membrane / api-gateway

每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。

每个点涵盖 12 天。

来自 GitHub 依赖图的完整解析依赖集合：101 个直接依赖与 52 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。

该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 98 个包，其中也包含从不交付的开发与测试版本固定：1 个存在已知公告，1 个为直接依赖。 有 55 个无法评估——没有已解析的版本、生态系统不受支持，或不在所列包清单之内。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [
        "oauth2",
        "api-gateway",
        "api",
        "rest",
        "graphql",
        "openapi"
      ],
      "is_fork": false,
      "size_kb": 60654,
      "has_wiki": true,
      "homepage": "https://membrane-api.io",
      "languages": {
        "CSS": 74802,
        "HTML": 25871,
        "Java": 8649718,
        "XSLT": 42592,
        "Shell": 122183,
        "Groovy": 1519,
        "Batchfile": 91588,
        "Dockerfile": 1219,
        "JavaScript": 74532,
        "PowerShell": 6103
      },
      "pushed_at": "2026-07-22T14:16:10Z",
      "created_at": "2012-10-22T09:39:24Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T00:24:50Z",
      "description": "Truly open source API gateway with native OpenAPI support. Written in Java, it is easily extensible, supports legacy XML and SOAP, and is optimized for container deployments.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "master",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Java",
      "significant_languages": [
        "Java"
      ]
    },
    "owner": {
      "blog": "http://predic8.de",
      "name": "predic8 GmbH",
      "type": "Organization",
      "login": "membrane",
      "company": null,
      "location": "Bonn, Germany",
      "followers": 19,
      "avatar_url": "https://avatars.githubusercontent.com/u/1932933?v=4",
      "created_at": "2012-07-06T15:25:40Z",
      "is_verified": null,
      "public_repos": 52,
      "account_age_days": 5130
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v6.5.4",
          "kind": "patch",
          "published_at": "2026-07-13T16:11:03Z"
        },
        {
          "tag": "v7.3.1",
          "kind": "patch",
          "published_at": "2026-07-11T06:45:02Z"
        },
        {
          "tag": "v7.3.0",
          "kind": "minor",
          "published_at": "2026-07-07T15:18:38Z"
        },
        {
          "tag": "v6.5.3",
          "kind": "patch",
          "published_at": "2026-06-26T13:46:02Z"
        },
        {
          "tag": "v7.2.5",
          "kind": "patch",
          "published_at": "2026-06-26T13:56:38Z"
        },
        {
          "tag": "v7.2.4",
          "kind": "patch",
          "published_at": "2026-06-25T12:01:03Z"
        },
        {
          "tag": "v7.2.3",
          "kind": "patch",
          "published_at": "2026-06-10T13:14:21Z"
        },
        {
          "tag": "v7.2.2",
          "kind": "patch",
          "published_at": "2026-05-27T15:19:48Z"
        },
        {
          "tag": "v7.2.1",
          "kind": "patch",
          "published_at": "2026-05-12T08:59:17Z"
        },
        {
          "tag": "v7.2.0",
          "kind": "minor",
          "published_at": "2026-04-14T11:11:01Z"
        },
        {
          "tag": "v7.1.4",
          "kind": "patch",
          "published_at": "2026-04-14T08:56:24Z"
        },
        {
          "tag": "v6.5.2",
          "kind": "patch",
          "published_at": "2026-04-12T15:58:19Z"
        },
        {
          "tag": "v7.1.3",
          "kind": "patch",
          "published_at": "2026-03-27T14:05:40Z"
        },
        {
          "tag": "v6.5.1",
          "kind": "patch",
          "published_at": "2026-03-16T14:45:20Z"
        },
        {
          "tag": "v6.5.0",
          "kind": "minor",
          "published_at": "2026-03-16T08:48:00Z"
        },
        {
          "tag": "v6.4.0",
          "kind": "minor",
          "published_at": "2026-03-09T16:14:54Z"
        },
        {
          "tag": "v6.3.19",
          "kind": "patch",
          "published_at": "2026-03-02T15:40:04Z"
        },
        {
          "tag": "v7.1.2",
          "kind": "patch",
          "published_at": "2026-03-02T14:06:47Z"
        },
        {
          "tag": "v7.1.1",
          "kind": "patch",
          "published_at": "2026-02-25T13:06:36Z"
        },
        {
          "tag": "v6.3.18",
          "kind": "patch",
          "published_at": "2026-02-12T16:19:21Z"
        },
        {
          "tag": "v7.1.0",
          "kind": "minor",
          "published_at": "2026-02-12T16:09:38Z"
        },
        {
          "tag": "v6.3.17",
          "kind": "patch",
          "published_at": "2026-01-30T16:34:30Z"
        },
        {
          "tag": "v6.3.16",
          "kind": "patch",
          "published_at": "2026-01-23T19:11:40Z"
        },
        {
          "tag": "v7.0.6",
          "kind": "patch",
          "published_at": "2026-01-15T16:01:43Z"
        },
        {
          "tag": "v6.3.15",
          "kind": "patch",
          "published_at": "2026-01-13T14:13:58Z"
        },
        {
          "tag": "v6.3.14",
          "kind": "patch",
          "published_at": "2026-01-12T18:16:12Z"
        },
        {
          "tag": "v6.3.13",
          "kind": "patch",
          "published_at": "2026-01-08T13:15:39Z"
        },
        {
          "tag": "v7.0.5",
          "kind": "patch",
          "published_at": "2025-12-23T11:09:06Z"
        },
        {
          "tag": "v6.3.12",
          "kind": "patch",
          "published_at": "2025-12-19T13:50:15Z"
        },
        {
          "tag": "v7.0.4",
          "kind": "patch",
          "published_at": "2025-12-18T14:44:51Z"
        },
        {
          "tag": "v7.0.3",
          "kind": "patch",
          "published_at": "2025-12-12T16:14:54Z"
        },
        {
          "tag": "v7.0.1",
          "kind": "patch",
          "published_at": "2025-12-10T17:00:06Z"
        },
        {
          "tag": "v6.3.11",
          "kind": "patch",
          "published_at": "2025-12-05T13:40:51Z"
        },
        {
          "tag": "v6.3.10",
          "kind": "patch",
          "published_at": "2025-11-11T11:10:15Z"
        },
        {
          "tag": "v6.3.7",
          "kind": "patch",
          "published_at": "2025-11-10T09:07:21Z"
        },
        {
          "tag": "v6.3.6",
          "kind": "patch",
          "published_at": "2025-11-03T08:59:49Z"
        },
        {
          "tag": "v6.3.5",
          "kind": "patch",
          "published_at": "2025-10-17T11:11:17Z"
        },
        {
          "tag": "v6.3.4",
          "kind": "patch",
          "published_at": "2025-10-14T14:45:24Z"
        },
        {
          "tag": "v6.3.3",
          "kind": "patch",
          "published_at": "2025-10-13T18:32:35Z"
        },
        {
          "tag": "v6.3.2",
          "kind": "patch",
          "published_at": "2025-10-10T13:52:30Z"
        },
        {
          "tag": "v5.8.9",
          "kind": "patch",
          "published_at": "2025-09-26T13:44:56Z"
        },
        {
          "tag": "v6.3.1",
          "kind": "patch",
          "published_at": "2025-09-10T08:38:17Z"
        },
        {
          "tag": "v6.2.7",
          "kind": "patch",
          "published_at": "2025-08-26T12:03:28Z"
        },
        {
          "tag": "v6.2.6",
          "kind": "patch",
          "published_at": "2025-08-11T07:58:45Z"
        },
        {
          "tag": "v6.2.5",
          "kind": "patch",
          "published_at": "2025-07-29T09:07:00Z"
        },
        {
          "tag": "v6.2.4",
          "kind": "patch",
          "published_at": "2025-07-22T14:28:25Z"
        },
        {
          "tag": "v6.2.3",
          "kind": "patch",
          "published_at": "2025-07-07T10:09:25Z"
        },
        {
          "tag": "v6.2.2",
          "kind": "patch",
          "published_at": "2025-07-03T12:47:06Z"
        },
        {
          "tag": "v6.2.1",
          "kind": "patch",
          "published_at": "2025-07-03T11:20:04Z"
        },
        {
          "tag": "v6.2.0",
          "kind": "minor",
          "published_at": "2025-06-30T16:44:00Z"
        },
        {
          "tag": "v6.1.0",
          "kind": "minor",
          "published_at": "2025-06-11T15:07:42Z"
        },
        {
          "tag": "v5.5.14",
          "kind": "patch",
          "published_at": "2025-05-07T16:10:59Z"
        },
        {
          "tag": "v5.8.8",
          "kind": "patch",
          "published_at": "2025-05-07T16:10:31Z"
        },
        {
          "tag": "v5.5.13",
          "kind": "patch",
          "published_at": "2025-05-06T08:46:01Z"
        },
        {
          "tag": "v5.8.6",
          "kind": "patch",
          "published_at": "2025-05-06T08:05:37Z"
        },
        {
          "tag": "v6.0.5",
          "kind": "patch",
          "published_at": "2025-03-21T08:15:25Z"
        },
        {
          "tag": "v5.8.5",
          "kind": "patch",
          "published_at": "2025-03-15T17:20:02Z"
        },
        {
          "tag": "v5.8.4",
          "kind": "patch",
          "published_at": "2025-03-14T19:00:28Z"
        },
        {
          "tag": "v5.8.3",
          "kind": "patch",
          "published_at": "2025-03-13T10:46:38Z"
        },
        {
          "tag": "v6.0.4",
          "kind": "patch",
          "published_at": "2025-03-12T12:22:50Z"
        },
        {
          "tag": "v6.0.3",
          "kind": "patch",
          "published_at": "2025-03-06T12:53:23Z"
        },
        {
          "tag": "v6.0.2",
          "kind": "patch",
          "published_at": "2025-03-03T11:37:33Z"
        },
        {
          "tag": "v6.0.1",
          "kind": "patch",
          "published_at": "2025-02-26T10:52:25Z"
        },
        {
          "tag": "v6.0.0",
          "kind": "major",
          "published_at": "2025-02-25T08:46:46Z"
        },
        {
          "tag": "v5.5.12",
          "kind": "patch",
          "published_at": "2025-02-18T10:41:45Z"
        },
        {
          "tag": "v5.8.2",
          "kind": "patch",
          "published_at": "2025-02-18T10:51:17Z"
        },
        {
          "tag": "v5.8.1",
          "kind": "patch",
          "published_at": "2025-02-10T14:52:27Z"
        },
        {
          "tag": "v5.5.11",
          "kind": "patch",
          "published_at": "2025-02-10T12:50:46Z"
        },
        {
          "tag": "v5.5.10",
          "kind": "patch",
          "published_at": "2025-02-07T13:15:41Z"
        },
        {
          "tag": "v5.8.0",
          "kind": "minor",
          "published_at": "2024-12-19T11:37:28Z"
        },
        {
          "tag": "v5.5.9",
          "kind": "patch",
          "published_at": "2024-12-09T14:51:37Z"
        },
        {
          "tag": "v5.5.8",
          "kind": "patch",
          "published_at": "2024-12-07T11:31:34Z"
        },
        {
          "tag": "v5.7.3",
          "kind": "patch",
          "published_at": "2024-09-18T07:59:03Z"
        },
        {
          "tag": "v5.7.1",
          "kind": "patch",
          "published_at": "2024-08-20T07:45:37Z"
        },
        {
          "tag": "v5.7.0",
          "kind": "minor",
          "published_at": "2024-08-15T14:03:28Z"
        },
        {
          "tag": "v5.6.0",
          "kind": "minor",
          "published_at": "2024-08-12T11:55:53Z"
        },
        {
          "tag": "v5.5.4",
          "kind": "patch",
          "published_at": "2024-07-05T12:07:20Z"
        },
        {
          "tag": "v5.5.3",
          "kind": "patch",
          "published_at": "2024-07-01T10:27:12Z"
        },
        {
          "tag": "v5.5.2",
          "kind": "patch",
          "published_at": "2024-05-31T13:01:33Z"
        },
        {
          "tag": "v5.5.1",
          "kind": "patch",
          "published_at": "2024-05-21T10:19:25Z"
        },
        {
          "tag": "v5.5.0",
          "kind": "minor",
          "published_at": "2024-05-17T14:24:17Z"
        },
        {
          "tag": "v5.4.1",
          "kind": "patch",
          "published_at": "2024-03-28T18:30:25Z"
        },
        {
          "tag": "v5.4.0",
          "kind": "minor",
          "published_at": "2024-03-21T12:49:53Z"
        },
        {
          "tag": "v5.3.5",
          "kind": "patch",
          "published_at": "2024-03-11T13:05:13Z"
        },
        {
          "tag": "v5.3.4",
          "kind": "patch",
          "published_at": "2024-03-08T12:34:25Z"
        },
        {
          "tag": "v5.3.3",
          "kind": "patch",
          "published_at": "2024-02-26T07:41:24Z"
        },
        {
          "tag": "v5.3.2",
          "kind": "patch",
          "published_at": "2024-02-12T14:28:06Z"
        },
        {
          "tag": "v5.3.1",
          "kind": "patch",
          "published_at": "2024-02-06T09:48:38Z"
        },
        {
          "tag": "v5.2.1",
          "kind": "patch",
          "published_at": "2024-01-30T16:16:08Z"
        },
        {
          "tag": "v5.2.0",
          "kind": "minor",
          "published_at": "2023-09-18T07:16:30Z"
        },
        {
          "tag": "v5.1.0",
          "kind": "minor",
          "published_at": "2023-03-28T14:49:50Z"
        },
        {
          "tag": "v5.0.1",
          "kind": "patch",
          "published_at": "2023-01-23T19:00:33Z"
        },
        {
          "tag": "v5.0.0",
          "kind": "major",
          "published_at": "2023-01-19T08:09:16Z"
        },
        {
          "tag": "v5.0.0-alpha-3",
          "kind": "prerelease",
          "published_at": "2023-01-09T15:39:34Z"
        },
        {
          "tag": "v5.0.0-alpha-2",
          "kind": "prerelease",
          "published_at": "2022-12-20T10:30:21Z"
        },
        {
          "tag": "v5.0.0-alpha-1",
          "kind": "prerelease",
          "published_at": "2022-12-14T17:37:13Z"
        },
        {
          "tag": "v4.9.1",
          "kind": "patch",
          "published_at": "2022-11-01T20:14:01Z"
        },
        {
          "tag": "v4.9.0",
          "kind": "minor",
          "published_at": "2022-10-19T19:31:53Z"
        },
        {
          "tag": "v4.8.10",
          "kind": "patch",
          "published_at": "2022-10-05T12:20:18Z"
        },
        {
          "tag": "v4.8.8",
          "kind": "patch",
          "published_at": "2022-04-08T14:30:08Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "324c5dde40f82226b514b9a7824a9b51c7a5c35f",
          "body": "The XSLT Parameter tutorial only showed a static value (library=predic8),\nwhich doesn't motivate why passing exchange properties to a stylesheet is\nuseful. XSLT 1.0 has no date/time or UUID functions, so injecting values the\ngateway computes at request time is a genuinely practical use case.\n\nAdd tw\n[…]\nesheet\ndeclares the matching xsl:params and emits them as attributes, and the\nintegration test asserts both dynamic attributes are well-formed.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Tutorial: demonstrate dynamic XSLT parameters (date, UUID) (#3080)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-22T13:20:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e81ebade8c85770281589c1a5dfb8a1896115e26",
          "body": "Validation errors echo the submitted value (e.g. \"5 is smaller than the\nminimum of 18\"). A new opt-in `maskValues` attribute on <openapi> replaces\nthat value with *** so PII is not leaked.\n\nResponse and log are controlled independently:\n  maskValues: none | response | log | both   (default none, leg\n[…]\nhen a message is\nrendered, so the response body and the server log can diverge (e.g. real value\nin the log for debugging, *** in the response).\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add configurable PII masking for OpenAPI validation values (#3101)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-22T13:19:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cdb5189e5b9f8651856a3071890216e21dfc6c89",
          "body": "The Snyk finding for tar 1.35+dfsg-4ubuntu0.2 (Unrestricted Upload of\nFile with Dangerous Type) originates from the runtime image's Ubuntu\nbase (eclipse-temurin:25-jdk), not from the Maven builder. Ubuntu ships\nthe fix as 1.35+dfsg-4ubuntu0.3 in the security pocket, but the base\nimage had not yet be\n[…]\nsts to keep the image slim.\n\nVerified: after the upgrade tar is 1.35+dfsg-4ubuntu0.3.\n\nAlso bump the Maven builder base image 3.9.12 -> 3.9.16.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Patch OS packages in runtime image to fix tar CVE (#3092)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-20T15:50:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fe646ba0be5abe478479884b3abccaf84a2f1d62",
          "body": "* Updated APIProxy JavaDocs for clarity and added examples\n\n* Clarify target vs OpenAPI servers routing in APIProxy Javadoc\n\nMake the routing precedence explicit: an explicit <target> is used\nfor the backend destination when configured, otherwise Membrane falls\nback to the host from the OpenAPI serv\n[…]\nield. Addresses review\nfeedback on implicit fallback behaviour in PR #3074.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Updated APIProxy JavaDocs (#3074)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-20T15:32:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5fcff01abb94de5497df3467a9a19004f25ce897",
          "body": "Move the \"Trigger website pipeline on GitLab\" step out of the release\nbuild into a standalone reusable workflow that can also be run manually\nwith a version-entry form. release-build.yml now calls it at the end of\na successful release, passing the release version.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Extract GitLab website-pipeline trigger into its own workflow (#3098)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-17T14:51:35Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2266e2001d3acea298d793f59b100aa749b7e2f8",
          "body": null,
          "is_bot": false,
          "headline": "Add OpenAPI rewriting tutorials with tests and configuration (#3094)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-17T12:09:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb4e03800a5ae1dba0f612b4eb0672019f5b30cd",
          "body": "* Add OpenAPI tutorial: validating x-www-form-urlencoded messages\n\nA minimal, self-teaching tutorial under distribution/tutorials/openapi/\nshowing how Membrane validates application/x-www-form-urlencoded request\nbodies against an OpenAPI schema: one valid form post is forwarded, one\nwith a negative \n[…]\ny@anthropic.com>\n\n* Simplify OpenAPI tutorial description in README.\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>\nCo-authored-by: Christian Gördes <christian.goerdes@outlook.de>",
          "is_bot": false,
          "headline": "Add OpenAPI tutorial: validating x-www-form-urlencoded messages (#3095)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-17T12:09:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "191063f70b5f460ed40fb5185745f2621b8dc9e1",
          "body": "… when a custom path is configured. (#3091)",
          "is_bot": false,
          "headline": "Allow `/api-docs` and related paths in `APIProxyKey.matchesPath` even…",
          "author_name": "Christian Gördes",
          "author_login": "christiangoerdes",
          "committed_at": "2026-07-17T08:17:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb7752d5f3914fbd210f33442f3a71ee441bc48a",
          "body": "… (#3088)",
          "is_bot": false,
          "headline": "docs: add CLAUDE.md with development guidelines and project structure…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-17T06:07:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87c0e4be342c5cea9455d1067e544e63cce209aa",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Snapshot version (#3082)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-12T10:22:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec68e488e52cbc107559ce3cda5830fba040055c",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.3.1 (#3081)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-11T06:42:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "383031885f62f385a67f57dc0be8edd17a6eee58",
          "body": "…3079)\n\nBumps [org.apache.activemq:activemq-broker](https://github.com/apache/activemq) from 5.19.6 to 5.19.7.\n- [Release notes](https://github.com/apache/activemq/releases)\n- [Commits](https://github.com/apache/activemq/compare/activemq-5.19.6...activemq-5.19.7)\n\n---\nupdated-dependencies:\n- depende\n[…]\ndency-version: 5.19.7\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps-dev): bump org.apache.activemq:activemq-broker in /core (#…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-11T06:37:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a7dccf8a4fc8503e1af09ceec72dc809308f266",
          "body": "* Introduce hardened XML parsers and validators to mitigate XXE vulnerabilities\n\n* Refactor SAX parser handling to use thread-local factories for improved concurrency and simplify instantiation\n\n* Add explicit guard for ACCESS_EXTERNAL_SCHEMA in HardenedSchemaFactory\n\n* Log detected external DTD sub\n[…]\n* refactor(xml): replace `XMLInputFactoryFactory` with `HardenedStaxInputFactory` for improved security and consistency\n\n* refactor(test): extract `RecordingServerTestUtil` for reusable test utilities",
          "is_bot": false,
          "headline": "Hardened XML parsers and validators (#3072)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-10T16:05:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2e56f9557b1a26cdc84fc80c3692e13b57e66363",
          "body": "…ng instructions (#3077)",
          "is_bot": false,
          "headline": "Update SECURITY.md with new version support and vulnerability reporti…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-10T13:21:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "964ec2fd6ebf9b6b2031581b702859f738cf6027",
          "body": "…oap elements… (#3071)\n\n* fix: resolution of embedded schemas, ns aware filter of soap elements, logging\n\n* fix: enable secure processing for Transformer in SOAPXMLFilterTest",
          "is_bot": false,
          "headline": "WSDL Validation: Resolution of embedded schemas, ns aware filter of s…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-10T10:07:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "617064b07024c669b201c33686958dffa6e3b07c",
          "body": "…ion (#3073)",
          "is_bot": false,
          "headline": "docs: update ROADMAP for Java 25 migration and virtual thread evaluat…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-10T10:02:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c19debd7451a8037cfbc2d51472a911b2cfbd57e",
          "body": "…E (#3075)\n\n* docs: add AI and LLM Gateway section and OpenAPI 3.2 support to README\n\nAdd a new \"AI and LLM Gateway\" section covering the llmGateway plugin\n(provider routing, per-request token limits, and secure API-key sharing\nvia simpleStore) and mcpProtection (allow/deny tool rules), with example\n[…]\nd LLM Gateway\" and \"Support\" to \"Community and Enterprise Support,\" ensuring consistency with anchor links in the table of contents.\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add AI and LLM Gateway section and OpenAPI 3.2 support to READM…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-10T08:51:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "92af82aa8e92ba537498705aa0a5a6c1bf828c47",
          "body": "…Interceptor (#3076)",
          "is_bot": false,
          "headline": "feat: add XSLT parameter tutorial with extended functionality in XSLT…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-10T08:49:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6d92d42968b55ac2ae4c30eb3d39434c3410eb7",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Snapshot version (#3069)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T15:26:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06b4922f28423bc50be7d70a4ce99a9f7e0afb43",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.3.0 (#3068)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T15:15:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e95794dcd4dd1cb98069f27f77fb5490003befd",
          "body": null,
          "is_bot": false,
          "headline": "fix: update release workflow permissions and schema version (#3067)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T15:09:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da4619c49d2ada109db29fa3def74189a4c2e417",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.3.0 (#3065)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T14:54:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d82e67ccef619c611f03bc04c7a725d041d695f",
          "body": null,
          "is_bot": false,
          "headline": "chore: update actions and API schema version (#3064)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T14:45:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4f23c4536ece081f4e63f9abdde721d14b216f3",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.3.0 (#3062)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T14:38:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8db0f309f6ac4602f7e415323c7ac54dfa7e60db",
          "body": null,
          "is_bot": false,
          "headline": "chore(ci): downgrade actions/checkout to v6 in release workflow (#3061)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T14:23:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68de7da1b0e0f597d3e61d81075d4cd2b896c630",
          "body": null,
          "is_bot": false,
          "headline": "chore(ci): downgrade actions/checkout to v6 in release workflow (#3060)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T13:59:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8e0d88123608bde0b3c58ed766fed7f44ef30b8",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.3.0 (#3058)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T13:30:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df8602f792ca5a39949abd39c8f90cccdd50325c",
          "body": "* fix: update workflow credentials and API schema rollback\n\n* fix: add comment for persist-credentials in release-build workflow",
          "is_bot": false,
          "headline": "Dirty creds 3 (#3057)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T13:25:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8421fa64661dd7bfb64b0b188e372eec145d3c63",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.3.0 (#3055)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T13:04:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "58fb8bd1cc298f110d2334b669f634f2debeddcf",
          "body": null,
          "is_bot": false,
          "headline": "fix: update release workflow and API schema (#3054)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T12:51:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "325a3ab7231e6646bd73dbf309b99b363d80bedf",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.3.0 (#3052)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T12:32:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36dea9a4058d98a6aa66e077e8ee5df026af405e",
          "body": "* fix(workflows): ensure credentials persist for git operations\n\n* chore(workflows): upgrade action to v8 and update API schema version rollback",
          "is_bot": false,
          "headline": "Dirty for pr (#3051)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T12:29:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15df199852a02612676efad0f4963dacc5cd2dbe",
          "body": null,
          "is_bot": false,
          "headline": "fix(workflows): ensure credentials persist for git operations (#3050)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T12:10:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e69d926cfca2253e95193042d8c9c8e70c4f77a6",
          "body": null,
          "is_bot": false,
          "headline": "Use decoded body streams for all relevant interceptors. (#3049)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T11:33:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "589d884d2aa3a22c7b69f7a49de8bbc814dafe66",
          "body": "* chore(workflows): update `actions/checkout` to v7\n\n* docs(release): add release notes for v7.3.0\n\n* chore(workflows): disable credential persistence in `actions/checkout` steps\n\n* chore(workflows): disable credential persistence in `actions/checkout` for release-build\n\n* chore(workflows): disable credential persistence in `actions/checkout` for release-pr and docker-publish",
          "is_bot": false,
          "headline": "Credential Cache Fix (#3048)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T11:29:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0575d3f19c116add41382143b9ff5e028c63f8bb",
          "body": "* chore(workflows): update `actions/checkout` to v7\n\n* docs(release): add release notes for v7.3.0",
          "is_bot": false,
          "headline": "GitHub action checkout update - Release notes for Plugin (#3047)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-07T08:35:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ad4411d18f2fb89fea26cd911c399c46e02ec80",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.3.0 (#3045)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T08:07:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c5039850acf831801ee08f4f35ada6c27b04635d",
          "body": "…(#3044)\n\nRFC 9113 4.1 requires frames of unknown type to be ignored and discarded.\nThe previous default case threw an uncaught NotImplementedException, tearing\ndown the connection when a peer sent any extension/GREASE frame. Frame.read()\nalready consumes the payload, so unknown frames can simply be dropped.\n\nPUSH_PROMISE is now handled explicitly as a PROTOCOL_ERROR connection error\n(RFC 9113 6.6): a server must never receive it, and we never enable push.",
          "is_bot": false,
          "headline": "HTTP/2: ignore unknown frame types instead of killing the connection …",
          "author_name": "Tobias Polley",
          "author_login": "rrayst",
          "committed_at": "2026-07-07T07:52:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "295df0e945741b1eb31f1b43cd218535a8bc45dd",
          "body": "* fix: duplicate 'Content-Length' should return an error\n\n* fix: escape message\n\n* feat: switch response to problem/json\n\n* refactor: simplify Content-Length digit check\n\nUse chars().allMatch(...) instead of an explicit loop, as suggested in\nreview.\n\n* fix: reject backend response with invalid frami\n[…]\nields 502\n\nRoutes a request through a router to a raw backend that returns two\nconflicting Content-Length headers, asserting the client receives a\n502 Bad Gateway rather than the previous generic 500.",
          "is_bot": false,
          "headline": "fix: duplicate 'Content-Length' should return an error (#3039)",
          "author_name": "Tobias Polley",
          "author_login": "rrayst",
          "committed_at": "2026-07-06T19:48:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "25f6e61fe64f790cd0a1b897fcca3e48d59b8f52",
          "body": "…xt (#3041) (#3042)\n\nMany ConfigurationParsingException throw sites (SpelEvaluator, ObjectBinder,\nCollectionBinder, ...) never set a ParsingContext. getFormattedReport() then\ndereferenced a null context and threw a NullPointerException, which escaped the\ncatch block in RouterCLI and replaced the rea\n[…]\n() now returns an empty report when no context (or node) is\navailable, and RouterCLI renders the highlighted YAML on a best-effort basis so\na rendering failure can never mask the actual error message.",
          "is_bot": false,
          "headline": "fix: avoid NPE when rendering YAML error report without parsing conte…",
          "author_name": "Tobias Polley",
          "author_login": "rrayst",
          "committed_at": "2026-07-06T19:47:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3791f53ddf6899ba555f450d6e316e2c62a4782a",
          "body": "* update ROADMAP.md\n\n* update ROADMAP.md",
          "is_bot": false,
          "headline": "update ROADMAP.md (#3040)",
          "author_name": "Christian Gördes",
          "author_login": "christiangoerdes",
          "committed_at": "2026-07-06T09:43:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9cf73e10f5ce3f0cbf3c84da325e392574e1534",
          "body": "…ractLanguageInterceptor (#3035)\n\n* Improve reference docs for setHeader and its base classes\n\n- SetHeaderInterceptor: add @topic, rewrite @description (constant vs computed,\n  supported languages, tutorial link), fix @yaml to use api:/flow: context and\n  show both a static and a computed (${method}\n[…]\nion\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n* Update @description for failOnError in AbstractSetterInterceptor\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Improve reference docs for setHeader, AbstractSetterInterceptor, Abst…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-05T18:08:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "59bf3f27f0df9e44f2ce0a11e361e6455daf134f",
          "body": "Rewrite @description: drop <p> wrappers, make first sentence stand alone,\nadd internal:// URL scheme mention and use-case. Add @yaml showing the\nshared-auth pattern — internal: validates and injects a downstream X-Api-Key\nthen routes to the real service, with two api: elements on different ports\nboth delegating to it via internal://shared-auth.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Improve reference docs for InternalProxy (#3037)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-04T13:24:42Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "449af21d0fb7b74fc70233c0d78b6a0e485a1063",
          "body": "* Updated SOAPProxy documentation and annotations\n\n* Updated ServiceProxy and Target documentation and examples",
          "is_bot": false,
          "headline": "Updated SOAPProxy documentation and annotations (#3038)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-04T13:19:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f21bda4b1bb607290805256678cc1837e3f8e6c3",
          "body": "- SetBodyInterceptor: add @topic, rewrite @description (trim attribute-level\n  prose, mention template alternative, add tutorial link), add @yaml with a\n  3-line block scalar value example; rewrite setValue setter doc replacing the\n  dropped @param with @description/@example; expand setContentType t\n[…]\nnterceptor: fix @description on setLanguage (copy-paste from\n  <if>); replace @param on setXmlConfig with @description (mirrors setHeader PR)\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Improve reference docs for setBody (#3036)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-04T13:14:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f4a4b40a188a90f162bb16a29f0b2ebda8ca468c",
          "body": "* Revised APIProxy documentation and OpenAPI example paths\n\n* Update APIProxy documentation: correct OpenAPI path to `/api-docs`",
          "is_bot": false,
          "headline": "Docs: APIProxy (#3034)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-04T13:08:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb2499e62c0d4946bfca87ad918f46a44fab31dd",
          "body": "* Add SQL injection protection tutorial and detection rules\n\n* Improve SQLi detection rules and update handling logic\n\n* Update SQLi protection: use `ConfigurationException`, improve docs, and refine tests\n\n* Enhance SQL injection protection documentation and roadmap\n\n* Refactor SQLi protection code\n[…]\nability, add nullability annotations, and enhance docs\n\n* Update NOTICE and LICENSE to include OWASP Core Rule Set (CRS) details\n\n* Add comprehensive tests for SQL injection rules and payload handling",
          "is_bot": false,
          "headline": "SQL Injection Protection (#3031)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-04T13:06:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f7204468f289341a32b28546f44413a53b9f53fe",
          "body": "* Add JWT authentication tutorials and tests\n\n* Add OAuth2 Client Token Renewal tutorial and test\n\n* Add missing copyright headers to source files\n\n* Add token expiration and renewal handling to OAuth2 tutorial and test\n\n* Fix flow structure in OAuth2 Client Token Renewal tutorial\n\n* Update OAuth2AP\n[…]\nthored-by: Christian Gördes <118011644+christiangoerdes@users.noreply.github.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>\nCo-authored-by: Christian Gördes <christian.goerdes@outlook.de>",
          "is_bot": false,
          "headline": "Tutorials: OAuth2 (#3020)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-04T13:05:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b71f1fc4c0d80c70e0ad3112ac71f4c055c5ade3",
          "body": "* feat: add HTTP method validation with configurable policies\n\n* fix: initialize default MethodValidator correctly in Transport\n\n* feat: implement DefaultMethodValidator and enhance HTTP method validation\n\n* test: add unit tests for DefaultMethodValidator end-to-end validation\n\n* docs: update RELEASE_NOTES for HTTP method validation in v7.3.0\n\n* refactor: restructure method validation package and update examples\n\n* test: update and expand HTTP method validation test cases",
          "is_bot": false,
          "headline": "HTTP Method Validation (#3032)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-03T15:13:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad3142e9688f113f1a7204bb1ca5edf9d68b701e",
          "body": "* feat: add API key security tutorials and tests\n\nAdded comprehensive tutorials covering API Key Authentication, RBAC, OpenAPI integration, JDBC, and MongoDB key stores. Included corresponding test suites to validate behavior.\n\n* test: add test case for valid API key in ApiKeyOpenApiTutorialTest\n\n* \n[…]\nialTest and update related tutorial files\n\nAdded a test for the JDBC API Key Store tutorial, switching from PostgreSQL to H2 for embedded testing. Adjusted related tutorial file names for consistency.",
          "is_bot": false,
          "headline": "Tutorial: API Keys (#3019)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-07-01T16:44:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d3b0ea47f2c3a727a6a4b209b913bcfa9dad5510",
          "body": "* init\n\n* Implement JSON-RPC request validation with rules and batch support\n\n* Add unit tests for JsonRPCProtectionInterceptor\n\n* Refactor JSON-RPC validation logic into JsonRPCValidator for improved modularity and reusability\n\n* Add JSON-RPC parameter schema validation with unit tests\n\n* Support J\n[…]\ntests, and apply minor code cleanup.\n\n* Add tests for `ScalarValueConverter`, document methods, and improve code readability with inline comments.\n\n---------\n\nCo-authored-by: thomas <bayer@predic8.de>",
          "is_bot": false,
          "headline": "add McpProtection plugin (#2977)",
          "author_name": "Christian Gördes",
          "author_login": "christiangoerdes",
          "committed_at": "2026-07-01T15:24:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "425506d74115b863207516dad0960e3fe75c9a05",
          "body": "* Add support for YAML hot deployment and configuration reloading\n\n* Log proxy info and startup details after YAML reload\n\n* Ensure thread-safety for YAML configuration methods in DefaultRouter\n\n* Add robust error handling and recovery for YAML configuration reloads\n\n* Ensure thread-safety for reset\n[…]\nth improved error handling, runtime recovery, and test coverage.\n\n* Improve YAML hot deployment thread behavior and add reload success test.\n\n---------\n\nCo-authored-by: Thomas Bayer <bayer@predic8.de>",
          "is_bot": false,
          "headline": "Add support for YAML hot deployment and configuration reloading (#2959)",
          "author_name": "Christian Gördes",
          "author_login": "christiangoerdes",
          "committed_at": "2026-07-01T15:21:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "15f3efc9ba8c33b112ad889ecc4222b860ed564f",
          "body": "* refactor: improve JWT error handling and logging\n\n* fix(logging): use placeholder syntax for JWT error messages\n\n* refactor(jwt): rename constant for invalid signature error\n\n* Update tests to reflect correct HTTP 401 status and error messages for JWT validation\n\n* adjust tests\n\n---------\n\nCo-authored-by: Tobias Polley <polley@predic8.de>\nCo-authored-by: Christian Gördes <118011644+christiangoerdes@users.noreply.github.com>\nCo-authored-by: Christian Gördes <christian.goerdes@outlook.de>",
          "is_bot": false,
          "headline": "Improve JWT error handling and logging (#2970)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-30T15:13:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7eced1910f4a51aea18b702907e19f1953e88dbe",
          "body": "* init\n\n* Implement JSON-RPC request validation with rules and batch support\n\n* Add unit tests for JsonRPCProtectionInterceptor\n\n* Refactor JSON-RPC validation logic into JsonRPCValidator for improved modularity and reusability\n\n* Add JSON-RPC parameter schema validation with unit tests\n\n* Support J\n[…]\nStart` logic, and add unit test.\n\n* Add comprehensive tests for JSONPath segment parsing logic in LineYamlErrorRenderer and improve error handling\n\n---------\n\nCo-authored-by: thomas <bayer@predic8.de>",
          "is_bot": false,
          "headline": "add JsonRPCProtection plugin (#2963)",
          "author_name": "Christian Gördes",
          "author_login": "christiangoerdes",
          "committed_at": "2026-06-30T10:01:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "508600f7de1d2845acf94e90d55d7bbc19caf55a",
          "body": "* Enable debug logging for Maven deploy in GitHub Actions workflow\n\n* Enable debug logging for Maven deploy in GitHub Actions workflow\n\n* Handle missing expiry date in GPG key check within Maven publish workflow\n\n* Fix regex for GPG key expiry date check in Maven publish workflow\n\n* Simplify GPG expiry date parsing in Maven publish workflow\n\n---------\n\nCo-authored-by: thomas <bayer@predic8.de>",
          "is_bot": false,
          "headline": "Maven central deploy gpg expires (#3030)",
          "author_name": "Christian Gördes",
          "author_login": "christiangoerdes",
          "committed_at": "2026-06-30T09:46:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9ba427c61d907b2ee8b8873c0aa6f7f14c8827f",
          "body": "* Enable debug logging for Maven deploy in GitHub Actions workflow\n\n* Enable debug logging for Maven deploy in GitHub Actions workflow\n\n* Handle missing expiry date in GPG key check within Maven publish workflow",
          "is_bot": false,
          "headline": "Maven central deploy gpg expires (#3029)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-30T09:41:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90bd962527e1bcede11e28e8f62ef360fa07cdeb",
          "body": null,
          "is_bot": false,
          "headline": "Extend `JAVA_OPTS` with XML entity size limits. (#3027)",
          "author_name": "Christian Gördes",
          "author_login": "christiangoerdes",
          "committed_at": "2026-06-30T07:24:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76a3860e658623a58602fc7dc4a9ba11557802e1",
          "body": "Co-authored-by: Christian Gördes <118011644+christiangoerdes@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: avoid flaky test (#3018)",
          "author_name": "Tobias Polley",
          "author_login": "rrayst",
          "committed_at": "2026-06-29T13:58:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2935d237338c529db93b9d95404e469097b7768a",
          "body": "* Add JWT authentication tutorials and tests\n\n* Remove JWT-specific scripts and restructure security tutorials\n\n* Use public JWK for JWT validation in security tutorial",
          "is_bot": false,
          "headline": "Tutorials: JWT authentication (#3021)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-28T18:15:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "881eb66c9252fa1b3bd75c2e3dfc1246b296e28f",
          "body": "* Add \"Include\" tutorial with config splitting and tests\n\n* Update \"Include\" tutorial to include gateway header in 404 response",
          "is_bot": false,
          "headline": "Tutorial: Include (#3025)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-28T13:58:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8bb82850adf81daaea75faf0177c0fbf24cd912",
          "body": "… configuration examples (#3024)",
          "is_bot": false,
          "headline": "docs: enhance PrometheusInterceptor JavaDoc with detailed metrics and…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-28T13:34:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6256b0c9fd45f5086b069b4c7ba6e19b2ed8c58",
          "body": "* Add Prometheus metrics tutorial with configuration and tests\n\n* Add Grafana metrics tutorial with dashboard and tests\n\n* Update Prometheus tutorial: adjust endpoint, add Docker host config, and set Prometheus UID",
          "is_bot": false,
          "headline": "Tutorial: Prometheus (#3023)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-28T13:34:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e19a7d0e6fc548cdd04ed7bf16135615c6b4bc4f",
          "body": "* Add OpenTelemetry tutorial and enhance related documentation\n\n* Enhance OpenTelemetry tutorial tests and fix OTLP exporter path handling",
          "is_bot": false,
          "headline": "Tutorials: OpenTelemetry (#3022)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-28T13:33:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d7e3dfa92cbd1b5f61b1dab3cd2bb5d95997b748",
          "body": "…006)",
          "is_bot": false,
          "headline": "feat: add validation for non-integer values in integer properties (#3…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-27T05:40:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14832e2233502e5a86f83974a60c99fd1d567e0c",
          "body": "* feat: add AI API usage tracking and management components\n\n* feat: implement OpenAI API interceptor with usage tracking and token limits\n\n* feat: improve concurrency for API rate limits and enhance error handling\n\n- Introduced thread-safe `AtomicLong` for token management.\n- Synchronized reset log\n[…]\nh various `Transfer-Encoding` values.\n\n---------\n\nCo-authored-by: Christian Gördes <christian.goerdes@outlook.de>\nCo-authored-by: Christian Gördes <118011644+christiangoerdes@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Ai gateway: More Features (#2965)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-27T05:33:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "487106321f580db2213e75c398211a99001591f4",
          "body": "* feat: add OpenAPI 3.2 validation support and examples\n\n* feat: add OpenAPI 3.2 `xml.nodeType` support with tests and examples\n\n* docs: remove outdated explanation from OpenAPI 3.2 validation example README\n\n* refactor: restructure OpenAPI 3.2 examples into tutorials with updated configurations and tests\n\n* feat: add base64url support for encoded content in OpenAPI 3.2 validation",
          "is_bot": false,
          "headline": "Openapi 3.2 Support (#3007)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-27T05:32:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7c69fd4a9ffeb58d00b39c824302b99e275588c6",
          "body": "* Ensure CRLF for Windows command files\n\n* Set CRLF for Windows command files in .gitattributes",
          "is_bot": false,
          "headline": "CRLF for Windows Scripts (#3008)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-27T05:18:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e3ceea6249d98256af1001b3c24d2f0ca67715e",
          "body": "* Improve README: update performance benchmarks, add tech talk schedule, and enhance feature list\n\n* Fix README: remove duplicate AI Gateway section",
          "is_bot": false,
          "headline": "README.md: Update tech talk schedule… (#3009)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-27T05:17:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5213f659639a790fcc0e11d6dba66dfc2aef5fb",
          "body": null,
          "is_bot": false,
          "headline": "fix: upgrade jackson to 2.21.4 (#3012)",
          "author_name": "Tobias Polley",
          "author_login": "rrayst",
          "committed_at": "2026-06-26T13:37:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efc4c254d1dad66b29ef8578f512a09a7275acb5",
          "body": "The following vulnerabilities are fixed with an upgrade:\n- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-17440598\n\nCo-authored-by: snyk-bot <snyk-bot@snyk.io>",
          "is_bot": false,
          "headline": "fix: pom.xml to reduce vulnerabilities (#3003)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-26T12:32:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f22ffdc1eb74114a2aa74471f20b8d6f36e371e2",
          "body": null,
          "is_bot": false,
          "headline": "Handle ConfigurationException during validator initialization (#3005)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-26T08:34:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78d4e6312ce6a9f9cfc4bb6aef64736f1f054e5b",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Snapshot version (#3004)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T17:51:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a37283de2a5b21129488f2d37d46854832d5f6a",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.2.4 (#3002)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T11:58:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e9d51f2212c3e089b29b86e32507443ec68d2bc",
          "body": "* Add CorrelationId functionality with examples and tests\n\n* Sanitize and truncate CorrelationId headers to prevent log injection and excessive length\n\n* Remove outdated Java code conventions document\n\n---------\n\nCo-authored-by: Tobias Polley <polley@predic8.de>",
          "is_bot": false,
          "headline": "Add CorrelationId functionality with examples and tests (#2987)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-24T14:58:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b76abfb39843ff162260d5eaaa019426168c579b",
          "body": "* Optimized javadoc interceptor descriptions\n\n* Fixed concurrency: max was not a hard limit\n\n* Space in description fixed\n\n* Fixed counting in ByThreadStrategy\n\n* Fixed exception message\n\n* Updated Javadoc: corrected `stores` cardinality in ApiKeysInterceptor",
          "is_bot": false,
          "headline": "Optimized javadoc interceptor descriptions (#2990)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-24T14:58:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f895ed8aea56be2d5e88e570f16851cd7ec7546e",
          "body": "* Add unit tests for ResolverMap.combine and refactor scheme handling\n\n* Add unit tests for ResolverMap.hasScheme and adjust visibility\n\n---------\n\nCo-authored-by: Tobias Polley <polley@predic8.de>",
          "is_bot": false,
          "headline": "ResolverMap.combine: Fix combine for paths linek ?foo=http:// (#2997)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-24T14:57:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ad3e7a057c213ff1753689635b24a0a639632e0",
          "body": "…lated tests (#3001)",
          "is_bot": false,
          "headline": "Refactored `isObjectOrArray` to resolve `$ref` schemas and updated re…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-24T10:59:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "096ce1abfbb410bad22de0876c49258f78d8f4d3",
          "body": "…alidation (#3000)",
          "is_bot": false,
          "headline": "Removed tests for unimplemented `application/x-www-form-urlencoded` v…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-24T06:59:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f559c4e79bf5992f7134a62505a9aedbbdb01688",
          "body": "* ForInterceptor: support use in response flow (#2988)\n\nThe <for> interceptor only invoked its nested flow in the request flow\n(guarded by flow.isRequest()), so in the response flow nothing ran.\n\nDispatch to invokeRequestHandlers/invokeResponseHandlers based on the\ncurrent flow, mirroring the patter\n[…]\n non-CONTINUE outcomes and propagate result\n\n* Refactor tests: simplify by consolidating OutcomeInterceptor into CountingInterceptor\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ForInterceptor: support use in response flow (#2988) (#2995)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-24T06:46:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e5d4037b841b08d9b52e0d915a283c9e80cc6971",
          "body": "…ptor (#2996)",
          "is_bot": false,
          "headline": "feat: allow explicit Content-Type override in SoapBodyTemplateInterce…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-23T19:14:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9cf936e2e4f8627ace96b42f754b1cda9f24d2c2",
          "body": "* feat: add support for validating 'application/x-www-form-urlencoded' request bodies\n\n* fix: replace `get(0)` with `getFirst()` in FormUrlEncodedValidator\n\n* test: add unit tests for `SchemaUtil` methods `isObjectOrArray` and `getEffectiveType`\n\n* feat: enhance form-urlencoded validation with schem\n[…]\nhemas in `application/x-www-form-urlencoded`.\n- Introduced validation for inline schemas.\n- Added new unit tests to verify `minLength` constraints and required fields in referenced and inline schemas.",
          "is_bot": false,
          "headline": "Openapi Validator for form url encoded (#2985)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-23T18:46:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "13dc4dd992836fac799faa5134fac35092d01014",
          "body": null,
          "is_bot": false,
          "headline": "chore: update .gitignore to exclude .claude (#2999)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-23T14:29:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "998b44d42d934286c1e589f35d0195cddc5c8f87",
          "body": "* Add support for multipart/form-data validation\n\n* Add tests for multipart/form-data validation and encoding scenarios\n\n* Refactor: centralize schema handling logic in `SchemaUtil` and clean up `MultipartFormDataValidator`\n\n* feat: improve validation for multipart content-type and encoding mismatch\n[…]\n matching media types against multiple expected types.\n- Updated test resources and references to align with the new spec file naming conventions.\n\n* Resolving of refs\n\n* Array restrictions\n\n* Samples",
          "is_bot": false,
          "headline": "OpenAPI: multipart Validation (#2980)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-21T13:56:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "69c1d53abfce7ffb0783708f9ab24e10e08c06d0",
          "body": "* feat(xml-validation): add tests and functionality for XML request/response validation\n\n* refactor(core): simplify generics and XML element creation logic\n\n* feat(xml-parsing): improve XML parsing with hardened parser and enhance error handling\n\nReplaced `DocumentBuilderFactory` with `HardenedXmlPa\n[…]\nuring JSON conversion\n\nEnsured present-but-empty XML attributes are retained as empty strings in JSON, distinguishing them from absent attributes. Added new schema and test cases to validate behavior.",
          "is_bot": false,
          "headline": "Openapi: Validation for XML (#2976)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-20T15:09:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6197413ade43e98d27c4394db544a07a27551732",
          "body": "* refactor(jwt): extract signature creation logic and add property support for signed JWT\n\n* refactor(jwt): use US_ASCII for JWT body content encoding",
          "is_bot": false,
          "headline": "jwtSigner: Store JWT in body or property (#2986)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-19T10:28:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c63fab0388e989613a3e3365cb73e1f49d70dfef",
          "body": "Log validation errors with method, URI, and API title when OpenAPI validation fails for requests and responses. This improves debugging by providing context about which endpoint and API specification caused the validation failure.",
          "is_bot": false,
          "headline": "Add logging for OpenAPI request and response validation failures (#2982)",
          "author_name": "t-burch",
          "author_login": "t-burch",
          "committed_at": "2026-06-17T10:55:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "407eef1956a45d6d2b2bcd9ef42b033fe3af59c9",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Snapshot version (#2975)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-10T16:13:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "50061b3a864bbbbd1c36094adfdd2e8b6e37ec49",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.2.3 (#2974)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-10T13:11:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43fb5859f2820c0a22b986965b6867b97c60996e",
          "body": "The following vulnerabilities are fixed with an upgrade:\n- https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-17253311\n\nCo-authored-by: snyk-bot <snyk-bot@snyk.io>",
          "is_bot": false,
          "headline": "fix: pom.xml to reduce vulnerabilities (#2973)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-09T15:20:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d5ba7e9886e8712b1a0c6340c03852424e38d51",
          "body": "…#2971)\n\n* Add MDC support for `traceId` and `spanId` in OpenTelemetry logging\n\n* Update OpenTelemetry README example with revised MDC log context",
          "is_bot": false,
          "headline": "Add MDC support for `traceId` and `spanId` in OpenTelemetry logging (…",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-09T15:17:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f9ee53752631523f89729e90eeebd6df1b33d94",
          "body": null,
          "is_bot": false,
          "headline": "build: update OpenTelemetry BOM to version 1.63.0 (#2972)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-09T15:16:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b1c42b22964ee589c829d197033162dc66446896",
          "body": "* Add OAuth2ClientInterceptor to handle client credentials flow\n\n* Implement access token caching in OAuth2ClientInterceptor to reduce redundant token requests\n\n* Simplify error detail message in OAuth2ClientInterceptor for token retrieval failure\n\n* Encode client credentials in OAuth2ClientIntercep\n[…]\nAdjust logging level for failed OAuth2 token retrieval and use constant for `Authorization` header key\n\n* Simplify exception message formatting in `OAuth2ClientInterceptor` for token retrieval failure",
          "is_bot": false,
          "headline": "Add OAuth2ClientInterceptor to handle client credentials flow (#2969)",
          "author_name": "Christian Gördes",
          "author_login": "christiangoerdes",
          "committed_at": "2026-06-09T07:38:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ccef747867781fb4b37b33c89597a171a28dcb63",
          "body": "* feat: add limits to chunked body parsing to prevent OOM errors\n\n* feat: add exhaustive tests and constants for chunked body size validation",
          "is_bot": false,
          "headline": "Add limits to chunked body parsing to prevent OOM errors (#2964)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-06-02T13:26:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb22179e2ca17bcdde095f574d65615f7d7c8f9a",
          "body": "…ext` for string conversion (#2967)\n\n* Update XPath expression to ensure string conversion for `id` header\n\n* Refactor `headerValueEncode` to use `toText` for string conversion and simplify XPath in proxies.xml",
          "is_bot": false,
          "headline": "fix `NamespacesExampleTest`: Refactor `headerValueEncode` to use `toT…",
          "author_name": "Christian Gördes",
          "author_login": "christiangoerdes",
          "committed_at": "2026-06-01T09:56:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3a07381d7091ec3e10b779d124d038f70491527",
          "body": null,
          "is_bot": false,
          "headline": "Fix `SessionManagerTest`: ensure router is stopped after test (#2968)",
          "author_name": "Christian Gördes",
          "author_login": "christiangoerdes",
          "committed_at": "2026-06-01T09:55:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c74ea86bae30e3c24d527e9a51d0ca7a37f7cade",
          "body": "* Fix possible desync caused by case-sensitive comparison for Transfer-Encoding header\n\n* Add validation to prevent HTTP header injection attacks\n\nImplement control character validation (CR, LF, NUL) in `HeaderField` setters to prevent HTTP header injection. Update constructors to use validated sett\n[…]\n to verify that control characters (CR, LF, NUL) are escaped rather than rejected. Replace `assertThrows` assertions with `assertEquals` checks confirming values are sanitized with backslash escaping.",
          "is_bot": false,
          "headline": "Security fixes (#2962)",
          "author_name": "t-burch",
          "author_login": "t-burch",
          "committed_at": "2026-05-28T12:52:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "537418e7ea48933f28feab94fc2f089593661350",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Snapshot version (#2961)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-27T15:24:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1782862a4ad1d81aa0c281f1569939dcf28285e0",
          "body": "Co-authored-by: github-actions <github-actions@github.com>",
          "is_bot": true,
          "headline": "Release 7.2.2 (#2960)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-27T15:17:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8a9ca31c4d04968e92c0b42e3db4dd6a81f330d",
          "body": "* feat: add AI API usage tracking and management components\n\n* feat: implement OpenAI API interceptor with usage tracking and token limits\n\n* feat: improve concurrency for API rate limits and enhance error handling\n\n- Introduced thread-safe `AtomicLong` for token management.\n- Synchronized reset log\n[…]\nalidate new `SystemPrompt` behaviors.\n\n---------\n\nCo-authored-by: Christian Gördes <christian.goerdes@outlook.de>\nCo-authored-by: Christian Gördes <118011644+christiangoerdes@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Ai gateway (#2937)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-05-27T14:47:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2f20108372714bb638f1a86a338f06b9afb52fb6",
          "body": "* Improve error handling and status code consistency across interceptors and tests\n\n* Remove redundant `final` modifier from static methods in tests\n\n* Add request-response flow handling to correct status code logic\n\n* Sync HTTP status code with ProblemDetails body\n\nExtract effective status code to ensure consistency between HTTP response status and the `status` field in the ProblemDetails body.\n\n---------\n\nCo-authored-by: t-burch <119930761+t-burch@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Status code change in response from 4XX to 500 (#2949)",
          "author_name": "Thomas Bayer",
          "author_login": "predic8",
          "committed_at": "2026-05-27T13:56:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 100,
      "commits_last_year": 755,
      "latest_release_at": "2026-07-13T16:11:03Z",
      "latest_release_tag": "v6.5.4",
      "releases_from_tags": false,
      "days_since_last_push": 1,
      "active_weeks_last_year": 52,
      "days_since_latest_release": 10,
      "mean_days_between_releases": 10
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "org.membrane-soa:service-proxy-war",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/org.membrane-soa/service-proxy-war",
          "is_deprecated": false,
          "latest_version": "7.3.1",
          "repository_url": null,
          "versions_count": 77,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-13T21:11:18Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "org.membrane-soa:service-proxy-core",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/org.membrane-soa/service-proxy-core",
          "is_deprecated": false,
          "latest_version": "7.3.1",
          "repository_url": null,
          "versions_count": 77,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-13T21:11:27Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "org.membrane-soa:service-proxy-annot",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/org.membrane-soa/service-proxy-annot",
          "is_deprecated": false,
          "latest_version": "7.3.1",
          "repository_url": null,
          "versions_count": 78,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-13T21:11:20Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "org.membrane-soa:membrane-api-gateway",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/org.membrane-soa/membrane-api-gateway",
          "is_deprecated": false,
          "latest_version": "7.3.1",
          "repository_url": null,
          "versions_count": 43,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-13T21:11:19Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        }
      ]
    },
    "popularity": {
      "forks": 172,
      "stars": 624,
      "watchers": 42,
      "fork_history": {
        "days": [
          {
            "date": "2013-10-24",
            "count": 1
          },
          {
            "date": "2013-12-03",
            "count": 1
          },
          {
            "date": "2014-01-31",
            "count": 1
          },
          {
            "date": "2014-09-25",
            "count": 1
          },
          {
            "date": "2014-12-01",
            "count": 1
          },
          {
            "date": "2015-02-07",
            "count": 1
          },
          {
            "date": "2015-03-06",
            "count": 1
          },
          {
            "date": "2015-04-19",
            "count": 1
          },
          {
            "date": "2015-05-21",
            "count": 1
          },
          {
            "date": "2015-05-22",
            "count": 1
          },
          {
            "date": "2015-06-16",
            "count": 1
          },
          {
            "date": "2015-08-03",
            "count": 2
          },
          {
            "date": "2015-09-20",
            "count": 1
          },
          {
            "date": "2015-10-09",
            "count": 1
          },
          {
            "date": "2015-12-04",
            "count": 1
          },
          {
            "date": "2015-12-07",
            "count": 1
          },
          {
            "date": "2015-12-30",
            "count": 1
          },
          {
            "date": "2016-01-27",
            "count": 1
          },
          {
            "date": "2016-02-24",
            "count": 1
          },
          {
            "date": "2016-03-03",
            "count": 1
          },
          {
            "date": "2016-04-09",
            "count": 1
          },
          {
            "date": "2016-04-10",
            "count": 1
          },
          {
            "date": "2016-04-20",
            "count": 1
          },
          {
            "date": "2016-05-22",
            "count": 1
          },
          {
            "date": "2016-06-29",
            "count": 1
          },
          {
            "date": "2016-07-08",
            "count": 1
          },
          {
            "date": "2016-07-20",
            "count": 1
          },
          {
            "date": "2016-07-28",
            "count": 1
          },
          {
            "date": "2016-08-04",
            "count": 1
          },
          {
            "date": "2016-08-11",
            "count": 1
          },
          {
            "date": "2016-08-17",
            "count": 1
          },
          {
            "date": "2016-08-22",
            "count": 1
          },
          {
            "date": "2016-10-09",
            "count": 1
          },
          {
            "date": "2016-10-17",
            "count": 1
          },
          {
            "date": "2016-11-10",
            "count": 1
          },
          {
            "date": "2016-11-11",
            "count": 1
          },
          {
            "date": "2016-11-15",
            "count": 1
          },
          {
            "date": "2016-11-16",
            "count": 1
          },
          {
            "date": "2016-11-29",
            "count": 1
          },
          {
            "date": "2016-12-04",
            "count": 1
          },
          {
            "date": "2016-12-09",
            "count": 1
          },
          {
            "date": "2017-04-07",
            "count": 1
          },
          {
            "date": "2017-05-27",
            "count": 1
          },
          {
            "date": "2017-06-05",
            "count": 1
          },
          {
            "date": "2017-06-25",
            "count": 1
          },
          {
            "date": "2017-07-01",
            "count": 1
          },
          {
            "date": "2017-09-02",
            "count": 1
          },
          {
            "date": "2017-10-03",
            "count": 1
          },
          {
            "date": "2017-10-10",
            "count": 2
          },
          {
            "date": "2017-11-08",
            "count": 1
          },
          {
            "date": "2017-11-13",
            "count": 1
          },
          {
            "date": "2017-12-05",
            "count": 1
          },
          {
            "date": "2017-12-07",
            "count": 1
          },
          {
            "date": "2017-12-13",
            "count": 1
          },
          {
            "date": "2017-12-19",
            "count": 1
          },
          {
            "date": "2018-01-22",
            "count": 1
          },
          {
            "date": "2018-01-25",
            "count": 1
          },
          {
            "date": "2018-01-31",
            "count": 1
          },
          {
            "date": "2018-03-05",
            "count": 1
          },
          {
            "date": "2018-03-29",
            "count": 1
          },
          {
            "date": "2018-05-17",
            "count": 1
          },
          {
            "date": "2018-05-21",
            "count": 1
          },
          {
            "date": "2018-06-06",
            "count": 1
          },
          {
            "date": "2018-06-15",
            "count": 1
          },
          {
            "date": "2018-06-29",
            "count": 1
          },
          {
            "date": "2018-07-22",
            "count": 1
          },
          {
            "date": "2018-08-26",
            "count": 1
          },
          {
            "date": "2018-10-04",
            "count": 1
          },
          {
            "date": "2018-10-22",
            "count": 1
          },
          {
            "date": "2018-11-10",
            "count": 1
          },
          {
            "date": "2019-01-03",
            "count": 1
          },
          {
            "date": "2019-01-10",
            "count": 1
          },
          {
            "date": "2019-02-25",
            "count": 1
          },
          {
            "date": "2019-03-06",
            "count": 1
          },
          {
            "date": "2019-03-22",
            "count": 1
          },
          {
            "date": "2019-04-10",
            "count": 2
          },
          {
            "date": "2019-04-18",
            "count": 1
          },
          {
            "date": "2019-06-19",
            "count": 1
          },
          {
            "date": "2019-06-25",
            "count": 1
          },
          {
            "date": "2019-09-05",
            "count": 1
          },
          {
            "date": "2019-11-17",
            "count": 1
          },
          {
            "date": "2019-11-20",
            "count": 1
          },
          {
            "date": "2019-11-29",
            "count": 1
          },
          {
            "date": "2019-12-30",
            "count": 1
          },
          {
            "date": "2019-12-31",
            "count": 1
          },
          {
            "date": "2020-02-12",
            "count": 1
          },
          {
            "date": "2020-02-27",
            "count": 2
          },
          {
            "date": "2020-03-16",
            "count": 1
          },
          {
            "date": "2020-04-17",
            "count": 1
          },
          {
            "date": "2020-05-26",
            "count": 1
          },
          {
            "date": "2020-05-30",
            "count": 1
          },
          {
            "date": "2020-06-18",
            "count": 1
          },
          {
            "date": "2020-08-06",
            "count": 1
          },
          {
            "date": "2020-09-12",
            "count": 1
          },
          {
            "date": "2020-10-22",
            "count": 1
          },
          {
            "date": "2020-11-28",
            "count": 1
          },
          {
            "date": "2021-02-20",
            "count": 1
          },
          {
            "date": "2021-03-18",
            "count": 1
          },
          {
            "date": "2021-07-14",
            "count": 1
          },
          {
            "date": "2021-09-22",
            "count": 1
          },
          {
            "date": "2021-09-24",
            "count": 1
          },
          {
            "date": "2022-01-21",
            "count": 1
          },
          {
            "date": "2022-01-26",
            "count": 1
          },
          {
            "date": "2022-02-03",
            "count": 1
          },
          {
            "date": "2022-10-03",
            "count": 1
          },
          {
            "date": "2022-10-22",
            "count": 1
          },
          {
            "date": "2022-11-30",
            "count": 1
          },
          {
            "date": "2023-01-20",
            "count": 1
          },
          {
            "date": "2023-01-23",
            "count": 1
          },
          {
            "date": "2023-02-07",
            "count": 1
          },
          {
            "date": "2023-03-07",
            "count": 1
          },
          {
            "date": "2023-04-17",
            "count": 1
          },
          {
            "date": "2023-04-21",
            "count": 1
          },
          {
            "date": "2023-06-27",
            "count": 1
          },
          {
            "date": "2023-06-29",
            "count": 1
          },
          {
            "date": "2023-07-11",
            "count": 1
          },
          {
            "date": "2023-07-28",
            "count": 1
          },
          {
            "date": "2023-09-25",
            "count": 1
          },
          {
            "date": "2023-10-06",
            "count": 1
          },
          {
            "date": "2023-10-26",
            "count": 1
          },
          {
            "date": "2024-01-27",
            "count": 1
          },
          {
            "date": "2024-02-06",
            "count": 1
          },
          {
            "date": "2024-03-15",
            "count": 1
          },
          {
            "date": "2024-03-18",
            "count": 1
          },
          {
            "date": "2024-04-08",
            "count": 1
          },
          {
            "date": "2024-04-22",
            "count": 1
          },
          {
            "date": "2024-10-21",
            "count": 1
          },
          {
            "date": "2025-01-15",
            "count": 1
          },
          {
            "date": "2025-02-07",
            "count": 1
          },
          {
            "date": "2025-02-10",
            "count": 1
          },
          {
            "date": "2025-02-26",
            "count": 1
          },
          {
            "date": "2025-10-01",
            "count": 1
          },
          {
            "date": "2025-10-09",
            "count": 1
          },
          {
            "date": "2025-10-13",
            "count": 1
          },
          {
            "date": "2025-10-19",
            "count": 2
          },
          {
            "date": "2025-11-25",
            "count": 1
          },
          {
            "date": "2025-12-03",
            "count": 1
          },
          {
            "date": "2025-12-19",
            "count": 1
          },
          {
            "date": "2025-12-23",
            "count": 1
          },
          {
            "date": "2025-12-26",
            "count": 1
          },
          {
            "date": "2026-01-06",
            "count": 1
          },
          {
            "date": "2026-01-12",
            "count": 1
          },
          {
            "date": "2026-01-22",
            "count": 1
          },
          {
            "date": "2026-01-25",
            "count": 2
          },
          {
            "date": "2026-02-02",
            "count": 1
          },
          {
            "date": "2026-02-12",
            "count": 1
          },
          {
            "date": "2026-02-23",
            "count": 1
          },
          {
            "date": "2026-03-11",
            "count": 1
          },
          {
            "date": "2026-03-19",
            "count": 1
          },
          {
            "date": "2026-03-24",
            "count": 1
          },
          {
            "date": "2026-04-03",
            "count": 1
          },
          {
            "date": "2026-04-14",
            "count": 1
          },
          {
            "date": "2026-04-23",
            "count": 1
          },
          {
            "date": "2026-05-13",
            "count": 1
          },
          {
            "date": "2026-05-18",
            "count": 1
          },
          {
            "date": "2026-05-26",
            "count": 1
          },
          {
            "date": "2026-06-06",
            "count": 1
          },
          {
            "date": "2026-06-07",
            "count": 1
          },
          {
            "date": "2026-06-15",
            "count": 1
          },
          {
            "date": "2026-06-16",
            "count": 1
          },
          {
            "date": "2026-06-24",
            "count": 1
          },
          {
            "date": "2026-07-11",
            "count": 1
          },
          {
            "date": "2026-07-17",
            "count": 1
          },
          {
            "date": "2026-07-18",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 170,
        "total_forks": 172
      },
      "star_history": null,
      "open_issues_and_prs": 15
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [
        "distribution/examples/monitoring-tracing/prometheus-grafana/dashboards/openapi.json"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "annot/pom.xml",
        "core/pom.xml",
        "distribution/examples/extending-membrane/custom-interceptor/pom.xml",
        "distribution/examples/extending-membrane/embedding-java/pom.xml",
        "distribution/examples/web-services-soap/add-soap-header/pom.xml",
        "distribution/examples/websockets/custom-websocket-interceptor/embedded/pom.xml",
        "distribution/examples/websockets/custom-websocket-interceptor/standalone/pom.xml",
        "distribution/examples/xml/basic-xml-interceptor/pom.xml",
        "distribution/examples/xml/stax-interceptor/pom.xml",
        "distribution/pom.xml",
        "pom.xml",
        "test/pom.xml",
        "war/pom.xml"
      ],
      "largest_source_bytes": 395495,
      "source_files_sampled": 2083,
      "oversized_source_files": 6,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 7906
    },
    "dependencies": {
      "manifests": [
        "annot/pom.xml",
        "core/pom.xml",
        "distribution/pom.xml",
        "pom.xml",
        "test/pom.xml",
        "war/pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "commons-httpclient:commons-httpclient",
            "direct": true,
            "version": "3.1",
            "severity": "moderate",
            "ecosystem": "maven",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-3832-9276-x7gf"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 1532
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "moderate": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 98,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 55,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "org.springframework:spring-beans",
          "manifest": "annot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.springframework:spring-context",
          "manifest": "annot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-databind",
          "manifest": "annot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.jetbrains:annotations",
          "manifest": "annot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
          "manifest": "annot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.networknt:json-schema-validator",
          "manifest": "annot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.0.1"
        },
        {
          "name": "com.github.spotbugs:spotbugs-annotations",
          "manifest": "annot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.9.8"
        },
        {
          "name": "jakarta.annotation:jakarta.annotation-api",
          "manifest": "annot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.0.0"
        },
        {
          "name": "com.jayway.jsonpath:json-path",
          "manifest": "annot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.10.0"
        },
        {
          "name": "io.opentelemetry:opentelemetry-bom",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.63.0"
        },
        {
          "name": "org.membrane-soa:service-proxy-annot",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "commons-cli:commons-cli",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "commons-codec:commons-codec",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.commons:commons-dbcp2",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.commons:commons-text",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.15.0"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-core",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.fasterxml.jackson.datatype:jackson-datatype-jsr310",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.fasterxml.jackson.datatype:jackson-datatype-joda",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.googlecode.jatl:jatl",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "commons-fileupload:commons-fileupload",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.floreysoft:jmte",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.google.api-client:google-api-client",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "javax.mail:mail",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.5.0-b01"
        },
        {
          "name": "jakarta.mail:jakarta.mail-api",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.googlecode.xmemcached:xmemcached",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.4.9"
        },
        {
          "name": "redis.clients:jedis",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.4.8"
        },
        {
          "name": "com.bornium:oauth2-openid",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.2.0"
        },
        {
          "name": "com.jayway.jsonpath:json-path",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.10.0"
        },
        {
          "name": "net.minidev:json-smart",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.6.0"
        },
        {
          "name": "com.squareup.okhttp3:okhttp-jvm",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "5.3.2"
        },
        {
          "name": "org.springframework:spring-web",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.mozilla:rhino-engine",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.9.0"
        },
        {
          "name": "io.swagger.parser.v3:swagger-parser",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.github.spotbugs:spotbugs-annotations",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.9.8"
        },
        {
          "name": "io.swagger:swagger-parser",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.bouncycastle:bcpkix-jdk18on",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.bitbucket.b_c:jose4j",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "0.9.6"
        },
        {
          "name": "fi.solita.clamav:clamav-client",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.0.1"
        },
        {
          "name": "com.twitter:hpack",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.0.2"
        },
        {
          "name": "org.apache.groovy:groovy-templates",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.groovy:groovy-json",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.httpcomponents:httpclient",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.opentelemetry:opentelemetry-api",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.opentelemetry:opentelemetry-sdk",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.opentelemetry:opentelemetry-exporter-otlp",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.opentelemetry.instrumentation:opentelemetry-resources",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.18.1-alpha"
        },
        {
          "name": "org.jetbrains:annotations",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "commons-io:commons-io",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "jakarta.annotation:jakarta.annotation-api",
          "manifest": "core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.1.1"
        },
        {
          "name": "org.membrane-soa:service-proxy-core",
          "manifest": "distribution/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.logging.log4j:log4j-core",
          "manifest": "distribution/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.logging.log4j:log4j-slf4j2-impl",
          "manifest": "distribution/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.apache.logging.log4j:log4j-layout-template-json",
          "manifest": "distribution/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${log4j.version}"
        },
        {
          "name": "org.membrane-soa:service-proxy-annot",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.membrane-soa:service-proxy-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.membrane-soa:membrane-service-proxy",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.membrane-soa:service-proxy-test",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "jakarta.activation:jakarta.activation-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.1.2"
        },
        {
          "name": "commons-cli:commons-cli",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.11.0"
        },
        {
          "name": "commons-codec:commons-codec",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.20.0"
        },
        {
          "name": "org.apache.commons:commons-dbcp2",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.14.0"
        },
        {
          "name": "commons-fileupload:commons-fileupload",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.6.0"
        },
        {
          "name": "org.apache.httpcomponents:httpclient",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "4.5.14"
        },
        {
          "name": "org.apache.commons:commons-lang3",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.18.0"
        },
        {
          "name": "commons-io:commons-io",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.21.0"
        },
        {
          "name": "org.apache.groovy:groovy",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${groovy.version}"
        },
        {
          "name": "org.apache.groovy:groovy-templates",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${groovy.version}"
        },
        {
          "name": "org.apache.groovy:groovy-json",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${groovy.version}"
        },
        {
          "name": "com.fasterxml.jackson:jackson-bom",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${jackson.version}"
        },
        {
          "name": "org.apache.logging.log4j:log4j-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${log4j.version}"
        },
        {
          "name": "org.apache.logging.log4j:log4j-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${log4j.version}"
        },
        {
          "name": "org.slf4j:slf4j",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${slf4j.version}"
        },
        {
          "name": "org.springframework:spring-framework-bom",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${spring.version}"
        },
        {
          "name": "org.springframework:spring-beans",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${spring.version}"
        },
        {
          "name": "org.springframework:spring-context",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${spring.version}"
        },
        {
          "name": "org.springframework:spring-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${spring.version}"
        },
        {
          "name": "org.springframework:spring-expression",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${spring.version}"
        },
        {
          "name": "org.springframework:spring-web",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${spring.version}"
        },
        {
          "name": "com.googlecode.jatl:jatl",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "0.2.3"
        },
        {
          "name": "com.google.guava:guava",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "32.1.2-jre"
        },
        {
          "name": "commons-httpclient:commons-httpclient",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "3.1"
        },
        {
          "name": "org.xmlunit:xmlunit-core",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.10.0"
        },
        {
          "name": "org.xmlunit:xmlunit-matchers",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.9.1"
        },
        {
          "name": "org.slf4j:slf4j-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${slf4j.version}"
        },
        {
          "name": "org.slf4j:slf4j-simple",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${slf4j.version}"
        },
        {
          "name": "org.apache.logging.log4j:log4j-slf4j2-impl",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${log4j.version}"
        },
        {
          "name": "com.floreysoft:jmte",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "7.0.3"
        },
        {
          "name": "com.google.api-client:google-api-client",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.8.1"
        },
        {
          "name": "jakarta.mail:jakarta.mail-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.1.5"
        },
        {
          "name": "io.swagger:swagger-parser",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.0.76"
        },
        {
          "name": "io.swagger.parser.v3:swagger-parser",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.1.45"
        },
        {
          "name": "net.sf.saxon:Saxon-HE",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "11.5"
        },
        {
          "name": "org.bouncycastle:bcpkix-jdk18on",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.84"
        },
        {
          "name": "org.jetbrains:annotations",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "24.1.0"
        },
        {
          "name": "io.rest-assured:rest-assured",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "5.3.1"
        },
        {
          "name": "org.membrane-soa:service-proxy-annot",
          "manifest": "war/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.membrane-soa:service-proxy-core",
          "manifest": "war/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.springframework:spring-beans",
          "manifest": "war/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.springframework:spring-web",
          "manifest": "war/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "com.bornium:oauth2-openid",
            "direct": true,
            "version": "1.2.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.datatype:jackson-datatype-joda",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.datatype:jackson-datatype-jsr310",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson:jackson-bom",
            "direct": true,
            "version": "2.21.4",
            "ecosystem": "maven"
          },
          {
            "name": "com.floreysoft:jmte",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.floreysoft:jmte",
            "direct": true,
            "version": "7.0.3",
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs-annotations",
            "direct": true,
            "version": "4.9.8",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.api-client:google-api-client",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.google.api-client:google-api-client",
            "direct": true,
            "version": "2.8.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.google.guava:guava",
            "direct": true,
            "version": "32.1.2-jre",
            "ecosystem": "maven"
          },
          {
            "name": "com.googlecode.jatl:jatl",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.googlecode.jatl:jatl",
            "direct": true,
            "version": "0.2.3",
            "ecosystem": "maven"
          },
          {
            "name": "com.googlecode.xmemcached:xmemcached",
            "direct": true,
            "version": "2.4.9",
            "ecosystem": "maven"
          },
          {
            "name": "com.jayway.jsonpath:json-path",
            "direct": true,
            "version": "2.10.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.networknt:json-schema-validator",
            "direct": true,
            "version": "2.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "com.squareup.okhttp3:okhttp-jvm",
            "direct": true,
            "version": "5.3.2",
            "ecosystem": "maven"
          },
          {
            "name": "com.twitter:hpack",
            "direct": true,
            "version": "1.0.2",
            "ecosystem": "maven"
          },
          {
            "name": "commons-cli:commons-cli",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "commons-cli:commons-cli",
            "direct": true,
            "version": "1.11.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-codec:commons-codec",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "commons-codec:commons-codec",
            "direct": true,
            "version": "1.20.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-fileupload:commons-fileupload",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "commons-fileupload:commons-fileupload",
            "direct": true,
            "version": "1.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "commons-httpclient:commons-httpclient",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "commons-httpclient:commons-httpclient",
            "direct": true,
            "version": "3.1",
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "commons-io:commons-io",
            "direct": true,
            "version": "2.21.0",
            "ecosystem": "maven"
          },
          {
            "name": "fi.solita.clamav:clamav-client",
            "direct": true,
            "version": "1.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "io.opentelemetry.instrumentation:opentelemetry-resources",
            "direct": true,
            "version": "2.18.1-alpha",
            "ecosystem": "maven"
          },
          {
            "name": "io.opentelemetry:opentelemetry-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.opentelemetry:opentelemetry-bom",
            "direct": true,
            "version": "1.63.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.opentelemetry:opentelemetry-exporter-otlp",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.opentelemetry:opentelemetry-sdk",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.rest-assured:rest-assured",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.rest-assured:rest-assured",
            "direct": true,
            "version": "5.3.1",
            "ecosystem": "maven"
          },
          {
            "name": "io.swagger.parser.v3:swagger-parser",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.swagger.parser.v3:swagger-parser",
            "direct": true,
            "version": "2.1.45",
            "ecosystem": "maven"
          },
          {
            "name": "io.swagger:swagger-parser",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.swagger:swagger-parser",
            "direct": true,
            "version": "1.0.76",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.activation:jakarta.activation-api",
            "direct": true,
            "version": "2.1.2",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.annotation:jakarta.annotation-api",
            "direct": true,
            "version": "2.1.1",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.annotation:jakarta.annotation-api",
            "direct": true,
            "version": "3.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.mail:jakarta.mail-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.mail:jakarta.mail-api",
            "direct": true,
            "version": "2.1.5",
            "ecosystem": "maven"
          },
          {
            "name": "javax.mail:mail",
            "direct": true,
            "version": "1.5.0-b01",
            "ecosystem": "maven"
          },
          {
            "name": "net.minidev:json-smart",
            "direct": true,
            "version": "2.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "net.sf.saxon:Saxon-HE",
            "direct": true,
            "version": "11.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-dbcp2",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-dbcp2",
            "direct": true,
            "version": "2.14.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-lang3",
            "direct": true,
            "version": "3.18.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.commons:commons-text",
            "direct": true,
            "version": "1.15.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.groovy:groovy",
            "direct": true,
            "version": "4.0.29",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.groovy:groovy-json",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.groovy:groovy-json",
            "direct": true,
            "version": "4.0.29",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.groovy:groovy-templates",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.groovy:groovy-templates",
            "direct": true,
            "version": "4.0.29",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpclient",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.httpcomponents:httpclient",
            "direct": true,
            "version": "4.5.14",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-api",
            "direct": true,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-core",
            "direct": true,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-layout-template-json",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-slf4j2-impl",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-slf4j2-impl",
            "direct": true,
            "version": "2.25.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.logging.log4j:log4j-slf4j2-impl",
            "direct": true,
            "version": "2.25.4",
            "ecosystem": "maven"
          },
          {
            "name": "org.bitbucket.b_c:jose4j",
            "direct": true,
            "version": "0.9.6",
            "ecosystem": "maven"
          },
          {
            "name": "org.bouncycastle:bcpkix-jdk18on",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.bouncycastle:bcpkix-jdk18on",
            "direct": true,
            "version": "1.84",
            "ecosystem": "maven"
          },
          {
            "name": "org.jetbrains:annotations",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.jetbrains:annotations",
            "direct": true,
            "version": "24.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.membrane-soa:membrane-service-proxy",
            "direct": true,
            "version": "5.0.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.membrane-soa:membrane-service-proxy",
            "direct": true,
            "version": "7.3.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.membrane-soa:service-proxy-annot",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.membrane-soa:service-proxy-annot",
            "direct": true,
            "version": "7.3.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.membrane-soa:service-proxy-core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.membrane-soa:service-proxy-core",
            "direct": true,
            "version": "7.0.6-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.membrane-soa:service-proxy-core",
            "direct": true,
            "version": "7.3.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.membrane-soa:service-proxy-test",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.membrane-soa:service-proxy-test",
            "direct": true,
            "version": "7.3.2-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "org.mozilla:rhino-engine",
            "direct": true,
            "version": "1.9.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j",
            "direct": true,
            "version": "2.0.17",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": true,
            "version": "2.0.17",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-simple",
            "direct": true,
            "version": "2.0.17",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-beans",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-beans",
            "direct": true,
            "version": "6.2.19",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-context",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-context",
            "direct": true,
            "version": "6.2.19",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-core",
            "direct": true,
            "version": "6.2.19",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-expression",
            "direct": true,
            "version": "6.2.19",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-framework-bom",
            "direct": true,
            "version": "6.2.19",
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-web",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.springframework:spring-web",
            "direct": true,
            "version": "6.2.19",
            "ecosystem": "maven"
          },
          {
            "name": "org.xmlunit:xmlunit-core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.xmlunit:xmlunit-core",
            "direct": true,
            "version": "2.10.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.xmlunit:xmlunit-matchers",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.xmlunit:xmlunit-matchers",
            "direct": true,
            "version": "2.9.1",
            "ecosystem": "maven"
          },
          {
            "name": "redis.clients:jedis",
            "direct": true,
            "version": "4.4.8",
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.github.spotbugs:spotbugs-maven-plugin",
            "direct": false,
            "version": "4.7.3.2",
            "ecosystem": "maven"
          },
          {
            "name": "com.h2database:h2",
            "direct": false,
            "version": "2.4.240",
            "ecosystem": "maven"
          },
          {
            "name": "com.tngtech.archunit:archunit-junit5",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.vdurmont:semver4j",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.servlet:jakarta.servlet-api",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "jakarta.servlet:jakarta.servlet-api",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "junit:junit",
            "direct": false,
            "version": "4.13.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.activemq:activemq-broker",
            "direct": false,
            "version": "5.19.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.derby:derbytools",
            "direct": false,
            "version": "10.17.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-antrun-plugin",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-assembly-plugin",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": "3.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": "3.11.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-enforcer-plugin",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-gpg-plugin",
            "direct": false,
            "version": "3.2.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": "3.5.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.asynchttpclient:async-http-client",
            "direct": false,
            "version": "3.0.10",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:cobertura-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:cobertura-maven-plugin",
            "direct": false,
            "version": "2.7",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:exec-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:exec-maven-plugin",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:versions-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:versions-maven-plugin",
            "direct": false,
            "version": "2.16.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.cyclonedx:cyclonedx-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.cyclonedx:cyclonedx-maven-plugin",
            "direct": false,
            "version": "2.9.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.eclipse.jetty:jetty-maven-plugin",
            "direct": false,
            "version": "11.0.24",
            "ecosystem": "maven"
          },
          {
            "name": "org.graalvm.js:js",
            "direct": false,
            "version": "24.1.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.graalvm.sdk:graal-sdk",
            "direct": false,
            "version": "24.1.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.hamcrest:hamcrest",
            "direct": false,
            "version": "3.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-api",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-api",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-engine",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-engine",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-params",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter-params",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.platform:junit-platform-suite-engine",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.platform:junit-platform-suite-engine",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-core",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.mockito:mockito-core",
            "direct": false,
            "version": "4.11.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.mongodb:mongodb-driver-sync",
            "direct": false,
            "version": "5.6.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.owasp:dependency-check-maven",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.owasp:dependency-check-maven",
            "direct": false,
            "version": "8.3.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.skyscreamer:jsonassert",
            "direct": false,
            "version": "1.5.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:jul-to-slf4j",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.sonatype.central:central-publishing-maven-plugin",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "maven"
          },
          {
            "name": "ws",
            "direct": false,
            "version": "^8.17.1",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 153,
        "direct_count": 101,
        "indirect_count": 52
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 6,
        "merged_prs": 1957,
        "open_issues": 9,
        "closed_ratio": 0.99,
        "closed_issues": 931,
        "closed_unmerged_prs": 174
      },
      "bus_factor": 2,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "rrayst",
          "commits": 1598,
          "avatar_url": "https://avatars.githubusercontent.com/u/508061?v=4"
        },
        {
          "type": "User",
          "login": "predic8",
          "commits": 1280,
          "avatar_url": "https://avatars.githubusercontent.com/u/1932856?v=4"
        },
        {
          "type": "User",
          "login": "christiangoerdes",
          "commits": 308,
          "avatar_url": "https://avatars.githubusercontent.com/u/118011644?v=4"
        },
        {
          "type": "User",
          "login": "t-burch",
          "commits": 248,
          "avatar_url": "https://avatars.githubusercontent.com/u/119930761?v=4"
        },
        {
          "type": "User",
          "login": "r41d",
          "commits": 114,
          "avatar_url": "https://avatars.githubusercontent.com/u/552662?v=4"
        },
        {
          "type": "User",
          "login": "snyk-bot",
          "commits": 97,
          "avatar_url": "https://avatars.githubusercontent.com/u/19733683?v=4"
        },
        {
          "type": "User",
          "login": "russelmrcl",
          "commits": 66,
          "avatar_url": "https://avatars.githubusercontent.com/u/106917165?v=4"
        },
        {
          "type": "User",
          "login": "koin612",
          "commits": 45,
          "avatar_url": "https://avatars.githubusercontent.com/u/8482235?v=4"
        },
        {
          "type": "User",
          "login": "bridgerdier",
          "commits": 40,
          "avatar_url": "https://avatars.githubusercontent.com/u/8395870?v=4"
        },
        {
          "type": "User",
          "login": "fabiankessler",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/2506130?v=4"
        }
      ],
      "contributors_sampled": 27,
      "top_contributor_share": 0.414
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build-and-test.yml",
        "codeql.yml",
        "docker-publish.yml",
        "maven-publish.yml",
        "release-build.yml",
        "release-pr.yml",
        "trigger-website-pipeline.yml",
        "update-docker-latest.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 8,
            "reason": "25 out of 30 merged PRs checked by a CI test -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 8 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 0,
            "reason": "dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 9,
            "reason": "SAST tool detected but not run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "5 out of the last 5 releases have a total of 5 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "46 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "324c5dde40f82226b514b9a7824a9b51c7a5c35f",
        "ran_at": "2026-07-23T19:39:08Z",
        "aggregate_score": 5.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T13:24:25Z",
      "oldest_open_prs": [
        {
          "number": 3093,
          "created_at": "2026-07-17T09:03:24Z",
          "last_comment_at": "2026-07-17T09:09:20Z",
          "last_comment_author": "coderabbitai"
        },
        {
          "number": 3096,
          "created_at": "2026-07-17T12:32:37Z",
          "last_comment_at": "2026-07-17T12:33:53Z",
          "last_comment_author": "membrane-ci-server"
        },
        {
          "number": 3097,
          "created_at": "2026-07-17T14:17:23Z",
          "last_comment_at": "2026-07-17T14:18:46Z",
          "last_comment_author": "membrane-ci-server"
        },
        {
          "number": 3100,
          "created_at": "2026-07-20T09:22:20Z",
          "last_comment_at": "2026-07-21T06:39:59Z",
          "last_comment_author": "christiangoerdes"
        },
        {
          "number": 3102,
          "created_at": "2026-07-20T17:09:08Z",
          "last_comment_at": "2026-07-20T17:13:49Z",
          "last_comment_author": "membrane-ci-server"
        },
        {
          "number": 3103,
          "created_at": "2026-07-22T14:16:39Z",
          "last_comment_at": "2026-07-22T14:55:23Z",
          "last_comment_author": "predic8"
        }
      ],
      "last_merged_pr_at": "2026-07-22T13:20:05Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 2242,
          "created_at": "2025-10-23T15:18:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2279,
          "created_at": "2025-11-07T09:29:14Z",
          "last_comment_at": "2025-11-10T08:23:32Z",
          "last_comment_author": "rrayst"
        },
        {
          "number": 2440,
          "created_at": "2025-12-11T13:41:55Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2577,
          "created_at": "2026-01-08T16:14:24Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2586,
          "created_at": "2026-01-09T13:58:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2704,
          "created_at": "2026-01-28T20:34:59Z",
          "last_comment_at": "2026-01-29T09:18:53Z",
          "last_comment_author": "rrayst"
        },
        {
          "number": 2712,
          "created_at": "2026-01-29T14:12:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 2889,
          "created_at": "2026-03-25T08:39:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 3026,
          "created_at": "2026-06-28T13:09:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/membrane/api-gateway",
    "host": "github.com",
    "name": "api-gateway",
    "owner": "membrane"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 78,
      "inputs": {
        "security": 64,
        "vitality": 99,
        "community": 62,
        "governance": 79,
        "engineering": 78
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 99,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "commits_last_year": 755,
              "human_commit_share": 0.83,
              "days_since_last_push": 1,
              "active_weeks_last_year": 52
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "52/52 weeks with commits",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 52
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "755 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 755
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "releases_count": 100,
              "latest_release_tag": "v6.5.4",
              "releases_from_tags": false,
              "days_since_latest_release": 10,
              "mean_days_between_releases": 10
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "100 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 10 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 10
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~10 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 10
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 1 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 62,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "good",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 73,
            "inputs": {
              "forks": 172,
              "stars": 624,
              "watchers": 42,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "624 stars",
                "points": 45.3,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 624
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "172 forks",
                "points": 18.6,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 172
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "42 watchers",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 42
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 79,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "moderate",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "bus_factor": 2,
              "contributors_sampled": 27,
              "top_contributor_share": 0.414
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "2 contributor(s) cover half of all commits",
                "points": 25.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 41% of commits",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 41
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "27 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 27
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 96,
            "inputs": {
              "merged_prs": 1957,
              "open_issues": 9,
              "closed_issues": 931,
              "issue_closed_ratio": 0.99,
              "closed_unmerged_prs": 174
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "99% of issues closed",
                "points": 46.3,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 99
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1957/2131 decided PRs merged",
                "points": 35.1,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1957,
                      "decided": 2131
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "followers": 19,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "membrane",
              "public_repos": 52,
              "account_age_days": 5130
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "19 followers of membrane",
                "points": 9.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 19,
                      "login": "membrane"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "52 public repos, account ~14 yr old",
                "points": 24.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 52
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 14
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "org.membrane-soa:service-proxy-war",
                "org.membrane-soa:service-proxy-core",
                "org.membrane-soa:service-proxy-annot",
                "org.membrane-soa:membrane-api-gateway"
              ],
              "ecosystems": "maven",
              "any_deprecated": false,
              "min_days_since_publish": 9
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "4 package(s) on maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 4,
                      "ecosystems": "maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 9 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "78 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 78
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 78,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "25 out of 30 merged PRs checked by a CI test -- score normalized to 8",
                "points": 16,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "oauth2",
                "api-gateway",
                "api",
                "rest",
                "graphql",
                "openapi"
              ],
              "has_wiki": true,
              "homepage": "https://membrane-api.io",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://membrane-api.io",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "6 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 64,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 59,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 5.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "25 out of 30 merged PRs checked by a CI test -- score normalized to 8",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "dangerous workflow patterns detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected but not run on all commits",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 5 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "46 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 98 resolved dependencies against OSV; 55 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 98
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 55
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 85,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 98,
              "unassessed_packages": 55,
              "affected_by_severity": "moderate 1",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: commons-httpclient:commons-httpclient 3.1 (moderate)",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "commons-httpclient:commons-httpclient 3.1 (moderate)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 1532 days ago",
                "points": 37.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 1532
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 98,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 11
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 85,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.952,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 7906
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "79 of 83 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 79,
                      "sampled": 83
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 74,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.12,
              "toolchain_manifests": [
                "annot/pom.xml",
                "core/pom.xml",
                "distribution/examples/extending-membrane/custom-interceptor/pom.xml",
                "distribution/examples/extending-membrane/embedding-java/pom.xml",
                "distribution/examples/web-services-soap/add-soap-header/pom.xml",
                "distribution/examples/websockets/custom-websocket-interceptor/embedded/pom.xml",
                "distribution/examples/websockets/custom-websocket-interceptor/standalone/pom.xml",
                "distribution/examples/xml/basic-xml-interceptor/pom.xml",
                "distribution/examples/xml/stax-interceptor/pom.xml",
                "distribution/pom.xml",
                "pom.xml",
                "test/pom.xml",
                "war/pom.xml"
              ],
              "dependency_bot_commit_share": 0.01
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "annot/pom.xml, core/pom.xml, distribution/examples/extending-membrane/custom-interceptor/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "annot/pom.xml, core/pom.xml, distribution/examples/extending-membrane/custom-interceptor/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Java (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "12 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 12,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "1 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 395495,
              "source_files_sampled": 2083,
              "oversized_source_files": 6
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "6/2083 source files over 60KB",
                "points": 54.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 2083,
                      "oversized": 6
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "excellent",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": true,
              "api_schema_files": [
                "distribution/examples/monitoring-tracing/prometheus-grafana/dashboards/openapi.json"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "distribution/examples/monitoring-tracing/prometheus-grafana/dashboards/openapi.json",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "distribution/examples/monitoring-tracing/prometheus-grafana/dashboards/openapi.json"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "deps.dev does not index maven:org.membrane-soa:service-proxy-war@7.3.1; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T19:39:38.253865Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/membrane/api-gateway.svg",
  "full_name": "membrane/api-gateway",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}