doorkeeper-gem / doorkeeper-openid_connect

每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。

每个点涵盖 11 天。

来自 GitHub 依赖图的完整解析依赖集合：1 个直接依赖与 16 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

本报告未能完成公告比对：No resolved dependencies carried a version and a supported ecosystem

{
  "data": {
    "repo": {
      "topics": [
        "doorkeeper",
        "openidconnect",
        "openid-provider",
        "oauth"
      ],
      "is_fork": false,
      "size_kb": 1442,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "CSS": 736,
        "HTML": 22211,
        "Ruby": 297326,
        "Shell": 131,
        "JavaScript": 741
      },
      "pushed_at": "2026-07-27T10:47:57Z",
      "created_at": "2014-06-10T21:32:07Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-27T10:15:34Z",
      "description": "OpenID Connect extension for Doorkeeper",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "master",
      "license_spdx_raw": "MIT",
      "primary_language": "Ruby",
      "significant_languages": [
        "Ruby"
      ]
    },
    "owner": {
      "blog": null,
      "name": "doorkeeper gem",
      "type": "Organization",
      "login": "doorkeeper-gem",
      "company": null,
      "location": null,
      "followers": 20,
      "avatar_url": "https://avatars.githubusercontent.com/u/7275750?v=4",
      "created_at": "2014-04-12T20:41:06Z",
      "is_verified": null,
      "public_repos": 11,
      "account_age_days": 4488
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.10.5",
          "kind": "patch",
          "published_at": "2026-07-14T14:21:42Z"
        },
        {
          "tag": "v1.10.4",
          "kind": "patch",
          "published_at": "2026-07-07T06:55:54Z"
        },
        {
          "tag": "v1.10.3",
          "kind": "patch",
          "published_at": "2026-06-23T11:09:58Z"
        },
        {
          "tag": "v1.10.2",
          "kind": "patch",
          "published_at": "2026-06-22T11:12:30Z"
        },
        {
          "tag": "v1.10.1",
          "kind": "patch",
          "published_at": "2026-06-03T13:42:59Z"
        },
        {
          "tag": "v1.10.0",
          "kind": "minor",
          "published_at": "2026-06-01T07:29:32Z"
        },
        {
          "tag": "v1.9.0",
          "kind": "minor",
          "published_at": "2026-03-16T14:06:01Z"
        },
        {
          "tag": "v1.8.11",
          "kind": "patch",
          "published_at": "2025-02-10T10:16:56Z"
        },
        {
          "tag": "v1.8.10",
          "kind": "patch",
          "published_at": "2024-11-29T15:40:32Z"
        },
        {
          "tag": "v.1.8.9",
          "kind": "other",
          "published_at": "2024-05-07T09:36:11Z"
        },
        {
          "tag": "v1.8.8",
          "kind": "patch",
          "published_at": "2024-02-26T08:11:45Z"
        },
        {
          "tag": "v1.8.7",
          "kind": "patch",
          "published_at": "2023-05-18T07:04:37Z"
        },
        {
          "tag": "v1.8.6",
          "kind": "patch",
          "published_at": "2023-05-12T06:30:28Z"
        },
        {
          "tag": "v1.8.5",
          "kind": "patch",
          "published_at": "2023-04-17T06:40:32Z"
        },
        {
          "tag": "v1.8.4",
          "kind": "patch",
          "published_at": "2023-02-01T08:07:24Z"
        },
        {
          "tag": "v1.8.3",
          "kind": "patch",
          "published_at": "2022-12-02T07:13:38Z"
        },
        {
          "tag": "v1.8.2",
          "kind": "patch",
          "published_at": "2022-07-13T08:37:18Z"
        },
        {
          "tag": "v1.8.1",
          "kind": "patch",
          "published_at": "2022-02-09T11:13:42Z"
        },
        {
          "tag": "v1.8.0",
          "kind": "minor",
          "published_at": "2021-05-11T08:11:30Z"
        },
        {
          "tag": "v1.7.5",
          "kind": "patch",
          "published_at": "2020-12-16T10:54:16Z"
        },
        {
          "tag": "v1.7.2",
          "kind": "patch",
          "published_at": "2020-05-20T10:32:00Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "5843055b989382b472fa3a12dc42f722d4432baf",
          "body": "Follow-up to #351: compute at_hash from the plaintext access token",
          "is_bot": false,
          "headline": "Merge pull request #355 from 55728/fix/at-hash-plaintext-token",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-27T10:14:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb4ea91c75dbb224259a7b13a250f2fec1de0d57",
          "body": "Align discovery and DCR responses with RFC 7591 / RFC 7033",
          "is_bot": false,
          "headline": "Merge pull request #350 from 55728/fix/discovery-dcr-compliance",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-27T10:13:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a18976afa7eb54a3bba14214c72a6871305a0bd",
          "body": "Remove stale TODO/FIXME markers and the dead compat code behind them",
          "is_bot": false,
          "headline": "Merge pull request #354 from 55728/chore/prune-stale-todo-fixme",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-27T07:59:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26e1cfd544b3d0284baeb2f60eac192e6af185b8",
          "body": "With a hashing token-secret strategy (hash_token_secrets) the stored\n`token` is a digest while the client receives the plaintext value, so\nan at_hash computed over the stored value never matches what a\nconforming RP derives from the access token it received (OIDC Core\n§3.2.2.9), and ID Token validat\n[…]\nhash over\n`plaintext_token` instead — the same alignment #351 applied to the\n`id_token token` response body. With the default plain strategy\n`plaintext_token == token`, so behavior there is unchanged.",
          "is_bot": false,
          "headline": "Compute at_hash from the plaintext access token",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-25T01:28:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "441bea350f9a6e82087b56655feac1ca41e0afb2",
          "body": null,
          "is_bot": false,
          "headline": "Add CHANGELOG entry for the stale TODO/FIXME cleanup",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-24T14:08:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53e9dbe2dd9bd7041ebd1ab7bf7a9521efaf880f",
          "body": "The line was marked \"FIXME: workaround for Rails 5\", but\nrails/rails#25106 is still present in Rails 8: response_body = nil only\nresets the response object's body and leaves @_response_body assigned,\nwhich would keep performed? returning true. Replace the FIXME with a\ncomment stating the constraint so the line doesn't read as removable.",
          "is_bot": false,
          "headline": "Explain why clearing @_response_body is still required",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-24T14:08:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59643bb3c7112eef9154f773b2487ccee94e16c5",
          "body": "The id_token and id_token token flows have been registered by this gem\nfor years, and response_types_supported is built dynamically from\ndoorkeeper.authorization_response_types, so the discovery document\nalready advertises whatever the host application enables.",
          "is_bot": false,
          "headline": "Drop the stale \"support id_token response type\" TODO",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-24T14:07:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c511187dcef415ed2c8ae0ac3e3e9f62eaaa79e",
          "body": "issue_token! exists on every installable version — the gemspec floor is\ndoorkeeper >= 5.5 and the rename shipped in 5.4 — so the method_defined?\nguard in OAuth::Authorization::Code, the FIXME'd issue_token fallback\nbranch it selected, and the respond_to?(:issue_token!) checks in\nIdTokenRequest and the id_token response specs were all dead code, dating\nback to 430413d (\"Add support for Doorkeeper 5.4\").\n\nThe public issue_token alias is kept, so the gem's API is unchanged.",
          "is_bot": false,
          "headline": "Remove the Doorkeeper < 5.4 issue_token compatibility paths",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-24T14:07:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "348dfe17ed11fa77ee0822f7c5113942ca1f6094",
          "body": "Added in 430413d (\"Add support for Doorkeeper 5.4\") with a FIXME to\nremove it once Doorkeeper merged the same memoization. Doorkeeper did,\nin 5.5.0 (doorkeeper#1410) — the gemspec floor — so the identical\ndefined? check now lives upstream on every supported version and the\nprepended override was redundant.",
          "is_bot": false,
          "headline": "Drop the redundant current_resource_owner override",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-24T14:07:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "854d5cf13ebfbde99b677292295cfe733409d142",
          "body": "Align OIDC token/authorization responses with doorkeeper core",
          "is_bot": false,
          "headline": "Merge pull request #351 from 55728/fix/token-response-core-alignment",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-24T10:23:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea5aba4886bf4cccaf057ca16a1f8f10912c500a",
          "body": "Harden the OIDC authorization endpoint against malformed requests",
          "is_bot": false,
          "headline": "Merge pull request #348 from 55728/fix/authorization-endpoint-hardening",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-24T10:19:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec200443289b96b4c1b3e0f0953361f0f02f1346",
          "body": "Potential fix for code scanning alert no. 3: Workflow does not contain permissions",
          "is_bot": false,
          "headline": "Merge pull request #352 from doorkeeper-gem/alert-autofix-3",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-23T11:11:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7666bf26ea1dfe0835bf607234bd3ac8a48b984f",
          "body": "…n permissions\n\nCo-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Potential fix for code scanning alert no. 3: Workflow does not contai…",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-23T11:05:42Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "61201efafd0f864e54d5e8457cbdb3a077c55460",
          "body": "Omit symmetric (oct) keys from the JWKS endpoint",
          "is_bot": false,
          "headline": "Merge pull request #347 from 55728/fix/jwks-omit-oct-keys",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-23T10:12:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e758f69e86fa1af76e2153ce7933d159bae7a4bd",
          "body": "Allow Doorkeeper 6.0",
          "is_bot": false,
          "headline": "Merge pull request #334 from 55728/compat/doorkeeper-6-cap",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-23T08:35:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93f8830406f2fac106e84d3fe3e752dbe8d82771",
          "body": "Tests only - Add specs for uncovered branches reachable on current Doorkeeper",
          "is_bot": false,
          "headline": "Merge pull request #346 from 55728/test/coverage-branch-gaps",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-23T08:28:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf4bea48818f734a89a842b90b6a6544633fa298",
          "body": "Close the coverage gaps that correspond to real, reachable behavior:\n\n- Implicit flow end-to-end through AuthorizationsController: approving\n  response_type=id_token and 'id_token token' (fragment redirect, nonce,\n  aud, at_hash per OIDC Core 3.2.2.9) and denying via #destroy\n  (access_denied in the\n[…]\niscovery routes drawn because\nJourney::Routes#clear does not invalidate the memoized recognition\ncache (actionpack 8.0.5); only add_route does, so an empty redraw would\nleave stale recognition behind.",
          "is_bot": false,
          "headline": "Add specs for uncovered branches reachable on current Doorkeeper",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-21T12:18:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f734f9f36b6f400a22dfa40c841191f505569b5d",
          "body": "…/actions/checkout-7\n\nBump actions/checkout from 3 to 7",
          "is_bot": false,
          "headline": "Merge pull request #343 from doorkeeper-gem/dependabot/github_actions…",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-20T07:50:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5528c5307caedceafea49c84765030b69b2a7279",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v3...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n  dependency-version: '7'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "Bump actions/checkout from 3 to 7",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-20T07:46:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2ac3cccdd2af159c5b2ba0de339384436bd2ac8",
          "body": "ci: pin changelog-enforcer to v3.7.0 (node24 build)",
          "is_bot": false,
          "headline": "Merge pull request #342 from 55728/ci/pin-changelog-enforcer-v3.7.0",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-20T07:46:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5b3bef4561fc339c26f4de8d20b69b7fdc18dec",
          "body": "Use Doorkeeper's `application_class` config for dynamic client registration",
          "is_bot": false,
          "headline": "Merge pull request #341 from hzm-s/feature/use_doorkeeper_config_for_dcr",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-20T07:23:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3277810c0f69fac54ecb0fc4d3284c5f4750975e",
          "body": "…tion",
          "is_bot": false,
          "headline": "Use Doorkeeper's application_class config for dynamic client registra…",
          "author_name": "Hajime Sueyoshi",
          "author_login": "hzm-s",
          "committed_at": "2026-07-20T07:07:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07ceb45afe61de636720c4868258aecd828aa8af",
          "body": null,
          "is_bot": false,
          "headline": "ci: indent steps items to match other workflows",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-20T06:40:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4b80c08d08014fa263caa8359d74e9a4281ad17",
          "body": "Dependabot labels its PRs \"dependencies\" automatically; those bumps\ndon't need a changelog entry, so the enforcer now skips that label.\n\"Skip-Changelog\" (the action's default) is kept as a manual escape\nhatch for other PRs.",
          "is_bot": false,
          "headline": "ci: let Dependabot watch GitHub Actions, skip changelog check for it",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-20T06:23:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cf32c1789fa6ef7559663ee225142abb897f418",
          "body": "The floating v3 tag still resolves to a node20 build of the action,\nwhich triggers GitHub's Node 20 deprecation warning on every run of\nthe changelog job. v3.7.0 is built with node24.",
          "is_bot": false,
          "headline": "ci: pin changelog-enforcer to v3.7.0 (node24 build)",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-20T06:20:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "916be1c431d3d6e39b275847c93613429c6e3149",
          "body": "Add escape hatches for ID Token and User Info classes",
          "is_bot": false,
          "headline": "Merge pull request #335 from XIVAuth/claim-escape-hatch",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-19T05:44:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4fd8617bc2899efafcb330753e5b002ab4a572a",
          "body": null,
          "is_bot": false,
          "headline": "feat: force a satisfied api contract for custom classes",
          "author_name": "Kaz Wolfe",
          "author_login": "KazWolfe",
          "committed_at": "2026-07-19T03:34:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8dc64f311dcf380a2ae0907f8fb53d75d74afc61",
          "body": null,
          "is_bot": false,
          "headline": "feat: Hybrid flow should also support custom tokens",
          "author_name": "Kaz Wolfe",
          "author_login": "KazWolfe",
          "committed_at": "2026-07-19T03:08:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c2aa58292bd591b1fc454bcd283b6063bb02200",
          "body": null,
          "is_bot": false,
          "headline": "fix: rubocop lied to me.",
          "author_name": "Kaz Wolfe",
          "author_login": "KazWolfe",
          "committed_at": "2026-07-18T23:29:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d485f18a4aff99fdef84c59832c541a85105cac9",
          "body": null,
          "is_bot": false,
          "headline": "docs: document the new changes",
          "author_name": "Kaz Wolfe",
          "author_login": "KazWolfe",
          "committed_at": "2026-07-18T18:03:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb689b1c02d5096021ce854e402aae532f9fdbd5",
          "body": null,
          "is_bot": false,
          "headline": "fix: rubocop got upset",
          "author_name": "Kaz Wolfe",
          "author_login": "KazWolfe",
          "committed_at": "2026-07-18T17:52:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3cc41111d106e1b259019ff5e48f8f8f0ce5f79d",
          "body": null,
          "is_bot": false,
          "headline": "spec: add test for new class overrides",
          "author_name": "Kaz Wolfe",
          "author_login": "KazWolfe",
          "committed_at": "2026-07-18T17:51:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a46d71c2b6061d9e40538e05e02b2c12c814de2",
          "body": null,
          "is_bot": false,
          "headline": "feat: add configurable classes for id_token/user_info models",
          "author_name": "Kaz Wolfe",
          "author_login": "KazWolfe",
          "committed_at": "2026-07-18T17:45:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5abe0054d406e82238b488fd25a07b96a92a1a8",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #333 from 55728/feat/rfc9207-companion",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-16T12:39:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49dbc418b3a54e6720a61ee7da66390bbf4b7a66",
          "body": "Don't advertise refresh_token twice in grant_types_supported",
          "is_bot": false,
          "headline": "Merge pull request #332 from 55728/fix/grant-types-refresh-token-dedupe",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-16T10:27:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6f9c1905288c84be07c4c066fc659ee038caba4",
          "body": "Raise the gemspec cap to doorkeeper >= 5.5, < 7.0 so the gem installs\nalongside the upcoming major release, and add a CI matrix row pinning\nthe 6.0 series (gemfiles/doorkeeper_6.0.gemfile). Only 6.0.0.beta1 is\nreleased so far, so the gemfile uses the prerelease-aware constraint\n\"~> 6.0.0.beta1\" (>= \n[…]\ntoo, and (as before) does not exempt OIDC response types that never\nissue an authorization code, so id_token / id_token token requests\nwithout a code_challenge are rejected when force_pkce is enabled.",
          "is_bot": false,
          "headline": "Allow Doorkeeper 6.0",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-15T13:29:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eaaa086ab04f1fbe66ac3720405942af0abf6f18",
          "body": "When Doorkeeper is configured with an issuer (doorkeeper#1838), it\nemits the RFC 9207 iss parameter on authorization responses and\nadvertises authorization_response_iss_parameter_supported in its\nRFC 8414 metadata (doorkeeper#1849) — but only for the response types\nand error paths Doorkeeper itself \n[…]\nnd eagerly builds a default\nconfiguration on newer versions, and Doorkeeper.configured? only\nexists since 5.6 — reporting false on 5.5 is also correct there, since\nits config has no issuer to compare.",
          "is_bot": false,
          "headline": "Add RFC 9207 companion support for doorkeeper#1849",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-15T13:23:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a970443ac4e16665d0369a8633e3d6cf07bcf6db",
          "body": "The discovery document's grant_types_supported (also used by Dynamic\nClient Registration to validate requested grant types) is built from\nthe raw grant_flows configuration plus an unconditional refresh_token\nappend when use_refresh_token is enabled. A configuration that both\nlists refresh_token in g\n[…]\nrant_flows) because extension-registered authorization flows\nsuch as id_token are part of the advertised list here, and the raw\noption is the only accessor shared by all supported Doorkeeper\nversions.",
          "is_bot": false,
          "headline": "Don't advertise refresh_token twice in grant_types_supported",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-15T11:04:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8775b2b35bbc31cbf646fe3300d352ca3058c8d7",
          "body": "Fall back to Doorkeeper's `issuer` config when the OpenID Connect `issuer` is unset",
          "is_bot": false,
          "headline": "Merge pull request #322 from 55728/feat/issuer-fallback-to-doorkeeper",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-14T12:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25c03ff5720a620e3ba6c00b52d092c25086dce0",
          "body": "The install generator template hard-codes an issuer block with no hint\nthat it can now be omitted, which encourages configuring the issuer\ntwice once Doorkeeper's own RFC 8414 `issuer` option is set. Explain\nthe fallback introduced for #321 directly above the block: the OpenID\nConnect issuer takes p\n[…]\n and the block\nshould only be removed once Doorkeeper's `issuer` is set (older\nDoorkeeper versions have no such option and would fail with \"issuer\nnot configured\").\n\nAddresses review feedback on #322.",
          "is_bot": false,
          "headline": "Document Doorkeeper issuer fallback in the initializer template",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-14T12:16:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cf3c20e4efc0652d84a27ee7a974e0059f2b4ab0",
          "body": "…-registry-companion",
          "is_bot": false,
          "headline": "Merge pull request #323 from 55728/feat/client-authentication-methods…",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-13T23:25:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "433d8e313609f7ed777e5eddd80fe99628b0f7f3",
          "body": "Support mounting the engine under multiple named scopes (#192)",
          "is_bot": false,
          "headline": "Merge pull request #320 from 55728/feature/192-multi-mount-discovery",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-13T12:28:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9473aceb420ae3a17f9bd33dcc65e251ed51fa6d",
          "body": null,
          "is_bot": false,
          "headline": "Release 1.10.5 :tada:",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-09T14:39:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00b89c1e9dec896eec74b4286c56aec11a95cfe1",
          "body": "Improve inline documentation: why-comments and initializer config examples",
          "is_bot": false,
          "headline": "Merge pull request #327 from 55728/docs/initializer-and-readme",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-09T10:22:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9b1ac6de478d5d1b648558fd65d22cf3e9be900",
          "body": "Harden the DCR spec against pre-existing `Application` rows",
          "is_bot": false,
          "headline": "Merge pull request #326 from 55728/test/dcr-spec-relative-counts",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-09T09:39:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ce78d00b372d941df3b091a1f155d56bba5fc0b",
          "body": "Split `Helpers::Controller` into submodules, drop 3 RuboCop Metrics overrides",
          "is_bot": false,
          "headline": "Merge pull request #324 from 55728/refactor/controller-helpers-metrics",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-08T12:44:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "079b5d96f727266aa5a0ca44c9988278b881c220",
          "body": "Remove dead `Claims::AggregatedClaim` and `Claims::DistributedClaim` classes",
          "is_bot": false,
          "headline": "Merge pull request #325 from 55728/chore/remove-dead-claim-classes",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-08T11:49:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e8c6b2d40741f042a2255007772c22a539378b3",
          "body": "Restore compatibility with the full `doorkeeper >= 5.5` range",
          "is_bot": false,
          "headline": "Merge pull request #329 from 55728/compat/doorkeeper-5-5-support",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-08T09:14:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "79d3308080086301370ff6fe45a8d8ba3bb9ad4c",
          "body": "The gemspec declares doorkeeper >= 5.5 but the gem only worked on 5.8+\n(#328). Three version-specific breakages:\n\n* doorkeeper 5.5.x: Doorkeeper::Orm::ActiveRecord::Mixins is not\n  autoloadable (registered only since 5.6.0), so referencing\n  Mixins::AccessGrant raised NameError at require time and k\n[…]\nkeeper-gem/doorkeeper@6cd5cca2).\n\nCI gains gemfiles/doorkeeper_5.{5,6,7}.gemfile rows (single Ruby) so the\ndeclared floor stays honest.\n\nVerified locally: 305/0 on 5.5.4, 5.6.7, 5.7.1; 307/0 on 5.9.3.",
          "is_bot": false,
          "headline": "Restore compatibility with doorkeeper 5.5–5.7",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-07T11:00:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9f956e5012b36f593e99803680ed4761340f89a5",
          "body": null,
          "is_bot": false,
          "headline": "Release 1.10.4 :tada:",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-07T06:54:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24c3cb1729b69f48649a6f4491dcae69f805000d",
          "body": "Validate DCR registration scope against configured server scopes",
          "is_bot": false,
          "headline": "Merge commit from fork",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-07-06T18:01:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbaa8c759c946a5823efaa93a08112546a30d2e0",
          "body": "The link used Unicode hyphens (U+2010) and lowercase \"old-versions\",\nso it 404'd. Point it at the actual wiki slug Migration-from-Old-Versions\nwith ASCII hyphens, matching the other wiki links below it.",
          "is_bot": false,
          "headline": "Fix broken Migration wiki link in README",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-05T09:00:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38dbb3165774fe23e0fbc87ed815ada27690c6dc",
          "body": "Document the intent behind three spots whose rationale is not evident\nfrom the code alone:\n\n- authorizations_extension: why nonce is whitelisted into PreAuthorization\n- authorization_code_request: the one-time OpenidRequest / nonce ordering\n  that prevents a replayed code from reusing a nonce\n- token_response: when id_token is preset vs. built nonce-less (refresh_token)",
          "is_bot": false,
          "headline": "Add why-comments to non-obvious OIDC wiring",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-05T02:26:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afee80e94dbc120b0066bd506ee7fccf791d721c",
          "body": "The dynamic client registration spec asserted absolute state —\nexpect(Doorkeeper::Application.count).to eq(0|1) in ten places and\nDoorkeeper::Application.first in six — so any Application row already\npresent in spec/dummy/db/test.sqlite3 (for example left behind by a\n'rake server' dashboard session \n[…]\nse expect { post ... }.to change(Doorkeeper::Application, :count)\nmatchers and Application.find_by(uid:) instead, so the examples assert\nwhat the request did rather than what the whole table contains.",
          "is_bot": false,
          "headline": "Harden DCR spec against pre-existing Application rows",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-05T02:20:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "50d5578cf81ee3308c6cf5fddc9f7fe834fb6fa3",
          "body": "A JWKS publishes verification keys, but an HMAC JWK is the shared secret\nitself: clients cannot verify tokens with it, so it does not belong in a\npublic discovery document (RFC 7517).\n\nsigning_keys_normalized now drops oct entries, so /oauth/discovery/keys\nreturns an empty keys array for HMAC (HS256/HS384/HS512) configurations.",
          "is_bot": false,
          "headline": "Omit symmetric (oct) keys from the JWKS endpoint",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-04T07:19:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b24816c5642f0b778932a40bdb15dde4fa65a679",
          "body": "Re-implementation of the lost pr/docs-improvements branch.\n\nThe generated initializer only documented a subset of the available\nconfig options. Add commented-out examples with explanatory comments for\noptions that were otherwise undiscoverable from the template (README\nconfig docs having moved to th\n[…]\n- control whether a claim is returned\n  from the ID Token, UserInfo, or both\n\nDocumentation only; the template stays syntactically valid and is\nalready excluded from RuboCop. 303 examples, 0 failures.",
          "is_bot": false,
          "headline": "Document remaining config options in the initializer template",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-04T02:25:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a01ff8e886032a05223f6154896d6ea02ae53d78",
          "body": "Re-implementation of the lost pr/token-response-core-alignment branch.\n\n- IdTokenTokenResponse#body returned auth.token.token for the implicit\n  'id_token token' access_token. With a hashing token-secret strategy\n  the stored token attribute is the hash, so the client received an\n  unusable access t\n[…]\nn the\n  password flow but not the auth-code flow. Attach before super in both.\n\nEach fix is covered by a regression spec that fails on the old code\n(verified). 331 examples, 0 failures; rubocop clean.",
          "is_bot": false,
          "headline": "Align OIDC token/authorization responses with doorkeeper core",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-04T02:15:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b90ca18dc98d7307bca6b1b205915ac280cd5fdb",
          "body": "Re-implementation of the lost pr/authorization-endpoint-hardening branch.\n\n- max_age: a non-scalar value (e.g. max_age[]=1, arriving as an Array or\n  ActionController::Parameters) does not respond to #to_i, so\n  handle_oidc_max_age_param! raised NoMethodError and returned a 500.\n  Parse max_age thro\n[…]\nuired/InteractionRequired/\n  AccountSelectionRequired remain OpenidConnectError subclasses, so\n  existing 'rescue OpenidConnectError' handlers are unaffected.\n\n331 examples, 0 failures; rubocop clean.",
          "is_bot": false,
          "headline": "Harden the OIDC authorization endpoint against malformed requests",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-04T02:09:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e06cb0dc7746ecb55000689bccd3ec0f202278d6",
          "body": "Re-implementation of the lost pr/discovery-dcr-compliance branch.\n\n- grant_types_supported leaked doorkeeper's internal implicit_oidc grant\n  flow name (registered by this gem for the id_token response types)\n  into the discovery document and DCR responses. Map it to the standard\n  'implicit' grant \n[…]\neper.config.application_model\n  instead of hardcoded Doorkeeper::Application, so installations with a\n  custom application model can use dynamic registration.\n\n332 examples, 0 failures; rubocop clean.",
          "is_bot": false,
          "headline": "Align discovery and DCR responses with RFC 7591 / RFC 7033",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-04T02:01:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8494ba1faff1df1e8433587ae29b7078dcc65b2",
          "body": "Helpers::Controller had grown to a 294-line module mixing four\nconcerns, held together by Metrics/ModuleLength Max: 209 in\n.rubocop_todo.yml, plus CyclomaticComplexity Max: 13 and\nPerceivedComplexity Max: 10 for its two biggest methods.\n\nSplit it by concern, all included into the prepended Controlle\n[…]\ner_response hash (same accommodation upstream doorkeeper makes\nfor its own config-shaped methods).\n\nBehavior-preserving: 303 examples green on latest doorkeeper and on\ndoorkeeper 5.8.0, rubocop clean.",
          "is_bot": false,
          "headline": "Split Helpers::Controller into submodules, drop 3 Metrics overrides",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-04T01:30:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8d0f1599e66c15a372e12a04244206c1fd47e969",
          "body": "Claims::AggregatedClaim and Claims::DistributedClaim were added in 2016\n(25f2170) but never wired up: lib/doorkeeper/openid_connect.rb never\nrequires their files, ClaimsBuilder only constructs NormalClaim, and no\ncode, spec, or documentation references them. The discovery document\naccordingly advert\n[…]\ne 1.0 section 5.6) remain a\npossible future feature, but these empty attr_accessor shells carry no\nimplementation to build on — whoever implements the feature will start\nfrom the spec, not from these.",
          "is_bot": false,
          "headline": "Remove dead AggregatedClaim and DistributedClaim classes",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-04T01:23:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "abb47dc5e6012ea05eda0b7979cc6bd41904011b",
          "body": "Intersect the client-supplied scope against\n`Doorkeeper.configuration.scopes` (`default_scopes` +\n`optional_scopes`) using `Scopes#allowed` before persisting it.\nUnrecognized scopes are silently dropped and the confirmed set is\nechoed in the registration response, per RFC 7591 §2.",
          "is_bot": false,
          "headline": "Validate DCR registration scope against configured server scopes",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-07-02T13:10:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c7524be1d4b4e7b6b9c317841b9fa14fae01b1d1",
          "body": "…on registry (doorkeeper#1840)\n\nDoorkeeper renamed `client_credentials_methods` to\n`client_authentication_methods` and changed its return value from bare\nstrategy symbols (`:from_basic` / `:from_params`) to\n`Doorkeeper::ClientAuthentication::Method` objects whose `name` is the\nRFC 8414 identifier (`\n[…]\nC_CLIENT_AUTH_METHOD\nseparately). The \"none\" public-client pseudo-method is therefore filtered\nout, keeping existing discovery and DCR specs green on both the new\nregistry API and the legacy fallback.",
          "is_bot": false,
          "headline": "Resolve token_endpoint_auth_methods_supported via client authenticati…",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-27T13:50:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5f6bbaf59984041ead066bb1bd0f74e50c23152b",
          "body": "Doorkeeper added a top-level `issuer` option for RFC 8414 Authorization\nServer Metadata (doorkeeper-gem/doorkeeper#1838). RFC 8414's `issuer` and\nthe OIDC `iss` claim identify the same authorization server, so when the\nOpenID Connect `issuer` is not configured, resolve_issuer now falls back\nto `Door\n[…]\n)\n- Both unset preserves the existing InvalidConfiguration behavior\n- respond_to? guard keeps it a no-op on Doorkeeper versions predating\n  config.issuer; gemspec constraint left unchanged with a TODO",
          "is_bot": false,
          "headline": "Fall back to Doorkeeper issuer config when OIDC issuer is unset (#321)",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-27T12:57:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4b7d231f25855cdf0d45734cfd09c613e98937ab",
          "body": "The discovery controller built the published endpoints by calling\nDoorkeeper's URL helpers (`oauth_authorization_url`, ...) directly. When\nthe engine is mounted more than once under named scopes (e.g. a `User`\nand a `Customer` mount), every namespace's discovery document resolved\nthe same un-prefixe\n[…]\ny prefix and keep calling the bare helpers, so behaviour is\nunchanged.\n\nAdds a second namespaced mount to the dummy app and a request spec\ncovering both the namespaced and default discovery documents.",
          "is_bot": false,
          "headline": "Support mounting the engine under multiple named scopes (#192)",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-24T12:34:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0de04e0ea6db49fa17d211535090a5d71c268da2",
          "body": "Release 1.10.3 🎉",
          "is_bot": false,
          "headline": "Merge pull request #319 from 55728/release/v1.10.3",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-06-23T11:03:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83c16825fca334264b8722c2e0f4316c5bf15660",
          "body": null,
          "is_bot": false,
          "headline": "Release 1.10.3 🎉",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-23T10:30:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4eaff659926819e375cf5adbd792b10b8861d96",
          "body": "Wire `openid_request` from the AccessGrant mixin instead of `on_load(:active_record)`",
          "is_bot": false,
          "headline": "Merge pull request #308 from 55728/fix/306-remove-on-load-active-record",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-23T10:28:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dba2c846dc032eba85593180094b5219699bd88f",
          "body": "Release 1.10.2 🎉",
          "is_bot": false,
          "headline": "Merge pull request #318 from 55728/release/v1.10.2",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-06-22T11:10:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58eede21ccc337364391ca0bfd80fb6db16714e3",
          "body": "Add browser dashboard to spec/dummy for exercising OIDC endpoints",
          "is_bot": false,
          "headline": "Merge pull request #309 from 55728/feature/dummy-oidc-dashboard",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-06-22T08:44:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "967648d4d8c2d2cfec81f5a1850fb5f7e21ff303",
          "body": null,
          "is_bot": false,
          "headline": "Release 1.10.2 🎉",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-21T15:00:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25ab03892be8be65fa85b1adaba7cd853cabe748",
          "body": "Set `fail-fast: false` in CI matrix",
          "is_bot": false,
          "headline": "Merge pull request #316 from 55728/ci/fail-fast-false",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-18T12:18:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "149c3638e711e1efdf48423054bde8fa48391e02",
          "body": "Drop EOL Ruby 3.1, require Ruby >= 3.2",
          "is_bot": false,
          "headline": "Merge pull request #315 from 55728/fix/314-drop-ruby-3.1",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-18T12:16:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4e9caa2e4466b84214121cf152c15b2fe475464",
          "body": "With fail-fast: true, a single failing matrix job cancels every other\njob, so the whole run shows red even when the other Ruby/Rails\ncombinations pass. Disable fail-fast so each job reports its real\nstatus independently.",
          "is_bot": false,
          "headline": "Set fail-fast: false in CI matrix",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-17T23:48:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "808c76c9d788fc4c706d090c89fd868a0bb21490",
          "body": "Ruby 3.1 reached EOL on 2025-03-25. Since i18n 1.15.0 (2026-06-17)\nuses the Fiber[] storage API, which only exists on Ruby 3.2+, the\nRuby 3.1 CI row fails at load time. Drop the 3.1 matrix row (3.2 is\nalready covered) and its now-redundant exclude entries, and bump\nrequired_ruby_version to '>= 3.2'.\n\nCloses #314",
          "is_bot": false,
          "headline": "Drop EOL Ruby 3.1, require Ruby >= 3.2",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-17T23:41:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db6e4a952de3ff44d9ac55975cd9609daf406479",
          "body": "Add `client_secret_expires_at` to Dynamic Client Registration response",
          "is_bot": false,
          "headline": "Merge pull request #311 from 55728/fix/dcr-client-secret-expires-at",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-17T13:17:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54f79bf579e89f1c2f0db7ee4c485cb319fc2c05",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #312 from 55728/fix/id-token-required-claim-guard",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-17T12:56:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2538cb096f028f5268c3215c127b6af8da9cfae",
          "body": "OIDC Core 1.0 §2 lists iss/sub/aud/exp/iat as REQUIRED. IdToken#as_json\nrejected nil/empty values uniformly, so a blank REQUIRED claim was\nsilently omitted, producing a non-conformant ID Token. Raise the new\nErrors::MissingRequiredClaim for those claims; OPTIONAL claims (nonce,\nauth_time, custom) are still dropped when blank.",
          "is_bot": false,
          "headline": "Raise on blank REQUIRED ID Token claims instead of dropping them",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-16T13:38:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "befda381808d142c04b9a484daf4adaa1ab0cd80",
          "body": "Move Configuration documentation from README to Wiki",
          "is_bot": false,
          "headline": "Merge pull request #313 from 55728/289-move-configuration-docs-to-wiki",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-16T13:36:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf46487afff91fde967260bcef04810908219cb9",
          "body": "* execute account selection even without owner\n\n* fix select_account handling spec\n\n* add changelog\n\n* explicitly name resource_owner can be nil\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n* update spec comment, and check the resource_owner_or_nil is nil\n\n* update changelog\n\n* fix rubocop\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "execute account selection even without owner (#303)",
          "author_name": "Nov Matake",
          "author_login": "nov",
          "committed_at": "2026-06-16T13:31:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "237b17a85781dfe3113c62d3a24b09e82a4ac8aa",
          "body": "Replace the detailed Configuration section (previously ~530 lines)\nwith a brief pointer to the Wiki, where the content now lives as\ndedicated pages for each topic.\n\nThe Wiki migration was tracked and discussed in #289.\n\nCloses #289",
          "is_bot": false,
          "headline": "Move Configuration docs from README to Wiki",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-15T13:12:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00d307225d67ab380fa5dcb21ec924be9d60bcf0",
          "body": "RFC 7591 §3.2.1 and OIDC Dynamic Client Registration 1.0 §3.2 require\nclient_secret_expires_at whenever a client_secret is issued. Doorkeeper\nsecrets never expire, so emit 0 (no expiration) for confidential clients.",
          "is_bot": false,
          "headline": "Add client_secret_expires_at to Dynamic Client Registration response",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-15T12:28:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd9dc8929bc2b6cea4dc451d0fdd87bb7d5388d3",
          "body": "Replace the DummyController root redirect with a single-page dashboard that\ndrives every OpenID Connect endpoint from the browser, removing the need for\nrails console + curl when trying the gem out by hand.\n\n- Setup: create users and OAuth applications via plain Rails forms (CSRF\n  tokens are auto-a\n[…]\nedirects straight back with a code; the test environment is unchanged\n(controller specs stub skip_authorization? themselves). Adds a minimal\ndevelopment environment file. No new tests (dummy UI only).",
          "is_bot": false,
          "headline": "Add browser dashboard to spec/dummy for exercising OIDC endpoints",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-12T14:11:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d3e9eed1590c00375ba56499567edf1b65ee9283",
          "body": "Namespaced custom access grant models (e.g. `Auth::OAuthAccessGrant <\nApplicationRecord`) crashed on Rails boot since v1.10.0 with\n`NameError: uninitialized constant Auth::ApplicationRecord`.\n\nv1.10.0 (#241) wrapped the access-grant prepend in\n`ActiveSupport.on_load(:active_record)`, following doork\n[…]\nrkeeper 5.9.x, which no longer exposes `active_record_options`).\n\nAdds regression coverage: a namespaced custom model that includes the\ndoorkeeper mixin is wired with the `openid_request` association.",
          "is_bot": false,
          "headline": "Wire openid_request from AccessGrant mixin instead of on_load (#306)",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-12T13:22:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "75d1613c4f77672684801a0c39c333f12f00ecb2",
          "body": "Fix `bundle exec rake server` for the test application",
          "is_bot": false,
          "headline": "Merge pull request #307 from 55728/chore/maintain-dummy-server",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-11T12:23:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb0ce98aa5801e8880093d5171ff0c53f7094529",
          "body": null,
          "is_bot": false,
          "headline": "Fix `bundle exec rake server` for the test application",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-11T12:10:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa0ecd86f2e7dba875cf9bf92160a5f2730b3412",
          "body": "…token\n\nDocument `auth_time_from_access_token` config option in README",
          "is_bot": false,
          "headline": "Merge pull request #305 from 55728/docs/readme-auth-time-from-access-…",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-10T10:28:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2afae26a444fbf75deccdcdbe2c9b8e2cb1cf85",
          "body": "#304 added the `auth_time_from_access_token` config option (per-grant\nauth_time) and documented it in the initializer template and CHANGELOG,\nbut the README option list was not updated.\n\nAdd an `auth_time_from_access_token` entry alongside\n`auth_time_from_resource_owner` / `auth_time_from_session`, \n[…]\n `auth_time_from_resource_owner` for the ID Token claim\n- it only affects the ID Token `auth_time` claim and is NOT used for\n  `max_age` enforcement (which still resolves via session / resource owner)",
          "is_bot": false,
          "headline": "Document auth_time_from_access_token config option in README",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-07T08:50:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d9e9eac07c347ed5d86cdef2e1d9fbd67b4a19c0",
          "body": null,
          "is_bot": false,
          "headline": "Merge pull request #304 from nov/feature/auth_time_fron_grant",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-05T12:13:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60e116fc883d9f2f90409c1a03f9d9970c2e69d6",
          "body": null,
          "is_bot": false,
          "headline": "sorry, I did copy&paste :p",
          "author_name": "nov",
          "author_login": "nov",
          "committed_at": "2026-06-04T23:59:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19a46793d3ca5b97caebff45efa764ddf64e4a26",
          "body": null,
          "is_bot": false,
          "headline": "add changelog",
          "author_name": "nov",
          "author_login": "nov",
          "committed_at": "2026-06-04T23:57:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f557ce17da139e14177dfe64eb42083cb1cee24",
          "body": null,
          "is_bot": false,
          "headline": "fix rubocop error",
          "author_name": "nov",
          "author_login": "nov",
          "committed_at": "2026-06-04T23:57:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62278e7e07195f798f2b1bdea19dc65045f613db",
          "body": null,
          "is_bot": false,
          "headline": "allow handle auth_time per grant",
          "author_name": "nov",
          "author_login": "nov",
          "committed_at": "2026-06-04T23:44:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "401e5fcdcd875205f9ae0b69a125e854ea472654",
          "body": "Release 1.10.1 🎉",
          "is_bot": false,
          "headline": "Merge pull request #301 from 55728/release/v1.10.1",
          "author_name": "Nikita Bulai",
          "author_login": "nbulaj",
          "committed_at": "2026-06-03T13:41:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ab16258090665eefa6205b77f2d7a9cf112fdc5",
          "body": null,
          "is_bot": false,
          "headline": "Release 1.10.1 🎉",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-03T13:38:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5620cfe0aaf0dddd9b48f4d780329826129533a2",
          "body": "Raise on blank issuer in `resolve_issuer`",
          "is_bot": false,
          "headline": "Merge pull request #299 from 55728/fix/issue-298-blank-issuer-guard",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-03T13:27:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fbf4f687cda74b88f3c36668b879d786f460b631",
          "body": "Ignore blank entries in the `prompt` parameter",
          "is_bot": false,
          "headline": "Merge pull request #296 from 55728/fix/prompt-leading-whitespace",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-03T13:00:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8ca5af5d56779e094969b92612853f7dad71c82",
          "body": "…aking-note\n\nAdd breaking-change note for arity-2 issuer blocks to v1.10.0 CHANGELOG",
          "is_bot": false,
          "headline": "Merge pull request #300 from 55728/docs/changelog-v1.10.0-arity-2-bre…",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-03T12:59:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ce74737b477857c170c7ebb6fb48178501d3ff1",
          "body": "The issuer dispatch unification in v1.10.0 is a practical breaking change\nfor existing arity-2 blocks that relied on DiscoveryController passing\nrequest as the first argument. Add an [!IMPORTANT] callout to the v1.10.0\nsection so upgraders see the migration path immediately.\n\nSee #298",
          "is_bot": false,
          "headline": "Add breaking-change note for arity-2 issuer blocks to v1.10.0 CHANGELOG",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-03T12:52:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d4e791d0c52234addbfc1ef88305661e9967f40",
          "body": "Since v1.10.0, `resolve_issuer` dispatches arity-2 issuer blocks with\n`(resource_owner, application)`. In the discovery context both are nil,\nso an existing arity-2 block that relied on the v1.9.0 behavior (where\nDiscoveryController passed the request as the first argument) can return\nnil. `resolve_\n[…]\n shipping a broken discovery document.\n\nSpecs that reconfigured OpenID Connect without an issuer (and only\nasserted unrelated fields) relied on the old silent-\"\" behavior; they\nnow set a valid issuer.",
          "is_bot": false,
          "headline": "Raise on blank issuer in resolve_issuer (#298)",
          "author_name": "Kenta Ishizaki",
          "author_login": "55728",
          "committed_at": "2026-06-03T12:31:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 21,
      "commits_last_year": 241,
      "latest_release_at": "2026-07-14T14:21:42Z",
      "latest_release_tag": "v1.10.5",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 28,
      "days_since_latest_release": 13,
      "mean_days_between_releases": 88.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "doorkeeper-openid_connect",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "rubygems",
          "matches_repo": true,
          "registry_url": "https://rubygems.org/gems/doorkeeper-openid_connect",
          "is_deprecated": false,
          "latest_version": "1.10.5",
          "repository_url": "https://github.com/doorkeeper-gem/doorkeeper-openid_connect",
          "versions_count": 44,
          "total_downloads": 43711217,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2015-03-24T17:57:11.539000Z",
          "latest_published_at": "2026-07-09T14:40:05.156000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 18
        }
      ]
    },
    "popularity": {
      "forks": 131,
      "stars": 216,
      "watchers": 17,
      "fork_history": {
        "days": [
          {
            "date": "2014-09-02",
            "count": 1
          },
          {
            "date": "2015-04-18",
            "count": 1
          },
          {
            "date": "2015-05-08",
            "count": 1
          },
          {
            "date": "2016-02-12",
            "count": 1
          },
          {
            "date": "2016-11-16",
            "count": 1
          },
          {
            "date": "2016-12-01",
            "count": 1
          },
          {
            "date": "2016-12-27",
            "count": 1
          },
          {
            "date": "2016-12-28",
            "count": 1
          },
          {
            "date": "2017-01-06",
            "count": 1
          },
          {
            "date": "2017-01-11",
            "count": 1
          },
          {
            "date": "2017-04-17",
            "count": 1
          },
          {
            "date": "2017-05-04",
            "count": 1
          },
          {
            "date": "2017-05-09",
            "count": 1
          },
          {
            "date": "2017-05-31",
            "count": 1
          },
          {
            "date": "2017-07-07",
            "count": 1
          },
          {
            "date": "2017-07-14",
            "count": 1
          },
          {
            "date": "2017-07-29",
            "count": 1
          },
          {
            "date": "2017-08-15",
            "count": 1
          },
          {
            "date": "2017-10-19",
            "count": 1
          },
          {
            "date": "2017-11-06",
            "count": 1
          },
          {
            "date": "2018-01-20",
            "count": 1
          },
          {
            "date": "2018-02-06",
            "count": 1
          },
          {
            "date": "2018-02-27",
            "count": 1
          },
          {
            "date": "2018-05-04",
            "count": 1
          },
          {
            "date": "2018-06-07",
            "count": 1
          },
          {
            "date": "2018-08-01",
            "count": 1
          },
          {
            "date": "2018-09-05",
            "count": 1
          },
          {
            "date": "2018-12-13",
            "count": 1
          },
          {
            "date": "2019-01-03",
            "count": 1
          },
          {
            "date": "2019-01-10",
            "count": 1
          },
          {
            "date": "2019-02-07",
            "count": 1
          },
          {
            "date": "2019-03-05",
            "count": 1
          },
          {
            "date": "2019-03-26",
            "count": 1
          },
          {
            "date": "2019-04-15",
            "count": 1
          },
          {
            "date": "2019-05-22",
            "count": 1
          },
          {
            "date": "2019-07-12",
            "count": 1
          },
          {
            "date": "2019-07-16",
            "count": 1
          },
          {
            "date": "2019-08-12",
            "count": 1
          },
          {
            "date": "2019-08-23",
            "count": 1
          },
          {
            "date": "2019-09-12",
            "count": 1
          },
          {
            "date": "2019-09-16",
            "count": 1
          },
          {
            "date": "2019-10-02",
            "count": 1
          },
          {
            "date": "2019-10-11",
            "count": 1
          },
          {
            "date": "2019-11-01",
            "count": 1
          },
          {
            "date": "2019-12-03",
            "count": 1
          },
          {
            "date": "2019-12-06",
            "count": 1
          },
          {
            "date": "2019-12-10",
            "count": 1
          },
          {
            "date": "2020-02-07",
            "count": 1
          },
          {
            "date": "2020-03-08",
            "count": 1
          },
          {
            "date": "2020-04-17",
            "count": 1
          },
          {
            "date": "2020-04-28",
            "count": 1
          },
          {
            "date": "2020-05-19",
            "count": 1
          },
          {
            "date": "2020-05-21",
            "count": 1
          },
          {
            "date": "2020-05-24",
            "count": 1
          },
          {
            "date": "2020-06-04",
            "count": 1
          },
          {
            "date": "2020-07-10",
            "count": 1
          },
          {
            "date": "2020-07-18",
            "count": 1
          },
          {
            "date": "2020-07-24",
            "count": 1
          },
          {
            "date": "2020-08-25",
            "count": 1
          },
          {
            "date": "2020-09-01",
            "count": 1
          },
          {
            "date": "2020-09-24",
            "count": 1
          },
          {
            "date": "2020-11-04",
            "count": 1
          },
          {
            "date": "2020-12-14",
            "count": 1
          },
          {
            "date": "2021-02-10",
            "count": 1
          },
          {
            "date": "2021-03-11",
            "count": 1
          },
          {
            "date": "2021-04-08",
            "count": 1
          },
          {
            "date": "2021-04-11",
            "count": 1
          },
          {
            "date": "2021-04-15",
            "count": 1
          },
          {
            "date": "2021-04-19",
            "count": 1
          },
          {
            "date": "2021-05-09",
            "count": 1
          },
          {
            "date": "2021-06-04",
            "count": 1
          },
          {
            "date": "2021-06-18",
            "count": 1
          },
          {
            "date": "2021-08-20",
            "count": 1
          },
          {
            "date": "2021-10-06",
            "count": 1
          },
          {
            "date": "2021-10-09",
            "count": 1
          },
          {
            "date": "2021-10-17",
            "count": 1
          },
          {
            "date": "2021-10-19",
            "count": 1
          },
          {
            "date": "2021-11-12",
            "count": 1
          },
          {
            "date": "2021-11-22",
            "count": 1
          },
          {
            "date": "2022-03-03",
            "count": 1
          },
          {
            "date": "2022-03-08",
            "count": 1
          },
          {
            "date": "2022-05-16",
            "count": 1
          },
          {
            "date": "2022-07-01",
            "count": 1
          },
          {
            "date": "2022-07-05",
            "count": 1
          },
          {
            "date": "2022-08-15",
            "count": 1
          },
          {
            "date": "2022-08-26",
            "count": 1
          },
          {
            "date": "2022-09-11",
            "count": 1
          },
          {
            "date": "2022-09-14",
            "count": 1
          },
          {
            "date": "2022-10-17",
            "count": 1
          },
          {
            "date": "2022-11-02",
            "count": 1
          },
          {
            "date": "2022-11-14",
            "count": 1
          },
          {
            "date": "2022-11-22",
            "count": 1
          },
          {
            "date": "2023-01-30",
            "count": 1
          },
          {
            "date": "2023-02-01",
            "count": 2
          },
          {
            "date": "2023-02-24",
            "count": 1
          },
          {
            "date": "2023-03-06",
            "count": 1
          },
          {
            "date": "2023-10-03",
            "count": 1
          },
          {
            "date": "2023-11-14",
            "count": 1
          },
          {
            "date": "2023-11-23",
            "count": 1
          },
          {
            "date": "2024-01-25",
            "count": 1
          },
          {
            "date": "2024-06-06",
            "count": 1
          },
          {
            "date": "2024-06-09",
            "count": 1
          },
          {
            "date": "2024-07-09",
            "count": 1
          },
          {
            "date": "2024-07-26",
            "count": 1
          },
          {
            "date": "2024-10-11",
            "count": 1
          },
          {
            "date": "2024-11-05",
            "count": 1
          },
          {
            "date": "2024-11-21",
            "count": 1
          },
          {
            "date": "2025-01-07",
            "count": 1
          },
          {
            "date": "2025-02-26",
            "count": 1
          },
          {
            "date": "2025-03-19",
            "count": 1
          },
          {
            "date": "2025-08-19",
            "count": 1
          },
          {
            "date": "2025-08-22",
            "count": 1
          },
          {
            "date": "2025-09-02",
            "count": 1
          },
          {
            "date": "2025-09-18",
            "count": 1
          },
          {
            "date": "2025-11-04",
            "count": 1
          },
          {
            "date": "2025-11-09",
            "count": 1
          },
          {
            "date": "2025-11-17",
            "count": 1
          },
          {
            "date": "2025-11-28",
            "count": 1
          },
          {
            "date": "2026-01-06",
            "count": 1
          },
          {
            "date": "2026-02-02",
            "count": 1
          },
          {
            "date": "2026-03-16",
            "count": 1
          },
          {
            "date": "2026-05-18",
            "count": 1
          },
          {
            "date": "2026-06-04",
            "count": 1
          },
          {
            "date": "2026-07-17",
            "count": 1
          },
          {
            "date": "2026-07-18",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 126,
        "total_forks": 131
      },
      "star_history": null,
      "open_issues_and_prs": 15
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 33692,
      "source_files_sampled": 106,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 3995
    },
    "dependencies": {
      "manifests": [
        "Gemfile"
      ],
      "advisories": {
        "error": "No resolved dependencies carried a version and a supported ecosystem",
        "scope": "repository_graph",
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 17,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "rubygems"
      ],
      "dependencies": [
        {
          "name": "rails",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": null
        },
        {
          "name": "rails-controller-testing",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "rails-controller-testing",
            "direct": true,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "bigdecimal",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "conventional-changelog",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "doorkeeper",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "drb",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "factory_bot",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "jwt",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "mutex_m",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "ostruct",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "pry-byebug",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "puma",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rspec-rails",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-performance",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-rails",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "rubocop-rspec",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          },
          {
            "name": "sqlite3",
            "direct": false,
            "version": null,
            "ecosystem": "rubygems"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 17,
        "direct_count": 1,
        "indirect_count": 16
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 6,
        "merged_prs": 203,
        "open_issues": 9,
        "closed_ratio": 0.916,
        "closed_issues": 98,
        "closed_unmerged_prs": 39
      },
      "bus_factor": 2,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "toupeira",
          "commits": 172,
          "avatar_url": "https://avatars.githubusercontent.com/u/6501?v=4"
        },
        {
          "type": "User",
          "login": "55728",
          "commits": 150,
          "avatar_url": "https://avatars.githubusercontent.com/u/153918146?v=4"
        },
        {
          "type": "User",
          "login": "nbulaj",
          "commits": 144,
          "avatar_url": "https://avatars.githubusercontent.com/u/1443426?v=4"
        },
        {
          "type": "User",
          "login": "nov",
          "commits": 27,
          "avatar_url": "https://avatars.githubusercontent.com/u/27299?v=4"
        },
        {
          "type": "User",
          "login": "linhdangduy",
          "commits": 16,
          "avatar_url": "https://avatars.githubusercontent.com/u/9018303?v=4"
        },
        {
          "type": "User",
          "login": "stanhu",
          "commits": 9,
          "avatar_url": "https://avatars.githubusercontent.com/u/963826?v=4"
        },
        {
          "type": "User",
          "login": "KazWolfe",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/5192145?v=4"
        },
        {
          "type": "User",
          "login": "nashby",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/200500?v=4"
        },
        {
          "type": "User",
          "login": "sato11",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/22004610?v=4"
        },
        {
          "type": "User",
          "login": "nbibler",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/3775?v=4"
        }
      ],
      "contributors_sampled": 57,
      "top_contributor_share": 0.282
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "changelog.yml",
        "ci.yml",
        "rubocop.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".rubocop.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 6,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 27 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 1,
            "reason": "dependency not pinned by hash detected -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "5843055b989382b472fa3a12dc42f722d4432baf",
        "ran_at": "2026-07-27T18:21:24Z",
        "aggregate_score": 7.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T18:07:57Z",
      "oldest_open_prs": [
        {
          "number": 243,
          "created_at": "2026-04-22T09:35:19Z",
          "last_comment_at": "2026-06-24T12:32:00Z",
          "last_comment_author": "55728"
        },
        {
          "number": 244,
          "created_at": "2026-04-22T09:54:22Z",
          "last_comment_at": "2026-06-22T13:04:19Z",
          "last_comment_author": "55728"
        },
        {
          "number": 337,
          "created_at": "2026-07-19T09:04:33Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 338,
          "created_at": "2026-07-19T09:22:20Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 349,
          "created_at": "2026-07-22T22:52:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 353,
          "created_at": "2026-07-23T14:14:21Z",
          "last_comment_at": "2026-07-23T14:50:43Z",
          "last_comment_author": "55728"
        }
      ],
      "last_merged_pr_at": "2026-07-27T10:14:53Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 154,
          "created_at": "2021-06-15T18:38:22Z",
          "last_comment_at": "2023-10-04T15:28:40Z",
          "last_comment_author": "cyclingzealot"
        },
        {
          "number": 179,
          "created_at": "2022-11-09T19:32:19Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 191,
          "created_at": "2023-02-17T14:14:11Z",
          "last_comment_at": "2026-06-24T12:49:15Z",
          "last_comment_author": "55728"
        },
        {
          "number": 330,
          "created_at": "2026-07-09T15:18:59Z",
          "last_comment_at": "2026-07-09T16:13:11Z",
          "last_comment_author": "55728"
        },
        {
          "number": 331,
          "created_at": "2026-07-14T13:03:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 339,
          "created_at": "2026-07-19T16:43:58Z",
          "last_comment_at": "2026-07-20T09:06:24Z",
          "last_comment_author": "55728"
        },
        {
          "number": 340,
          "created_at": "2026-07-19T16:44:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 344,
          "created_at": "2026-07-20T09:13:56Z",
          "last_comment_at": "2026-07-27T10:17:34Z",
          "last_comment_author": "55728"
        },
        {
          "number": 345,
          "created_at": "2026-07-20T12:45:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/doorkeeper-gem/doorkeeper-openid_connect",
    "host": "github.com",
    "name": "doorkeeper-openid_connect",
    "owner": "doorkeeper-gem"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 77,
      "inputs": {
        "security": 73,
        "vitality": 87,
        "community": 74,
        "governance": 77,
        "engineering": 74
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 87,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 83,
            "inputs": {
              "commits_last_year": 241,
              "human_commit_share": 0.99,
              "days_since_last_push": 0,
              "active_weeks_last_year": 28
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "28/52 weeks with commits",
                "points": 19.4,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 28
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "241 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 241
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "releases_count": 21,
              "latest_release_tag": "v1.10.5",
              "releases_from_tags": false,
              "days_since_latest_release": 13,
              "mean_days_between_releases": 88.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "21 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 21
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 13 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 13
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~88.7 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 88.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "good",
        "name": "Community & Adoption",
        "value": 74,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "forks": 131,
              "stars": 216,
              "watchers": 17,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "216 stars",
                "points": 37.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 216
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "131 forks",
                "points": 17.6,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 131
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "17 watchers",
                "points": 6.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 17
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "excellent",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 99,
            "inputs": {
              "packages": [
                "doorkeeper-openid_connect"
              ],
              "dependents": null,
              "ecosystems": "rubygems",
              "total_downloads": 43711217,
              "monthly_downloads": null
            },
            "components": [
              {
                "key": "total_downloads",
                "name": "Total downloads",
                "detail": "43,711,217 downloads all-time across rubygems",
                "points": 79.4,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_total",
                    "params": {
                      "count": 43711217,
                      "ecosystems": "rubygems"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 77,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 57,
              "top_contributor_share": 0.282
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 28% of commits",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 28
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "57 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 57
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 27 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "merged_prs": 203,
              "open_issues": 9,
              "closed_issues": 98,
              "issue_closed_ratio": 0.916,
              "closed_unmerged_prs": 39
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "92% of issues closed",
                "points": 42.8,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 92
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "203/242 decided PRs merged",
                "points": 32.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 203,
                      "decided": 242
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "followers": 20,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "doorkeeper-gem",
              "public_repos": 11,
              "account_age_days": 4488
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "20 followers of doorkeeper-gem",
                "points": 9.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 20,
                      "login": "doorkeeper-gem"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "11 public repos, account ~12 yr old",
                "points": 19.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 11
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 12
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "doorkeeper-openid_connect"
              ],
              "ecosystems": "rubygems",
              "any_deprecated": false,
              "min_days_since_publish": 18
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on rubygems",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "rubygems"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 18 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 18
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "44 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 44
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 74,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".rubocop.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".rubocop.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "doorkeeper",
                "openidconnect",
                "openid-provider",
                "oauth"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "4 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 73,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 73,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 7.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 27 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 17
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 61,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.869,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 3995
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "86 of 99 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 86,
                      "sampled": 99
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 46,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.02,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.01
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".rubocop.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".rubocop.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "2 of the last 100 commits agent-authored or agent-credited",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "1 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "Ruby",
              "largest_source_bytes": 33692,
              "source_files_sampled": 106,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Ruby without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Ruby"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/106 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 106,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "No resolved dependencies carried a version and a supported ecosystem"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T18:21:53.394759Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/doorkeeper-gem/doorkeeper-openid_connect.svg",
  "full_name": "doorkeeper-gem/doorkeeper-openid_connect",
  "license_state": "standard",
  "license_spdx": "MIT"
}