artifactPomPropInterp/child1/pom.xml",
        "src/it/projects/dependency-sets/depSet-artifactPomPropInterp/child2/pom.xml",
        "src/it/projects/dependency-sets/depSet-artifactPomPropInterp/pom.xml",
        "src/it/projects/dependency-sets/depSet-byDepVersion/child1/pom.xml",
        "src/it/projects/dependency-sets/depSet-byDepVersion/child2/pom.xml",
        "src/it/projects/dependency-sets/depSet-byDepVersion/child3/pom.xml",
        "src/it/projects/dependency-sets/depSet-byDepVersion/pom.xml",
        "src/it/projects/dependency-sets/depSet-enum-vs-wildcard/enum/pom.xml",
        "src/it/projects/dependency-sets/depSet-enum-vs-wildcard/pom.xml",
        "src/it/projects/dependency-sets/depSet-enum-vs-wildcard/wildcard/pom.xml",
        "src/it/projects/dependency-sets/depSet-runtimeScope/child1/pom.xml",
        "src/it/projects/dependency-sets/depSet-runtimeScope/child2/pom.xml",
        "src/it/projects/dependency-sets/depSet-runtimeScope/child3/pom.xml",
        "src/it/projects/dependency-sets/depSet-runtimeScope/pom.xml",
        "src/it/projects/dependency-sets/depSet-transFromProfile/child1/pom.xml",
        "src/it/projects/dependency-sets/depSet-transFromProfile/child2/pom.xml",
        "src/it/projects/dependency-sets/depSet-transFromProfile/child3/pom.xml",
        "src/it/projects/dependency-sets/depSet-transFromProfile/child4/pom.xml",
        "src/it/projects/dependency-sets/depSet-transFromProfile/pom.xml",
        "src/it/projects/dependency-sets/depSet-unpacked-rdonly/child1/pom.xml",
        "src/it/projects/dependency-sets/depSet-unpacked-rdonly/child2/pom.xml",
        "src/it/projects/dependency-sets/depSet-unpacked-rdonly/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-matchScope/child1/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-matchScope/child2/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-matchScope/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-nonTransitive/child1/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-nonTransitive/child2/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-nonTransitive/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-notUnpacked/child1/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-notUnpacked/child2/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-notUnpacked/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-projectArtifactNotIncluded/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpacked-filtered/child1/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpacked-filtered/child2/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpacked-filtered/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpacked/child1/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpacked/child2/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpacked/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpackedExcludingMetaInf/child1/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpackedExcludingMetaInf/child2/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpackedExcludingMetaInf/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpackedSubsetsTwice/child1/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpackedSubsetsTwice/child2/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-unpackedSubsetsTwice/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-withExecutedProject/child1/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-withExecutedProject/child2/pom.xml",
        "src/it/projects/dependency-sets/dependencySet-withExecutedProject/pom.xml",
        "src/it/projects/dependency-sets/include-project-artifact/pom.xml",
        "src/it/projects/dependency-sets/include-project-attachments/pom.xml",
        "src/it/projects/dependency-sets/include-provided/child1/pom.xml",
        "src/it/projects/dependency-sets/include-provided/child2/pom.xml",
        "src/it/projects/dependency-sets/include-provided/pom.xml",
        "src/it/projects/dependency-sets/including-pom-dependency/pom.xml",
        "src/it/projects/dependency-sets/including-sar-dependency/pom.xml",
        "src/it/projects/dependency-sets/massembly-1008/pom.xml",
        "src/it/projects/dependency-sets/massembly-201/pom.xml",
        "src/it/projects/dependency-sets/massembly-232/pom.xml",
        "src/it/projects/dependency-sets/massembly-235/pom.xml",
        "src/it/projects/dependency-sets/massembly-345/pom.xml",
        "src/it/projects/dependency-sets/massembly-395/child1/pom.xml",
        "src/it/projects/dependency-sets/massembly-395/child2/pom.xml",
        "src/it/projects/dependency-sets/massembly-395/pom.xml",
        "src/it/projects/dependency-sets/massembly-619/pom.xml",
        "src/it/projects/dependency-sets/massembly-675/pom.xml",
        "src/it/projects/dependency-sets/massembly-955/pom.xml",
        "src/it/projects/dependency-sets/massembly-969/pom.xml",
        "src/it/projects/dependency-sets/massembly-99/assembly/pom.xml",
        "src/it/projects/dependency-sets/massembly-99/module-a/pom.xml",
        "src/it/projects/dependency-sets/massembly-99/module-b/pom.xml",
        "src/it/projects/dependency-sets/massembly-99/pom.xml",
        "src/it/projects/dependency-sets/massembly-994-refresh-unpacked/child1/pom.xml",
        "src/it/projects/dependency-sets/massembly-994-refresh-unpacked/child2/pom.xml",
        "src/it/projects/dependency-sets/massembly-994-refresh-unpacked/pom.xml",
        "src/it/projects/dependency-sets/mid-artifactId-wildcard-massembly570/pom.xml",
        "src/it/projects/dependency-sets/multiple-wildcard-includes/pom.xml",
        "src/it/projects/dependency-sets/outputFileNameMappingWithUnpack/pom.xml",
        "src/it/projects/dependency-sets/unpack-deps-correct-dir/pom.xml",
        "src/it/projects/dependency-sets/using-moduleSet-implied-depSet/module-a/pom.xml",
        "src/it/projects/dependency-sets/using-moduleSet-implied-depSet/module-b/pom.xml",
        "src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml",
        "src/it/projects/descriptor-refs/bin/jars-in-archive-root/pom.xml",
        "src/it/projects/descriptor-refs/jar-with-dependencies/component-descriptors-merged/child1/pom.xml",
        "src/it/projects/descriptor-refs/jar-with-dependencies/component-descriptors-merged/child2/pom.xml",
        "src/it/projects/descriptor-refs/jar-with-dependencies/component-descriptors-merged/pom.xml",
        "src/it/projects/descriptor-refs/jar-with-dependencies/deps-unpacked-to-root-dir/child1/pom.xml",
        "src/it/projects/descriptor-refs/jar-with-dependencies/deps-unpacked-to-root-dir/child2/pom.xml",
        "src/it/projects/descriptor-refs/jar-with-dependencies/deps-unpacked-to-root-dir/pom.xml",
        "src/it/projects/descriptor-refs/jar-with-dependencies/main-class-and-dependencies/pom.xml",
        "src/it/projects/descriptor-refs/jar-with-dependencies/no-target-dir/pom.xml",
        "src/it/projects/descriptor-refs/project/multimodule-sources-copied/child1/pom.xml",
        "src/it/projects/descriptor-refs/project/multimodule-sources-copied/child2/pom.xml",
        "src/it/projects/descriptor-refs/project/multimodule-sources-copied/pom.xml",
        "src/it/projects/descriptor-refs/project/no-target-dir-multimodule/child1/pom.xml",
        "src/it/projects/descriptor-refs/project/no-target-dir-multimodule/child2/pom.xml",
        "src/it/projects/descriptor-refs/project/no-target-dir-multimodule/pom.xml",
        "src/it/projects/descriptor-refs/project/no-target-dir/pom.xml",
        "src/it/projects/descriptor-refs/project/sources-copied/pom.xml",
        "src/it/projects/descriptor-refs/src/no-target-dir/pom.xml",
        "src/it/projects/descriptor-refs/src/src-dir-copied/pom.xml",
        "src/it/projects/file-modes/file-set-fileMode/pom.xml",
        "src/it/projects/file-modes/fileItem-fileMode/pom.xml",
        "src/it/projects/file-sets/default-directory-unspecified/pom.xml",
        "src/it/projects/file-sets/default-excludes-unspecified/pom.xml",
        "src/it/projects/file-sets/dont-use-default-excludes/pom.xml",
        "src/it/projects/file-sets/excludes-using-regex/child/pom.xml",
        "src/it/projects/file-sets/excludes-using-regex/pom.xml",
        "src/it/projects/file-sets/excluding-svn-dirs/pom.xml",
        "src/it/projects/file-sets/filtered-module-sources/child/pom.xml",
        "src/it/projects/file-sets/filtered-module-sources/pom.xml",
        "src/it/projects/file-sets/filtered-multimodule/child/pom.xml",
        "src/it/projects/file-sets/filtered-multimodule/pom.xml",
        "src/it/projects/file-sets/include-base-directory/pom.xml",
        "src/it/projects/file-sets/include-parent-dir/child/pom.xml",
        "src/it/projects/file-sets/include-parent-dir/pom.xml",
        "src/it/projects/file-sets/massembly-665/pom.xml",
        "src/it/projects/file-sets/multimodule-unix-lineEndings/child/pom.xml",
        "src/it/projects/file-sets/multimodule-unix-lineEndings/pom.xml",
        "src/it/projects/file-sets/multimodule-win-lineEndings/child/pom.xml",
        "src/it/projects/file-sets/multimodule-win-lineEndings/pom.xml",
        "src/it/projects/file-sets/platformspecific-filesets/pom.xml",
        "src/it/projects/file-sets/precedence-check/pom.xml",
        "src/it/projects/file-sets/symbolic-links/pom.xml",
        "src/it/projects/file-sets/use-default-excludes/pom.xml",
        "src/it/projects/files/filtered-sysprop/pom.xml",
        "src/it/projects/files/multimodule-relativePath/child/pom.xml",
        "src/it/projects/files/multimodule-relativePath/pom.xml",
        "src/it/projects/filtering-feature/fileset-to-tar-massembly-722/pom.xml",
        "src/it/projects/filtering-feature/filter-comp-descriptor-path/pom.xml",
        "src/it/projects/filtering-feature/filters-defined-in-build/pom.xml",
        "src/it/projects/filtering-feature/filtersDefinedInAssemblyPluginConfig/pom.xml",
        "src/it/projects/filtering-feature/massembly-736/pom.xml",
        "src/it/projects/forking-tests/assembly-assembly-with-module-binaries/child1/pom.xml",
        "src/it/projects/forking-tests/assembly-assembly-with-module-binaries/child2/pom.xml",
        "src/it/projects/forking-tests/assembly-assembly-with-module-binaries/pom.xml",
        "src/it/projects/forking-tests/assembly-attached-with-module-binaries/child1/pom.xml",
        "src/it/projects/forking-tests/assembly-attached-with-module-binaries/child2/pom.xml",
        "src/it/projects/forking-tests/assembly-attached-with-module-binaries/pom.xml",
        "src/it/projects/massembly-934_concat-files/pom.xml",
        "src/it/projects/mojo-configuration/archiver-ignorePermissions/pom.xml",
        "src/it/projects/mojo-configuration/ignoreDirFormatExtensions/pom.xml",
        "src/it/projects/mojo-configuration/manifest-with-customEntry-manifest-file/pom.xml",
        "src/it/projects/mojo-configuration/manifest-with-customEntry/pom.xml",
        "src/it/projects/mojo-configuration/manifest-with-mainClass/pom.xml",
        "src/it/projects/mojo-configuration/massembly-291/pom.xml",
        "src/it/projects/mojo-configuration/massembly-301/pom.xml",
        "src/it/projects/mojo-configuration/no-appendAssemblyId-no-classifier/pom.xml",
        "src/it/projects/mojo-configuration/skipAssemblyCLIPropertySet/pom.xml",
        "src/it/projects/mojo-tests/single-in-one-project-hierarchy/pom.xml",
        "src/it/projects/mojo-tests/single-twice-in-multimodule-hierarchy/child1/pom.xml",
        "src/it/projects/mojo-tests/single-twice-in-multimodule-hierarchy/child2/pom.xml",
        "src/it/projects/mojo-tests/single-twice-in-multimodule-hierarchy/pom.xml",
        "src/it/projects/mojo-tests/single-twice-in-one-project-hierarchy/pom.xml",
        "src/it/projects/multimodule/massembly-298/assembly/pom.xml",
        "src/it/projects/multimodule/massembly-298/child1/pom.xml",
        "src/it/projects/multimodule/massembly-298/child2/pom.xml",
        "src/it/projects/multimodule/massembly-298/pom.xml",
        "src/it/projects/multimodule/massembly-317/child1/pom.xml",
        "src/it/projects/multimodule/massembly-317/child2/pom.xml",
        "src/it/projects/multimodule/massembly-317/pom.xml",
        "src/it/projects/multimodule/massembly-474/child-client/pom.xml",
        "src/it/projects/multimodule/massembly-474/child-server/pom.xml",
        "src/it/projects/multimodule/massembly-474/descriptor/pom.xml",
        "src/it/projects/multimodule/massembly-474/pom.xml",
        "src/it/projects/multimodule/massembly-619/child-client/pom.xml",
        "src/it/projects/multimodule/massembly-619/descriptor/pom.xml",
        "src/it/projects/multimodule/massembly-619/pom.xml",
        "src/it/projects/multimodule/multimodule-binariesNotSource/assembly/pom.xml",
        "src/it/projects/multimodule/multimodule-binariesNotSource/child1/pom.xml",
        "src/it/projects/multimodule/multimodule-binariesNotSource/child2/pom.xml",
        "src/it/projects/multimodule/multimodule-binariesNotSource/child3/pom.xml",
        "src/it/projects/multimodule/multimodule-binariesNotSource/pom.xml",
        "src/it/projects/multimodule/multimodule-filteredFileSet/child/pom.xml",
        "src/it/projects/multimodule/multimodule-filteredFileSet/pom.xml",
        "src/it/projects/multimodule/multimodule-modulePomPropInterp/child1/pom.xml",
        "src/it/projects/multimodule/multimodule-modulePomPropInterp/child2/pom.xml",
        "src/it/projects/multimodule/multimodule-modulePomPropInterp/pom.xml",
        "src/it/projects/multimodule/multimodule-siblingParent/child1/pom.xml",
        "src/it/projects/multimodule/multimodule-siblingParent/child2/pom.xml",
        "src/it/projects/multimodule/multimodule-siblingParent/parent/pom.xml",
        "src/it/projects/multimodule/multimodule-sourceNotBinaries/child1/pom.xml",
        "src/it/projects/multimodule/multimodule-sourceNotBinaries/child2/pom.xml",
        "src/it/projects/multimodule/multimodule-sourceNotBinaries/child3/pom.xml",
        "src/it/projects/multimodule/multimodule-sourceNotBinaries/pom.xml",
        "src/it/projects/multimodule/multimodule-wholeReactorFromChild/child1/pom.xml",
        "src/it/projects/multimodule/multimodule-wholeReactorFromChild/child2/pom.xml",
        "src/it/projects/multimodule/multimodule-wholeReactorFromChild/child3/pom.xml",
        "src/it/projects/multimodule/multimodule-wholeReactorFromChild/child4/pom.xml",
        "src/it/projects/multimodule/multimodule-wholeReactorFromChild/pom.xml",
        "src/it/projects/multimodule/two-level-multimodule/assembly/pom.xml",
        "src/it/projects/multimodule/two-level-multimodule/child-level1-project1/pom.xml",
        "src/it/projects/multimodule/two-level-multimodule/child-level1-project2/child-level2-project1/pom.xml",
        "src/it/projects/multimodule/two-level-multimodule/child-level1-project2/pom.xml",
        "src/it/projects/multimodule/two-level-multimodule/pom.xml",
        "src/it/projects/multimodule/two-levels-includeBaseDir-withBin/assembly/pom.xml",
        "src/it/projects/multimodule/two-levels-includeBaseDir-withBin/child-level1-project1/pom.xml",
        "src/it/projects/multimodule/two-levels-includeBaseDir-withBin/child-level1-project2/child-level2-project1/pom.xml",
        "src/it/projects/multimodule/two-levels-includeBaseDir-withBin/child-level1-project2/pom.xml",
        "src/it/projects/multimodule/two-levels-includeBaseDir-withBin/pom.xml",
        "src/it/projects/multimodule/two-levels-includeBaseDir-withSrc/assembly/pom.xml",
        "src/it/projects/multimodule/two-levels-includeBaseDir-withSrc/child-level1-project1/pom.xml",
        "src/it/projects/multimodule/two-levels-includeBaseDir-withSrc/child-level1-project2/child-level2-project1/pom.xml",
        "src/it/projects/multimodule/two-levels-includeBaseDir-withSrc/child-level1-project2/pom.xml",
        "src/it/projects/multimodule/two-levels-includeBaseDir-withSrc/pom.xml",
        "src/it/projects/reproducible/pom.xml"
      ],
      "largest_source_bytes": 33005,
      "source_files_sampled": 302,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 1162
    },
    "dependencies": {
      "manifests": [
        "pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "org.codehaus.plexus:plexus-utils",
            "direct": true,
            "version": "4.0.2",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-6fmv-xxpf-w3cw"
            ],
            "fixed_version": "4.0.3",
            "advisory_count": 1,
            "oldest_advisory_days": 124
          },
          {
            "name": "io.airlift:aircompressor",
            "direct": false,
            "version": "0.27",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-vx9q-rhv9-3jvg"
            ],
            "fixed_version": "3.4",
            "advisory_count": 1,
            "oldest_advisory_days": 227
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 2
        },
        "advisory_count": 2,
        "affected_count": 2,
        "assessed_count": 47,
        "malicious_count": 0,
        "assessed_package": "maven:org.apache.maven.plugins:maven-assembly-plugin@3.8.0",
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "org.apache.commons:commons-lang3",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.20.0"
        },
        {
          "name": "org.apache.maven.resolver:maven-resolver-util",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.4.1"
        },
        {
          "name": "org.apache.maven.resolver:maven-resolver-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.9.27"
        },
        {
          "name": "org.apache.maven.shared:maven-common-artifact-filters",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.4.0"
        },
        {
          "name": "org.codehaus.plexus:plexus-interpolation",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.29"
        },
        {
          "name": "commons-io:commons-io",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${commonsIoVersion}"
        },
        {
          "name": "org.apache.maven.shared:maven-filtering",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${mavenFilteringVersion}"
        },
        {
          "name": "org.codehaus.plexus:plexus-io",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.6.0"
        },
        {
          "name": "org.codehaus.plexus:plexus-archiver",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.12.0"
        },
        {
          "name": "org.apache.maven:maven-archiver",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${mavenArchiverVersion}"
        },
        {
          "name": "org.codehaus.plexus:plexus-utils",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.codehaus.plexus:plexus-xml",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.commons:commons-compress",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.28.0"
        },
        {
          "name": "com.github.luben:zstd-jni",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.5.7-11"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "com.github.luben:zstd-jni",
            "direct": true,
            "version": "1.5.7-11",
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": true,
            "version": "2.22.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-compress",
            "direct": true,
            "version": "1.28.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": true,
            "version": "3.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.resolver:maven-resolver-api",
            "direct": true,
            "version": "1.9.27",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.resolver:maven-resolver-util",
            "direct": true,
            "version": "1.4.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.shared:maven-common-artifact-filters",
            "direct": true,
            "version": "3.4.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.shared:maven-filtering",
            "direct": true,
            "version": "3.5.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-archiver",
            "direct": true,
            "version": "2.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-archiver",
            "direct": true,
            "version": "3.6.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-archiver",
            "direct": true,
            "version": "4.12.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-interpolation",
            "direct": true,
            "version": "1.29",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-io",
            "direct": true,
            "version": "3.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-utils",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-utils",
            "direct": true,
            "version": "3.5.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-utils",
            "direct": true,
            "version": "3.6.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-xml",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.google.guava:guava",
            "direct": false,
            "version": "32.0.0-jre",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.inject:guice",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.javascript:closure-compiler",
            "direct": false,
            "version": "v20131014",
            "ecosystem": "maven"
          },
          {
            "name": "com.mycompany.app:my-app-module2",
            "direct": false,
            "version": "1.0-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "commons-codec:commons-codec",
            "direct": false,
            "version": "1.2",
            "ecosystem": "maven"
          },
          {
            "name": "commons-codec:commons-codec",
            "direct": false,
            "version": "1.3",
            "ecosystem": "maven"
          },
          {
            "name": "commons-configuration:commons-configuration",
            "direct": false,
            "version": "1.10",
            "ecosystem": "maven"
          },
          {
            "name": "commons-fileupload:commons-fileupload",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-logging:commons-logging",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "maven"
          },
          {
            "name": "commons-logging:commons-logging",
            "direct": false,
            "version": "1.3.5",
            "ecosystem": "maven"
          },
          {
            "name": "commons-vfs:commons-vfs",
            "direct": false,
            "version": "1.0",
            "ecosystem": "maven"
          },
          {
            "name": "javax.inject:javax.inject",
            "direct": false,
            "version": "1",
            "ecosystem": "maven"
          },
          {
            "name": "javax.servlet:servlet-api",
            "direct": false,
            "version": "2.3",
            "ecosystem": "maven"
          },
          {
            "name": "jaxen:jaxen",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "jdom:jdom",
            "direct": false,
            "version": "1.0",
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": false,
            "version": "4.13.1",
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": false,
            "version": "4.4",
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": false,
            "version": "4.5",
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit-dep",
            "direct": false,
            "version": "4.8.2",
            "ecosystem": "maven"
          },
          {
            "name": "mygroup:project-maindep",
            "direct": false,
            "version": "0.0.1-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "mygroup:project-testdep",
            "direct": false,
            "version": "0.0.1-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "mygroup:project1",
            "direct": false,
            "version": "0.0.1-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.apache.resources:apache-source-release-assembly-descriptor",
            "direct": false,
            "version": "1.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.camel:camel-core",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.felix:maven-bundle-plugin",
            "direct": false,
            "version": "5.1.9",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-api",
            "direct": false,
            "version": "2.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugin-tools:maven-plugin-annotations",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugin.assembly.test:child-1",
            "direct": false,
            "version": "1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugin.assembly.test:child-2",
            "direct": false,
            "version": "1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-assembly-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-clean-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-clean-plugin",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-deploy-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-install-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-invoker-plugin",
            "direct": false,
            "version": "1.28.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-plugin-report-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-resources-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-war-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.reporting:maven-reporting-api",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.reporting:maven-reporting-impl",
            "direct": false,
            "version": "2.0.4.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.reporting:maven-reporting-impl",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.shared:maven-shared-io",
            "direct": false,
            "version": "1.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.skins:maven-default-skin",
            "direct": false,
            "version": "1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.wagon:wagon-provider-api",
            "direct": false,
            "version": "1.0-beta-4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.wagon:wagon-webdav-jackrabbit",
            "direct": false,
            "version": "1.0-beta-4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-artifact",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-artifact",
            "direct": false,
            "version": "3.9.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-core",
            "direct": false,
            "version": "3.9.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-model",
            "direct": false,
            "version": "2.0.9",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-model",
            "direct": false,
            "version": "3.9.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-model-builder",
            "direct": false,
            "version": "3.9.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-monitor",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-plugin-api",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-plugin-api",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven:maven-plugin-api",
            "direct": false,
            "version": "3.9.16",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.rat:apache-rat-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.modello:modello-maven-plugin",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-appserver-service-xmlrpc",
            "direct": false,
            "version": "2.0-alpha-3",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-classworlds",
            "direct": false,
            "version": "2.12.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.plexus:plexus-container-default",
            "direct": false,
            "version": "1.0-alpha-9",
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.sisu:org.eclipse.sisu.inject",
            "direct": false,
            "version": "0.3.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.sisu:org.eclipse.sisu.plexus",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.sisu:sisu-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.jdom:jdom2",
            "direct": false,
            "version": "2.0.6.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-api",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-api",
            "direct": false,
            "version": "5.9.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-core",
            "direct": false,
            "version": "4.11.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-junit-jupiter",
            "direct": false,
            "version": "4.11.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.mule.transports:mule-transport-vm",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.mule:mule-core",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.openjfx:javafx-base",
            "direct": false,
            "version": "26",
            "ecosystem": "maven"
          },
          {
            "name": "org.openjfx:javafx-controls",
            "direct": false,
            "version": "26",
            "ecosystem": "maven"
          },
          {
            "name": "org.openjfx:javafx-graphics",
            "direct": false,
            "version": "26",
            "ecosystem": "maven"
          },
          {
            "name": "org.openjfx:javafx-media",
            "direct": false,
            "version": "26",
            "ecosystem": "maven"
          },
          {
            "name": "org.openjfx:javafx-swing",
            "direct": false,
            "version": "26",
            "ecosystem": "maven"
          },
          {
            "name": "org.openjfx:javafx-web",
            "direct": false,
            "version": "26",
            "ecosystem": "maven"
          },
          {
            "name": "org.postgresql:postgresql",
            "direct": false,
            "version": "42.7.11",
            "ecosystem": "maven"
          },
          {
            "name": "org.python:jython-standalone",
            "direct": false,
            "version": "2.7.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": false,
            "version": "1.7.36",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-simple",
            "direct": false,
            "version": "1.7.36",
            "ecosystem": "maven"
          },
          {
            "name": "org.teiid:teiid",
            "direct": false,
            "version": "10.0.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.test:child1",
            "direct": false,
            "version": "1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.test:child2",
            "direct": false,
            "version": "1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.test:child3",
            "direct": false,
            "version": "1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.test:handler-def",
            "direct": false,
            "version": "1",
            "ecosystem": "maven"
          },
          {
            "name": "org.test:maven-assembly-plugin",
            "direct": false,
            "version": "1",
            "ecosystem": "maven"
          },
          {
            "name": "test:child-level1-project1",
            "direct": false,
            "version": "1.0-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "test:child-level1-project2",
            "direct": false,
            "version": "1.0-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "test:child1",
            "direct": false,
            "version": "1",
            "ecosystem": "maven"
          },
          {
            "name": "test:child1",
            "direct": false,
            "version": "1.0-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "test:child2",
            "direct": false,
            "version": "1.0-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "test:child2",
            "direct": false,
            "version": "2",
            "ecosystem": "maven"
          },
          {
            "name": "test:child3",
            "direct": false,
            "version": "1.0-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "test:module-a",
            "direct": false,
            "version": "1.0-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "test:module-b",
            "direct": false,
            "version": "1.0-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "velocity:velocity",
            "direct": false,
            "version": "1.4",
            "ecosystem": "maven"
          },
          {
            "name": "xmlenc:xmlenc",
            "direct": false,
            "version": "0.52",
            "ecosystem": "maven"
          },
          {
            "name": "xmlwriter:xmlwriter",
            "direct": false,
            "version": "2.2",
            "ecosystem": "maven"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 121,
        "direct_count": 18,
        "indirect_count": 103
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 17,
        "merged_prs": 199,
        "open_issues": 71,
        "closed_ratio": 0.931,
        "closed_issues": 951,
        "closed_unmerged_prs": 104
      },
      "bus_factor": 4,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "jdcasey",
          "commits": 294,
          "avatar_url": "https://avatars.githubusercontent.com/u/65614?v=4"
        },
        {
          "type": "User",
          "login": "krosenvold",
          "commits": 202,
          "avatar_url": "https://avatars.githubusercontent.com/u/67744?v=4"
        },
        {
          "type": "User",
          "login": "brettporter",
          "commits": 101,
          "avatar_url": "https://avatars.githubusercontent.com/u/49108?v=4"
        },
        {
          "type": "User",
          "login": "khmarbaise",
          "commits": 85,
          "avatar_url": "https://avatars.githubusercontent.com/u/42484?v=4"
        },
        {
          "type": "User",
          "login": "dennisl",
          "commits": 73,
          "avatar_url": "https://avatars.githubusercontent.com/u/541536?v=4"
        },
        {
          "type": "User",
          "login": "hboutemy",
          "commits": 71,
          "avatar_url": "https://avatars.githubusercontent.com/u/237462?v=4"
        },
        {
          "type": "User",
          "login": "olamy",
          "commits": 61,
          "avatar_url": "https://avatars.githubusercontent.com/u/19728?v=4"
        },
        {
          "type": "User",
          "login": "rfscholte",
          "commits": 58,
          "avatar_url": "https://avatars.githubusercontent.com/u/150992?v=4"
        },
        {
          "type": "User",
          "login": "bentmann",
          "commits": 48,
          "avatar_url": "https://avatars.githubusercontent.com/u/138698?v=4"
        },
        {
          "type": "User",
          "login": "slawekjaranowski",
          "commits": 40,
          "avatar_url": "https://avatars.githubusercontent.com/u/3578921?v=4"
        }
      ],
      "contributors_sampled": 44,
      "top_contributor_share": 0.234
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "maven-verify.yml",
        "pr-automation.yml",
        "release-drafter.yml",
        "stale.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 9,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 6,
            "reason": "Found 2/3 approved changesets -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 58 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "24 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 5,
            "reason": "5 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "83c4e723404549380c96a0d5d5aacd67deb66fc6",
        "ran_at": "2026-07-28T14:16:12Z",
        "aggregate_score": 6.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T05:42:08Z",
      "oldest_open_prs": [
        {
          "number": 32,
          "created_at": "2020-07-16T01:47:02Z",
          "last_comment_at": "2025-06-17T23:11:40Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 49,
          "created_at": "2021-12-01T16:16:58Z",
          "last_comment_at": "2025-06-25T08:32:14Z",
          "last_comment_author": "zabetak"
        },
        {
          "number": 148,
          "created_at": "2023-06-08T03:39:33Z",
          "last_comment_at": "2025-06-17T23:08:23Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 217,
          "created_at": "2025-03-21T16:15:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1281,
          "created_at": "2025-12-09T17:38:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1311,
          "created_at": "2026-05-11T20:30:34Z",
          "last_comment_at": "2026-06-14T14:08:54Z",
          "last_comment_author": "Bukama"
        },
        {
          "number": 1327,
          "created_at": "2026-06-26T21:44:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1335,
          "created_at": "2026-07-23T16:51:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1336,
          "created_at": "2026-07-27T05:42:33Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1337,
          "created_at": "2026-07-27T13:27:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1338,
          "created_at": "2026-07-27T14:34:30Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1339,
          "created_at": "2026-07-27T17:51:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1340,
          "created_at": "2026-07-27T18:56:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1341,
          "created_at": "2026-07-27T20:15:09Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1342,
          "created_at": "2026-07-27T22:46:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1343,
          "created_at": "2026-07-28T09:53:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1344,
          "created_at": "2026-07-28T10:52:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-16T04:56:50Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 616,
          "created_at": "2009-11-25T13:33:05Z",
          "last_comment_at": "2016-05-14T23:22:48Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 641,
          "created_at": "2010-03-08T01:12:50Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 670,
          "created_at": "2010-09-24T17:06:24Z",
          "last_comment_at": "2024-02-11T13:55:18Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 758,
          "created_at": "2011-12-26T11:11:19Z",
          "last_comment_at": "2016-05-14T23:32:55Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 765,
          "created_at": "2012-03-31T11:02:49Z",
          "last_comment_at": "2019-12-23T01:32:12Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 770,
          "created_at": "2012-05-11T07:33:48Z",
          "last_comment_at": "2026-07-27T22:06:16Z",
          "last_comment_author": "wilx"
        },
        {
          "number": 776,
          "created_at": "2012-06-05T05:46:58Z",
          "last_comment_at": "2021-03-29T15:37:23Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 790,
          "created_at": "2012-06-26T08:08:45Z",
          "last_comment_at": "2018-06-21T08:47:59Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 806,
          "created_at": "2013-03-07T05:00:17Z",
          "last_comment_at": "2015-12-27T23:42:49Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 816,
          "created_at": "2013-06-13T05:42:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 896,
          "created_at": "2014-01-08T15:08:26Z",
          "last_comment_at": "2015-06-19T13:50:14Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 950,
          "created_at": "2014-11-28T08:09:53Z",
          "last_comment_at": "2015-05-14T16:17:41Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 971,
          "created_at": "2015-03-23T18:32:07Z",
          "last_comment_at": "2025-12-16T03:45:28Z",
          "last_comment_author": "svbrunov"
        },
        {
          "number": 970,
          "created_at": "2015-04-22T20:42:49Z",
          "last_comment_at": "2016-05-15T00:41:16Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 975,
          "created_at": "2015-07-03T20:33:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 990,
          "created_at": "2015-07-17T23:34:35Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 992,
          "created_at": "2015-10-22T17:19:43Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 1008,
          "created_at": "2015-11-30T14:59:34Z",
          "last_comment_at": "2023-05-26T19:22:15Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 1014,
          "created_at": "2016-04-06T19:35:30Z",
          "last_comment_at": "2023-11-28T23:31:18Z",
          "last_comment_author": "jira-importer"
        },
        {
          "number": 1024,
          "created_at": "2016-06-09T03:00:05Z",
          "last_comment_at": "2020-10-07T12:11:13Z",
          "last_comment_author": "jira-importer"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/apache/maven-assembly-plugin",
    "host": "github.com",
    "name": "maven-assembly-plugin",
    "owner": "apache"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 71,
      "inputs": {
        "security": 61,
        "vitality": 76,
        "community": 63,
        "governance": 83,
        "engineering": 67
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 76,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "commits_last_year": 70,
              "human_commit_share": 0.33,
              "days_since_last_push": 1,
              "active_weeks_last_year": 32
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "32/52 weeks with commits",
                "points": 22.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 32
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "70 commits in the last year",
                "points": 16.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 70
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "24 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "moderate",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "releases_count": 3,
              "latest_release_tag": "maven-assembly-plugin-3.8.0",
              "releases_from_tags": false,
              "days_since_latest_release": 241,
              "mean_days_between_releases": 312.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "3 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 241 days ago",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 241
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~312.1 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 312.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 12,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 12 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 12
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 63,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "forks": 75,
              "stars": 110,
              "watchers": 25,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "110 stars",
                "points": 33,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 110
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "75 forks",
                "points": 15.6,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 75
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "25 watchers",
                "points": 7.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 25
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 83,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "bus_factor": 4,
              "contributors_sampled": 44,
              "top_contributor_share": 0.234
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "4 contributor(s) cover half of all commits",
                "points": 43.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 23% of commits",
                "points": 17.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 23
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "44 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 44
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 58 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "merged_prs": 199,
              "open_issues": 71,
              "closed_issues": 951,
              "issue_closed_ratio": 0.931,
              "closed_unmerged_prs": 104
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "93% of issues closed",
                "points": 43.5,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 93
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "199/303 decided PRs merged",
                "points": 25.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 199,
                      "decided": 303
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 2/3 approved changesets -- score normalized to 6",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "followers": 23594,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "apache",
              "public_repos": 3148,
              "account_age_days": 6400
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "23,594 followers of apache",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 23594,
                      "login": "apache"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "3148 public repos, account ~17 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 3148
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 17
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 91,
            "inputs": {
              "packages": [
                "org.apache.maven.plugins:maven-assembly-plugin"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 241
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 241 days ago",
                "points": 26,
                "status": "partial",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 241
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "36 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 36
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 67,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "java",
                "build-management",
                "maven",
                "maven-plugins",
                "maven-assembly-plugin"
              ],
              "has_wiki": false,
              "homepage": "https://maven.apache.org/plugins/maven-assembly-plugin/",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://maven.apache.org/plugins/maven-assembly-plugin/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 61,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 6.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 2/3 approved changesets -- score normalized to 6",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 58 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "24 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "5 existing vulnerabilities detected",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Matched the maven:org.apache.maven.plugins:maven-assembly-plugin@3.8.0 runtime dependency closure — what installing the published package pulls in — 47 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:org.apache.maven.plugins:maven-assembly-plugin@3.8.0",
                  "assessed": 47
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 55,
            "inputs": {
              "source": "osv",
              "advisories": 2,
              "affected_packages": 2,
              "assessed_packages": 47,
              "unassessed_packages": 0,
              "affected_by_severity": "high 2",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: org.codehaus.plexus:plexus-utils 4.0.2 (high)",
                "points": 15.4,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "org.codehaus.plexus:plexus-utils 4.0.2 (high)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: io.airlift:aircompressor 0.27 (high 7.5)",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "io.airlift:aircompressor 0.27 (high 7.5)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "2 advisory-carrying package(s) unaddressed past 90 days; oldest published 227 days ago",
                "points": 29.4,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 2,
                      "oldest": 227
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 47,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 17
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 65,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "good",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.545,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 1162
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "18 of 33 human commits state their intent (structured subject or explanatory body)",
                "points": 29.1,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 18,
                      "sampled": 33
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "pom.xml",
                "src/it/it-project-parent/pom.xml",
                "src/it/projects/basic-features/ExecutionRoot/child/pom.xml",
                "src/it/projects/basic-features/ExecutionRoot/pom.xml",
                "src/it/projects/basic-features/add-classpath/pom.xml",
                "src/it/projects/basic-features/classpath-descriptor/pom.xml",
                "src/it/projects/basic-features/descriptorDirectoryScan/pom.xml",
                "src/it/projects/basic-features/file-copyIntoTopDir/pom.xml",
                "src/it/projects/basic-features/file-sameName/pom.xml",
                "src/it/projects/basic-features/formats-in-pom-win/pom.xml",
                "src/it/projects/basic-features/formats-zstd/pom.xml",
                "src/it/projects/basic-features/formats/pom.xml",
                "src/it/projects/basic-features/inline-descriptor/pom.xml",
                "src/it/projects/basic-features/local-repo-interp/pom.xml",
                "src/it/projects/basic-features/massembly-256-pomPropertiesInterp/pom.xml",
                "src/it/projects/basic-features/massembly-351-projectPrefixInterp/pom.xml",
                "src/it/projects/basic-features/outputFileNameMapping-simple/pom.xml",
                "src/it/projects/basic-features/outputFileNameMapping-withArtifactBaseVersion/pom.xml",
                "src/it/projects/basic-features/relative-project-paths/pom.xml",
                "src/it/projects/basic-features/space & special char/pom.xml",
                "src/it/projects/bugs/massembly-1022/pom.xml",
                "src/it/projects/bugs/massembly-190/child-1/pom.xml",
                "src/it/projects/bugs/massembly-190/child-2/pom.xml",
                "src/it/projects/bugs/massembly-190/child-3/pom.xml",
                "src/it/projects/bugs/massembly-190/pom.xml",
                "src/it/projects/bugs/massembly-285/massembly-285-assembly/pom.xml",
                "src/it/projects/bugs/massembly-285/massembly-285-mod1/pom.xml",
                "src/it/projects/bugs/massembly-285/massembly-285-mod2/pom.xml",
                "src/it/projects/bugs/massembly-285/pom.xml",
                "src/it/projects/bugs/massembly-306/pom.xml",
                "src/it/projects/bugs/massembly-324/pom.xml",
                "src/it/projects/bugs/massembly-375/pom.xml",
                "src/it/projects/bugs/massembly-559/pom.xml",
                "src/it/projects/bugs/massembly-580/pom.xml",
                "src/it/projects/bugs/massembly-583/child1/pom.xml",
                "src/it/projects/bugs/massembly-583/child2/pom.xml",
                "src/it/projects/bugs/massembly-583/pom.xml",
                "src/it/projects/bugs/massembly-730/pom.xml",
                "src/it/projects/bugs/massembly-731/pom.xml",
                "src/it/projects/bugs/massembly-732/pom.xml",
                "src/it/projects/bugs/massembly-733/pom.xml",
                "src/it/projects/bugs/massembly-737/pom.xml",
                "src/it/projects/bugs/massembly-739/pom.xml",
                "src/it/projects/bugs/massembly-743/pom.xml",
                "src/it/projects/bugs/massembly-891/pom.xml",
                "src/it/projects/bugs/massembly-919/bundle/pom.xml",
                "src/it/projects/bugs/massembly-919/maindep/pom.xml",
                "src/it/projects/bugs/massembly-919/pom.xml",
                "src/it/projects/bugs/massembly-919/testdep/pom.xml",
                "src/it/projects/bugs/massembly-920/pom.xml",
                "src/it/projects/bugs/massembly-956/pom.xml",
                "src/it/projects/bugs/massembly-964/pom.xml",
                "src/it/projects/components/component-dependencySet/pom.xml",
                "src/it/projects/components/component-moduleSet/child1/pom.xml",
                "src/it/projects/components/component-moduleSet/child2/pom.xml",
                "src/it/projects/components/component-moduleSet/pom.xml",
                "src/it/projects/container-descriptors/configured-handler/pom.xml",
                "src/it/projects/container-descriptors/custom-containerDescriptorHandler/assembly/pom.xml",
                "src/it/projects/container-descriptors/custom-containerDescriptorHandler/handler-def/pom.xml",
                "src/it/projects/container-descriptors/custom-containerDescriptorHandler/pom.xml",
                "src/it/projects/container-descriptors/custom-handler-withFileEntries/assembly/pom.xml",
                "src/it/projects/container-descriptors/custom-handler-withFileEntries/handler-def/pom.xml",
                "src/it/projects/container-descriptors/custom-handler-withFileEntries/pom.xml",
                "src/it/projects/container-descriptors/custom-handler-withMixedEntries/assembly/pom.xml",
                "src/it/projects/container-descriptors/custom-handler-withMixedEntries/handler-def/pom.xml",
                "src/it/projects/container-descriptors/custom-handler-withMixedEntries/pom.xml",
                "src/it/projects/container-descriptors/metaInf-services-aggregation/child1/pom.xml",
                "src/it/projects/container-descriptors/metaInf-services-aggregation/child2/pom.xml",
                "src/it/projects/container-descriptors/metaInf-services-aggregation/pom.xml",
                "src/it/projects/container-descriptors/metaInf-spring-aggregation/child1/pom.xml",
                "src/it/projects/container-descriptors/metaInf-spring-aggregation/child2/pom.xml",
                "src/it/projects/container-descriptors/metaInf-spring-aggregation/pom.xml",
                "src/it/projects/dependency-sets/dep-transfilter-wildcard-massembly544/pom.xml",
                "src/it/projects/dependency-sets/dep-with-transitive-filter/pom.xml",
                "src/it/projects/dependency-sets/depMgmt-override/child/pom.xml",
                "src/it/projects/dependency-sets/depMgmt-override/pom.xml",
                "src/it/projects/dependency-sets/depSet-artifactPomPropInterp/child1/pom.xml",
                "src/it/projects/dependency-sets/depSet-artifactPomPropInterp/child2/pom.xml",
                "src/it/projects/dependency-sets/depSet-artifactPomPropInterp/pom.xml",
                "src/it/projects/dependency-sets/depSet-byDepVersion/child1/pom.xml",
                "src/it/projects/dependency-sets/depSet-byDepVersion/child2/pom.xml",
                "src/it/projects/dependency-sets/depSet-byDepVersion/child3/pom.xml",
                "src/it/projects/dependency-sets/depSet-byDepVersion/pom.xml",
                "src/it/projects/dependency-sets/depSet-enum-vs-wildcard/enum/pom.xml",
                "src/it/projects/dependency-sets/depSet-enum-vs-wildcard/pom.xml",
                "src/it/projects/dependency-sets/depSet-enum-vs-wildcard/wildcard/pom.xml",
                "src/it/projects/dependency-sets/depSet-runtimeScope/child1/pom.xml",
                "src/it/projects/dependency-sets/depSet-runtimeScope/child2/pom.xml",
                "src/it/projects/dependency-sets/depSet-runtimeScope/child3/pom.xml",
                "src/it/projects/dependency-sets/depSet-runtimeScope/pom.xml",
                "src/it/projects/dependency-sets/depSet-transFromProfile/child1/pom.xml",
                "src/it/projects/dependency-sets/depSet-transFromProfile/child2/pom.xml",
                "src/it/projects/dependency-sets/depSet-transFromProfile/child3/pom.xml",
                "src/it/projects/dependency-sets/depSet-transFromProfile/child4/pom.xml",
                "src/it/projects/dependency-sets/depSet-transFromProfile/pom.xml",
                "src/it/projects/dependency-sets/depSet-unpacked-rdonly/child1/pom.xml",
                "src/it/projects/dependency-sets/depSet-unpacked-rdonly/child2/pom.xml",
                "src/it/projects/dependency-sets/depSet-unpacked-rdonly/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-matchScope/child1/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-matchScope/child2/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-matchScope/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-nonTransitive/child1/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-nonTransitive/child2/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-nonTransitive/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-notUnpacked/child1/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-notUnpacked/child2/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-notUnpacked/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-projectArtifactNotIncluded/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpacked-filtered/child1/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpacked-filtered/child2/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpacked-filtered/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpacked/child1/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpacked/child2/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpacked/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpackedExcludingMetaInf/child1/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpackedExcludingMetaInf/child2/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpackedExcludingMetaInf/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpackedSubsetsTwice/child1/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpackedSubsetsTwice/child2/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-unpackedSubsetsTwice/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-withExecutedProject/child1/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-withExecutedProject/child2/pom.xml",
                "src/it/projects/dependency-sets/dependencySet-withExecutedProject/pom.xml",
                "src/it/projects/dependency-sets/include-project-artifact/pom.xml",
                "src/it/projects/dependency-sets/include-project-attachments/pom.xml",
                "src/it/projects/dependency-sets/include-provided/child1/pom.xml",
                "src/it/projects/dependency-sets/include-provided/child2/pom.xml",
                "src/it/projects/dependency-sets/include-provided/pom.xml",
                "src/it/projects/dependency-sets/including-pom-dependency/pom.xml",
                "src/it/projects/dependency-sets/including-sar-dependency/pom.xml",
                "src/it/projects/dependency-sets/massembly-1008/pom.xml",
                "src/it/projects/dependency-sets/massembly-201/pom.xml",
                "src/it/projects/dependency-sets/massembly-232/pom.xml",
                "src/it/projects/dependency-sets/massembly-235/pom.xml",
                "src/it/projects/dependency-sets/massembly-345/pom.xml",
                "src/it/projects/dependency-sets/massembly-395/child1/pom.xml",
                "src/it/projects/dependency-sets/massembly-395/child2/pom.xml",
                "src/it/projects/dependency-sets/massembly-395/pom.xml",
                "src/it/projects/dependency-sets/massembly-619/pom.xml",
                "src/it/projects/dependency-sets/massembly-675/pom.xml",
                "src/it/projects/dependency-sets/massembly-955/pom.xml",
                "src/it/projects/dependency-sets/massembly-969/pom.xml",
                "src/it/projects/dependency-sets/massembly-99/assembly/pom.xml",
                "src/it/projects/dependency-sets/massembly-99/module-a/pom.xml",
                "src/it/projects/dependency-sets/massembly-99/module-b/pom.xml",
                "src/it/projects/dependency-sets/massembly-99/pom.xml",
                "src/it/projects/dependency-sets/massembly-994-refresh-unpacked/child1/pom.xml",
                "src/it/projects/dependency-sets/massembly-994-refresh-unpacked/child2/pom.xml",
                "src/it/projects/dependency-sets/massembly-994-refresh-unpacked/pom.xml",
                "src/it/projects/dependency-sets/mid-artifactId-wildcard-massembly570/pom.xml",
                "src/it/projects/dependency-sets/multiple-wildcard-includes/pom.xml",
                "src/it/projects/dependency-sets/outputFileNameMappingWithUnpack/pom.xml",
                "src/it/projects/dependency-sets/unpack-deps-correct-dir/pom.xml",
                "src/it/projects/dependency-sets/using-moduleSet-implied-depSet/module-a/pom.xml",
                "src/it/projects/dependency-sets/using-moduleSet-implied-depSet/module-b/pom.xml",
                "src/it/projects/dependency-sets/using-moduleSet-implied-depSet/pom.xml",
                "src/it/projects/descriptor-refs/bin/jars-in-archive-root/pom.xml",
                "src/it/projects/descriptor-refs/jar-with-dependencies/component-descriptors-merged/child1/pom.xml",
                "src/it/projects/descriptor-refs/jar-with-dependencies/component-descriptors-merged/child2/pom.xml",
                "src/it/projects/descriptor-refs/jar-with-dependencies/component-descriptors-merged/pom.xml",
                "src/it/projects/descriptor-refs/jar-with-dependencies/deps-unpacked-to-root-dir/child1/pom.xml",
                "src/it/projects/descriptor-refs/jar-with-dependencies/deps-unpacked-to-root-dir/child2/pom.xml",
                "src/it/projects/descriptor-refs/jar-with-dependencies/deps-unpacked-to-root-dir/pom.xml",
                "src/it/projects/descriptor-refs/jar-with-dependencies/main-class-and-dependencies/pom.xml",
                "src/it/projects/descriptor-refs/jar-with-dependencies/no-target-dir/pom.xml",
                "src/it/projects/descriptor-refs/project/multimodule-sources-copied/child1/pom.xml",
                "src/it/projects/descriptor-refs/project/multimodule-sources-copied/child2/pom.xml",
                "src/it/projects/descriptor-refs/project/multimodule-sources-copied/pom.xml",
                "src/it/projects/descriptor-refs/project/no-target-dir-multimodule/child1/pom.xml",
                "src/it/projects/descriptor-refs/project/no-target-dir-multimodule/child2/pom.xml",
                "src/it/projects/descriptor-refs/project/no-target-dir-multimodule/pom.xml",
                "src/it/projects/descriptor-refs/project/no-target-dir/pom.xml",
                "src/it/projects/descriptor-refs/project/sources-copied/pom.xml",
                "src/it/projects/descriptor-refs/src/no-target-dir/pom.xml",
                "src/it/projects/descriptor-refs/src/src-dir-copied/pom.xml",
                "src/it/projects/file-modes/file-set-fileMode/pom.xml",
                "src/it/projects/file-modes/fileItem-fileMode/pom.xml",
                "src/it/projects/file-sets/default-directory-unspecified/pom.xml",
                "src/it/projects/file-sets/default-excludes-unspecified/pom.xml",
                "src/it/projects/file-sets/dont-use-default-excludes/pom.xml",
                "src/it/projects/file-sets/excludes-using-regex/child/pom.xml",
                "src/it/projects/file-sets/excludes-using-regex/pom.xml",
                "src/it/projects/file-sets/excluding-svn-dirs/pom.xml",
                "src/it/projects/file-sets/filtered-module-sources/child/pom.xml",
                "src/it/projects/file-sets/filtered-module-sources/pom.xml",
                "src/it/projects/file-sets/filtered-multimodule/child/pom.xml",
                "src/it/projects/file-sets/filtered-multimodule/pom.xml",
                "src/it/projects/file-sets/include-base-directory/pom.xml",
                "src/it/projects/file-sets/include-parent-dir/child/pom.xml",
                "src/it/projects/file-sets/include-parent-dir/pom.xml",
                "src/it/projects/file-sets/massembly-665/pom.xml",
                "src/it/projects/file-sets/multimodule-unix-lineEndings/child/pom.xml",
                "src/it/projects/file-sets/multimodule-unix-lineEndings/pom.xml",
                "src/it/projects/file-sets/multimodule-win-lineEndings/child/pom.xml",
                "src/it/projects/file-sets/multimodule-win-lineEndings/pom.xml",
                "src/it/projects/file-sets/platformspecific-filesets/pom.xml",
                "src/it/projects/file-sets/precedence-check/pom.xml",
                "src/it/projects/file-sets/symbolic-links/pom.xml",
                "src/it/projects/file-sets/use-default-excludes/pom.xml",
                "src/it/projects/files/filtered-sysprop/pom.xml",
                "src/it/projects/files/multimodule-relativePath/child/pom.xml",
                "src/it/projects/files/multimodule-relativePath/pom.xml",
                "src/it/projects/filtering-feature/fileset-to-tar-massembly-722/pom.xml",
                "src/it/projects/filtering-feature/filter-comp-descriptor-path/pom.xml",
                "src/it/projects/filtering-feature/filters-defined-in-build/pom.xml",
                "src/it/projects/filtering-feature/filtersDefinedInAssemblyPluginConfig/pom.xml",
                "src/it/projects/filtering-feature/massembly-736/pom.xml",
                "src/it/projects/forking-tests/assembly-assembly-with-module-binaries/child1/pom.xml",
                "src/it/projects/forking-tests/assembly-assembly-with-module-binaries/child2/pom.xml",
                "src/it/projects/forking-tests/assembly-assembly-with-module-binaries/pom.xml",
                "src/it/projects/forking-tests/assembly-attached-with-module-binaries/child1/pom.xml",
                "src/it/projects/forking-tests/assembly-attached-with-module-binaries/child2/pom.xml",
                "src/it/projects/forking-tests/assembly-attached-with-module-binaries/pom.xml",
                "src/it/projects/massembly-934_concat-files/pom.xml",
                "src/it/projects/mojo-configuration/archiver-ignorePermissions/pom.xml",
                "src/it/projects/mojo-configuration/ignoreDirFormatExtensions/pom.xml",
                "src/it/projects/mojo-configuration/manifest-with-customEntry-manifest-file/pom.xml",
                "src/it/projects/mojo-configuration/manifest-with-customEntry/pom.xml",
                "src/it/projects/mojo-configuration/manifest-with-mainClass/pom.xml",
                "src/it/projects/mojo-configuration/massembly-291/pom.xml",
                "src/it/projects/mojo-configuration/massembly-301/pom.xml",
                "src/it/projects/mojo-configuration/no-appendAssemblyId-no-classifier/pom.xml",
                "src/it/projects/mojo-configuration/skipAssemblyCLIPropertySet/pom.xml",
                "src/it/projects/mojo-tests/single-in-one-project-hierarchy/pom.xml",
                "src/it/projects/mojo-tests/single-twice-in-multimodule-hierarchy/child1/pom.xml",
                "src/it/projects/mojo-tests/single-twice-in-multimodule-hierarchy/child2/pom.xml",
                "src/it/projects/mojo-tests/single-twice-in-multimodule-hierarchy/pom.xml",
                "src/it/projects/mojo-tests/single-twice-in-one-project-hierarchy/pom.xml",
                "src/it/projects/multimodule/massembly-298/assembly/pom.xml",
                "src/it/projects/multimodule/massembly-298/child1/pom.xml",
                "src/it/projects/multimodule/massembly-298/child2/pom.xml",
                "src/it/projects/multimodule/massembly-298/pom.xml",
                "src/it/projects/multimodule/massembly-317/child1/pom.xml",
                "src/it/projects/multimodule/massembly-317/child2/pom.xml",
                "src/it/projects/multimodule/massembly-317/pom.xml",
                "src/it/projects/multimodule/massembly-474/child-client/pom.xml",
                "src/it/projects/multimodule/massembly-474/child-server/pom.xml",
                "src/it/projects/multimodule/massembly-474/descriptor/pom.xml",
                "src/it/projects/multimodule/massembly-474/pom.xml",
                "src/it/projects/multimodule/massembly-619/child-client/pom.xml",
                "src/it/projects/multimodule/massembly-619/descriptor/pom.xml",
                "src/it/projects/multimodule/massembly-619/pom.xml",
                "src/it/projects/multimodule/multimodule-binariesNotSource/assembly/pom.xml",
                "src/it/projects/multimodule/multimodule-binariesNotSource/child1/pom.xml",
                "src/it/projects/multimodule/multimodule-binariesNotSource/child2/pom.xml",
                "src/it/projects/multimodule/multimodule-binariesNotSource/child3/pom.xml",
                "src/it/projects/multimodule/multimodule-binariesNotSource/pom.xml",
                "src/it/projects/multimodule/multimodule-filteredFileSet/child/pom.xml",
                "src/it/projects/multimodule/multimodule-filteredFileSet/pom.xml",
                "src/it/projects/multimodule/multimodule-modulePomPropInterp/child1/pom.xml",
                "src/it/projects/multimodule/multimodule-modulePomPropInterp/child2/pom.xml",
                "src/it/projects/multimodule/multimodule-modulePomPropInterp/pom.xml",
                "src/it/projects/multimodule/multimodule-siblingParent/child1/pom.xml",
                "src/it/projects/multimodule/multimodule-siblingParent/child2/pom.xml",
                "src/it/projects/multimodule/multimodule-siblingParent/parent/pom.xml",
                "src/it/projects/multimodule/multimodule-sourceNotBinaries/child1/pom.xml",
                "src/it/projects/multimodule/multimodule-sourceNotBinaries/child2/pom.xml",
                "src/it/projects/multimodule/multimodule-sourceNotBinaries/child3/pom.xml",
                "src/it/projects/multimodule/multimodule-sourceNotBinaries/pom.xml",
                "src/it/projects/multimodule/multimodule-wholeReactorFromChild/child1/pom.xml",
                "src/it/projects/multimodule/multimodule-wholeReactorFromChild/child2/pom.xml",
                "src/it/projects/multimodule/multimodule-wholeReactorFromChild/child3/pom.xml",
                "src/it/projects/multimodule/multimodule-wholeReactorFromChild/child4/pom.xml",
                "src/it/projects/multimodule/multimodule-wholeReactorFromChild/pom.xml",
                "src/it/projects/multimodule/two-level-multimodule/assembly/pom.xml",
                "src/it/projects/multimodule/two-level-multimodule/child-level1-project1/pom.xml",
                "src/it/projects/multimodule/two-level-multimodule/child-level1-project2/child-level2-project1/pom.xml",
                "src/it/projects/multimodule/two-level-multimodule/child-level1-project2/pom.xml",
                "src/it/projects/multimodule/two-level-multimodule/pom.xml",
                "src/it/projects/multimodule/two-levels-includeBaseDir-withBin/assembly/pom.xml",
                "src/it/projects/multimodule/two-levels-includeBaseDir-withBin/child-level1-project1/pom.xml",
                "src/it/projects/multimodule/two-levels-includeBaseDir-withBin/child-level1-project2/child-level2-project1/pom.xml",
                "src/it/projects/multimodule/two-levels-includeBaseDir-withBin/child-level1-project2/pom.xml",
                "src/it/projects/multimodule/two-levels-includeBaseDir-withBin/pom.xml",
                "src/it/projects/multimodule/two-levels-includeBaseDir-withSrc/assembly/pom.xml",
                "src/it/projects/multimodule/two-levels-includeBaseDir-withSrc/child-level1-project1/pom.xml",
                "src/it/projects/multimodule/two-levels-includeBaseDir-withSrc/child-level1-project2/child-level2-project1/pom.xml",
                "src/it/projects/multimodule/two-levels-includeBaseDir-withSrc/child-level1-project2/pom.xml",
                "src/it/projects/multimodule/two-levels-includeBaseDir-withSrc/pom.xml",
                "src/it/projects/reproducible/pom.xml"
              ],
              "dependency_bot_commit_share": 0.67
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "pom.xml, src/it/it-project-parent/pom.xml, src/it/projects/basic-features/ExecutionRoot/child/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "pom.xml, src/it/it-project-parent/pom.xml, src/it/projects/basic-features/ExecutionRoot/child/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "67 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 67,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 33005,
              "source_files_sampled": 302,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/302 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 302,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T14:16:41.976359Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/apache/maven-assembly-plugin.svg",
  "full_name": "apache/maven-assembly-plugin",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}