公开记录优秀
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-30 23:33 UTC
spring-projects / spring-security
Spring Security
spring-projects/spring-security 的健康指数为 100 分中的 88 分，处于「优秀」区间。 其得分最高的类别是Vitality（100/100），最低的是AI Readiness（63/100）。 最近一次更新在 1 天前。 近期的大部分工作由 3 位贡献者完成。
88
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
88
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
100
开发活跃度
100优秀
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 1 天前 |
| 36/36 | 提交节奏 — 52 周中有 52 周有提交 |
| 18/18 | 提交量 — 最近一年 1,967 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 1,967 |
| human_commit_share | 0.27 |
| days_since_last_push | 1 |
| active_weeks_last_year | 52 |
发布纪律
100优秀
评分方式
| 27/27 | 有发布版本 — 已发布 100 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 51 天前 |
| 27/27 | 发布节奏 — 约每 12.9 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 100 |
| latest_release_tag | 7.1.0 |
| releases_from_tags | 否 |
| days_since_latest_release | 51 |
| mean_days_between_releases | 12.9 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
100
流行度与采用
100优秀
评分方式
| 60/60 | 星标 — 9,590 个星标 |
| 25/25 | 复刻 — 6,316 个复刻 |
| 14.5/15 | 关注者 — 409 位关注者 |
所用输入
| forks | 6,316 |
| stars | 9,590 |
| watchers | 409 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
100优秀
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（Apache-2.0） |
| 18/18 | CONTRIBUTING 指南 |
| 13.5/13.5 | 行为准则 |
| 7.2/7.2 | 议题模板 |
| 6.3/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 是 |
| has_issue_template | 是 |
| has_code_of_conduct | 是 |
| has_pull_request_template | 是 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
75
维护者韧性（巴士系数）
76良好
评分方式
| 36/54 | 巴士系数 — 3 位贡献者贡献了半数提交 |
| 16.8/22.5 | 提交分布 — 头号贡献者编写了 25% 的提交 |
| 13.5/13.5 | 贡献者广度 — 98 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 54 contributing companies or organizations |
所用输入
| bus_factor | 3 |
| contributors_sampled | 98 |
| top_contributor_share | 0.254 |
议题与 PR 响应能力
68中等
评分方式
| 42.4/46.8 | 议题解决 — 91% 的议题已关闭 |
| 25.9/38.3 | PR 接受 — 已裁定的 PR 中 3,659/5,410 已合并 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 0/8 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 3,659 |
| open_issues | 1,270 |
| closed_issues | 12,524 |
| issue_closed_ratio | 0.908 |
| closed_unmerged_prs | 1,751 |
所有权与托管责任
80良好
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 25/25 | 所有者影响力 — spring-projects 有 16,783 位关注者 |
| 25/25 | 既往记录 — 77 个公开仓库，账户约 16 年 |
所用输入
| followers | 16,783 |
| owner_type | Organization |
| is_verified | — |
| owner_login | spring-projects |
| public_repos | 77 |
| account_age_days | 5,875 |
工程质量
基础的工程与文档实践是否到位？
94
工程实践
90优秀
评分方式
| 24/24 | CI 工作流 — 14 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — eslint.config.js |
| 0/9.6 | Pre-commit 钩子 |
| 6.4/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 22 out of 22 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 是 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
文档
100优秀
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — http://spring.io/projects/spring-security |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 5 个主题标签 |
| 10/10 | Wiki |
所用输入
| topics | java, security, spring, spring-framework, framework |
| has_wiki | 是 |
| homepage | http://spring.io/projects/spring-security |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
73
安全态势
66中等
评分方式
| 6.8/7.5 | Binary-Artifacts — binaries present in source code |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 22 out of 22 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/8 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 54 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — 无数据 |
| 5/5 | Pinned-Dependencies — all dependencies are pinned |
| 5/5 | SAST — SAST tool is run on all commits |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 12 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 6.6 |
已排除计分（无数据或不适用）：packaging, signed_releases。 其余权重已重新归一化。
依赖安全公告
100优秀
评分方式
| 35/35 | 直接依赖不含已知公告 — 没有直接依赖携带已知公告 |
| 0/25 | 间接依赖不含已知公告 — 在此范围内，传递依赖集合无法与开发和测试依赖区分 |
| 0/40 | 没有长期未处理的公告 — 没有公告带有发布日期 |
所用输入
| source | osv |
| advisories | 16 |
| affected_packages | 9 |
| assessed_packages | 261 |
| unassessed_packages | 0 |
| affected_by_severity | high 6, moderate 3 |
| direct_affected_packages | 0 |
已排除计分（无数据或不适用）：间接依赖不含已知公告, 没有长期未处理的公告。 其余权重已重新归一化。 已将 261 个已解析依赖与 OSV 比对。 该仓库未发布任何索引可解析的软件包，因此改为评估仓库依赖图。该图将开发与测试版本固定同交付的依赖混在一起，因此仅对声明的运行时依赖计分；传递性发现仅作为背景信息列出，不计入评分。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
63
AI 代理上下文与指引
8危急
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 7.9/40 | 可读的提交历史 — 27 次人类提交中有 4 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.148 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 12.6/18 | 一条命令的引导启动 — build.gradle, buildSrc/build.gradle, buildSrc/src/test/resources/samples/integrationtest/withgroovy/build.gradle（工具链约定，无任务运行器） |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — eslint.config.js |
| 11/11 | 静态类型检查 — Java（静态类型） |
| 10/10 | 可复现环境 — lockfile |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 67 次为自动依赖更新 |
| 10/10 | OpenSSF Scorecard：Pinned-Dependencies — all dependencies are pinned |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | package-lock.json |
| has_dockerfile | 否 |
| typed_language | 是 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | build.gradle, buildSrc/build.gradle, buildSrc/src/test/resources/samples/integrationtest/withgroovy/build.gradle, buildSrc/src/test/resources/samples/integrationtest/withjava/build.gradle, buildSrc/src/test/resources/samples/integrationtest/withpropdeps/build.gradle, buildSrc/src/test/resources/samples/jacoco/java/build.gradle, buildSrc/src/test/resources/samples/javadocapi/multimodule/api/build.gradle, buildSrc/src/test/resources/samples/javadocapi/multimodule/build.gradle, buildSrc/src/test/resources/samples/javadocapi/multimodule/impl/build.gradle, buildSrc/src/test/resources/samples/javadocapi/multimodule/sample/build.gradle, buildSrc/src/test/resources/samples/maven/install-with-springio/build.gradle, buildSrc/src/test/resources/samples/maven/install/build.gradle, buildSrc/src/test/resources/samples/maven/signing/build.gradle, buildSrc/src/test/resources/samples/maven/upload/build.gradle, buildSrc/src/test/resources/samples/showcase/build.gradle, buildSrc/src/test/resources/samples/testsconfiguration/build.gradle, buildSrc/src/test/resources/samples/testsconfiguration/core/build.gradle, buildSrc/src/test/resources/samples/testsconfiguration/web/build.gradle |
| dependency_bot_commit_share | 0.67 |
面向模型的代码可读性
100优秀
评分方式
| 45/45 | 可类型检查的代码 — Java（静态类型） |
| 54.9/55 | 可控的文件大小 — 采样的 4,725 个源文件中有 9 个超过 60KB |
所用输入
| primary_language | Java |
| largest_source_bytes | 202,111 |
| source_files_sampled | 4,725 |
| oversized_source_files | 9 |
机器可读接口
80良好
评分方式
| 40/40 | API 模式（OpenAPI/GraphQL/proto） — buildSrc/src/main/graphql/org/springframework/security/convention/versions/CreateIssue.graphql, buildSrc/src/main/graphql/org/springframework/security/convention/versions/FindCreateIssueInput.graphql, buildSrc/src/main/graphql/org/springframework/security/convention/versions/RateLimit.graphql |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — example, examples, sample, samples |
所用输入
| example_dirs | example, examples, sample, samples |
| has_mcp_signal | 否 |
| api_schema_files | buildSrc/src/main/graphql/org/springframework/security/convention/versions/CreateIssue.graphql, buildSrc/src/main/graphql/org/springframework/security/convention/versions/FindCreateIssueInput.graphql, buildSrc/src/main/graphql/org/springframework/security/convention/versions/RateLimit.graphql |
关键数据
9,590GitHub 星标
98贡献者
1,967最近 12 个月提交数
1距最近推送天数
100发布版本数
3巴士系数（bus factor）
1,270开放议题
Maven, npm软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- Could not fetch npm package '@springprojects/spring-security-webauthn' from its registry
更多细节
Star 与 Fork 历史 0 ★ / 6,316 ⇿
0Star
6,316Fork
92发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
仅显示最近的历史——该仓库超出采集窗口，因此未采集最早的历史记录。
主版本 1次版本 5修订 63
每个点涵盖 3 天。
OpenSSF Scorecard 6.6 / 10
6.6综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 9 | Binary-Artifacts | binaries present in source code |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 22 out of 22 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/8 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 54 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 不适用 | Packaging | packaging workflow not detected |
| 10 | Pinned-Dependencies | all dependencies are pinned |
| 10 | SAST | SAST tool is run on all commits |
| 10 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 12 existing vulnerabilities detected |
全部依赖 261
来自 GitHub 依赖图的完整解析依赖集合：0 个直接依赖与 261 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| npm | @antora/atlas-extension | 1.0.0-alpha.5 | 间接 |
| npm | @antora/collector-extension | 1.0.3 | 间接 |
| npm | @asciidoctor/tabs | 1.0.0-beta.6 | 间接 |
| npm | @esbuild/aix-ppc64 | 0.28.1 | 间接 |
| npm | @esbuild/android-arm | 0.28.1 | 间接 |
| npm | @esbuild/android-arm64 | 0.28.1 | 间接 |
| npm | @esbuild/android-x64 | 0.28.1 | 间接 |
| npm | @esbuild/darwin-arm64 | 0.28.1 | 间接 |
| npm | @esbuild/darwin-x64 | 0.28.1 | 间接 |
| npm | @esbuild/freebsd-arm64 | 0.28.1 | 间接 |
| npm | @esbuild/freebsd-x64 | 0.28.1 | 间接 |
| npm | @esbuild/linux-arm | 0.28.1 | 间接 |
| npm | @esbuild/linux-arm64 | 0.28.1 | 间接 |
| npm | @esbuild/linux-ia32 | 0.28.1 | 间接 |
| npm | @esbuild/linux-loong64 | 0.28.1 | 间接 |
| npm | @esbuild/linux-mips64el | 0.28.1 | 间接 |
| npm | @esbuild/linux-ppc64 | 0.28.1 | 间接 |
| npm | @esbuild/linux-riscv64 | 0.28.1 | 间接 |
| npm | @esbuild/linux-s390x | 0.28.1 | 间接 |
| npm | @esbuild/linux-x64 | 0.28.1 | 间接 |
| npm | @esbuild/netbsd-arm64 | 0.28.1 | 间接 |
| npm | @esbuild/netbsd-x64 | 0.28.1 | 间接 |
| npm | @esbuild/openbsd-arm64 | 0.28.1 | 间接 |
| npm | @esbuild/openbsd-x64 | 0.28.1 | 间接 |
| npm | @esbuild/openharmony-arm64 | 0.28.1 | 间接 |
| npm | @esbuild/sunos-x64 | 0.28.1 | 间接 |
| npm | @esbuild/win32-arm64 | 0.28.1 | 间接 |
| npm | @esbuild/win32-ia32 | 0.28.1 | 间接 |
| npm | @esbuild/win32-x64 | 0.28.1 | 间接 |
| npm | @eslint-community/eslint-utils | 4.4.0 | 间接 |
| npm | @eslint-community/regexpp | 4.11.0 | 间接 |
| npm | @eslint/config-array | 0.17.0 | 间接 |
| npm | @eslint/eslintrc | 2.1.4 | 间接 |
| npm | @eslint/eslintrc | 3.1.0 | 间接 |
| npm | @eslint/js | 8.57.0 | 间接 |
| npm | @eslint/js | 9.6.0 | 间接 |
| npm | @eslint/object-schema | 2.1.4 | 间接 |
| npm | @humanwhocodes/config-array | 0.11.14 | 间接 |
| npm | @humanwhocodes/module-importer | 1.0.1 | 间接 |
| npm | @humanwhocodes/object-schema | 2.0.3 | 间接 |
| npm | @humanwhocodes/retry | 0.3.0 | 间接 |
| npm | @nodelib/fs.scandir | 2.1.5 | 间接 |
| npm | @nodelib/fs.stat | 2.0.5 | 间接 |
| npm | @nodelib/fs.walk | 1.2.8 | 间接 |
| npm | @pkgr/core | 0.1.1 | 间接 |
| npm | @sinonjs/commons | 2.0.0 | 间接 |
| npm | @sinonjs/commons | 3.0.1 | 间接 |
| npm | @sinonjs/fake-timers | 11.2.2 | 间接 |
| npm | @sinonjs/samsam | 8.0.0 | 间接 |
| npm | @sinonjs/text-encoding | 0.7.2 | 间接 |
| npm | @springio/antora-extensions | 1.14.12 | 间接 |
| npm | @springio/asciidoctor-extensions | 1.0.0-alpha.18 | 间接 |
| npm | @types/eslint | 8.56.10 | 间接 |
| npm | @types/estree | 1.0.5 | 间接 |
| npm | @types/json-schema | 7.0.15 | 间接 |
| npm | @types/prettier | 2.7.3 | 间接 |
| npm | @types/sinon | 17.0.3 | 间接 |
| npm | @types/sinonjs__fake-timers | 8.1.5 | 间接 |
| npm | @typescript-eslint/parser | 5.62.0 | 间接 |
| npm | @typescript-eslint/scope-manager | 5.62.0 | 间接 |
| npm | @typescript-eslint/types | 5.62.0 | 间接 |
| npm | @typescript-eslint/typescript-estree | 5.62.0 | 间接 |
| npm | @typescript-eslint/visitor-keys | 5.62.0 | 间接 |
| npm | @ungap/structured-clone | 1.2.0 | 间接 |
| npm | acorn | 8.12.1 | 间接 |
| npm | acorn-jsx | 5.3.2 | 间接 |
| npm | ajv | 6.12.6 | 间接 |
| npm | ansi-colors | 4.1.3 | 间接 |
| npm | ansi-regex | 2.1.1 | 间接 |
| npm | ansi-regex | 3.0.1 | 间接 |
| npm | ansi-regex | 5.0.1 | 间接 |
| npm | ansi-styles | 2.2.1 | 间接 |
| npm | ansi-styles | 3.2.1 | 间接 |
| npm | ansi-styles | 4.3.0 | 间接 |
| npm | antora | 3.2.0-rc.2 | 间接 |
| npm | anymatch | 3.1.3 | 间接 |
| npm | argparse | 2.0.1 | 间接 |
| npm | array-union | 2.1.0 | 间接 |
| npm | assertion-error | 1.1.0 | 间接 |
| npm | balanced-match | 1.0.2 | 间接 |
| npm | binary-extensions | 2.3.0 | 间接 |
| npm | brace-expansion | 1.1.11 | 间接 |
| npm | brace-expansion | 2.0.1 | 间接 |
| npm | braces | 3.0.3 | 间接 |
| npm | browser-stdout | 1.3.1 | 间接 |
| npm | callsites | 3.1.0 | 间接 |
| npm | camelcase | 6.3.0 | 间接 |
| npm | chai | 4.3.10 | 间接 |
| npm | chalk | 1.1.3 | 间接 |
| npm | chalk | 4.1.2 | 间接 |
| npm | check-error | 1.0.3 | 间接 |
| npm | chokidar | 3.5.3 | 间接 |
| npm | cliui | 7.0.4 | 间接 |
| npm | color-convert | 1.9.3 | 间接 |
| npm | color-convert | 2.0.1 | 间接 |
| npm | color-name | 1.1.3 | 间接 |
| npm | color-name | 1.1.4 | 间接 |
| npm | common-tags | 1.8.2 | 间接 |
| npm | concat-map | 0.0.1 | 间接 |
| npm | cross-spawn | 7.0.3 | 间接 |
| npm | debug | 4.3.5 | 间接 |
| npm | decamelize | 4.0.0 | 间接 |
| npm | deep-eql | 4.1.4 | 间接 |
| npm | deep-is | 0.1.4 | 间接 |
| npm | diff | 5.2.0 | 间接 |
| npm | dir-glob | 3.0.1 | 间接 |
| npm | dlv | 1.1.3 | 间接 |
| npm | doctrine | 3.0.0 | 间接 |
| npm | emoji-regex | 8.0.0 | 间接 |
| npm | esbuild | 0.28.1 | 间接 |
| npm | escalade | 3.1.2 | 间接 |
| npm | escape-string-regexp | 1.0.5 | 间接 |
| npm | escape-string-regexp | 4.0.0 | 间接 |
| npm | eslint | 8.57.0 | 间接 |
| npm | eslint | 9.6.0 | 间接 |
| npm | eslint-config-prettier | 9.1.0 | 间接 |
| npm | eslint-plugin-prettier | 5.1.3 | 间接 |
| npm | eslint-scope | 7.2.2 | 间接 |
| npm | eslint-scope | 8.0.1 | 间接 |
| npm | eslint-visitor-keys | 3.4.3 | 间接 |
| npm | eslint-visitor-keys | 4.0.0 | 间接 |
| npm | espree | 10.1.0 | 间接 |
| npm | espree | 9.6.1 | 间接 |
| npm | esquery | 1.5.0 | 间接 |
| npm | esrecurse | 4.3.0 | 间接 |
| npm | estraverse | 5.3.0 | 间接 |
| npm | esutils | 2.0.3 | 间接 |
| npm | fast-deep-equal | 3.1.3 | 间接 |
| npm | fast-diff | 1.3.0 | 间接 |
| npm | fast-glob | 3.3.2 | 间接 |
| npm | fast-json-stable-stringify | 2.1.0 | 间接 |
| npm | fast-levenshtein | 2.0.6 | 间接 |
| npm | fastq | 1.17.1 | 间接 |
| npm | file-entry-cache | 6.0.1 | 间接 |
| npm | file-entry-cache | 8.0.0 | 间接 |
| npm | fill-range | 7.1.1 | 间接 |
| npm | find-up | 5.0.0 | 间接 |
| npm | flat | 5.0.2 | 间接 |
| npm | flat-cache | 3.2.0 | 间接 |
| npm | flat-cache | 4.0.1 | 间接 |
| npm | flatted | 3.4.2 | 间接 |
| npm | fs.realpath | 1.0.0 | 间接 |
| npm | fsevents | 2.3.3 | 间接 |
| npm | get-caller-file | 2.0.5 | 间接 |
| npm | get-func-name | 2.0.2 | 间接 |
| npm | glob | 7.2.0 | 间接 |
| npm | glob | 8.1.0 | 间接 |
| npm | glob-parent | 5.1.2 | 间接 |
| npm | glob-parent | 6.0.2 | 间接 |
| npm | globals | 13.24.0 | 间接 |
| npm | globals | 14.0.0 | 间接 |
| npm | globals | 15.8.0 | 间接 |
| npm | globby | 11.1.0 | 间接 |
| npm | graphemer | 1.4.0 | 间接 |
| npm | has-ansi | 2.0.0 | 间接 |
| npm | has-flag | 4.0.0 | 间接 |
| npm | he | 1.2.0 | 间接 |
| npm | ignore | 5.3.1 | 间接 |
| npm | import-fresh | 3.3.0 | 间接 |
| npm | imurmurhash | 0.1.4 | 间接 |
| npm | indent-string | 4.0.0 | 间接 |
| npm | inflight | 1.0.6 | 间接 |
| npm | inherits | 2.0.4 | 间接 |
| npm | is-binary-path | 2.1.0 | 间接 |
| npm | is-extglob | 2.1.1 | 间接 |
| npm | is-fullwidth-code-point | 3.0.0 | 间接 |
| npm | is-glob | 4.0.3 | 间接 |
| npm | is-number | 7.0.0 | 间接 |
| npm | is-path-inside | 3.0.3 | 间接 |
| npm | is-plain-obj | 2.1.0 | 间接 |
| npm | is-unicode-supported | 0.1.0 | 间接 |
| npm | isexe | 2.0.0 | 间接 |
| npm | js-yaml | 4.2.0 | 间接 |
| npm | json-buffer | 3.0.1 | 间接 |
| npm | json-schema-traverse | 0.4.1 | 间接 |
| npm | json-stable-stringify-without-jsonify | 1.0.1 | 间接 |
| npm | just-extend | 6.2.0 | 间接 |
| npm | keyv | 4.5.4 | 间接 |
| npm | levn | 0.4.1 | 间接 |
| npm | locate-path | 6.0.0 | 间接 |
| npm | lodash | 4.18.1 | 间接 |
| npm | lodash.get | 4.4.2 | 间接 |
| npm | lodash.merge | 4.6.2 | 间接 |
| npm | log-symbols | 4.1.0 | 间接 |
| npm | loglevel | 1.9.1 | 间接 |
| npm | loglevel-colored-level-prefix | 1.0.0 | 间接 |
| npm | loupe | 2.3.7 | 间接 |
| npm | merge2 | 1.4.1 | 间接 |
| npm | micromatch | 4.0.7 | 间接 |
| npm | minimatch | 3.1.5 | 间接 |
| npm | minimatch | 5.1.9 | 间接 |
| npm | mocha | 10.8.2 | 间接 |
| npm | ms | 2.1.2 | 间接 |
| npm | ms | 2.1.3 | 间接 |
| npm | natural-compare | 1.4.0 | 间接 |
| npm | nise | 6.0.0 | 间接 |
| npm | normalize-path | 3.0.0 | 间接 |
| npm | once | 1.4.0 | 间接 |
| npm | optionator | 0.9.4 | 间接 |
| npm | p-limit | 3.1.0 | 间接 |
| npm | p-locate | 5.0.0 | 间接 |
| npm | parent-module | 1.0.1 | 间接 |
| npm | path-exists | 4.0.0 | 间接 |
| npm | path-is-absolute | 1.0.1 | 间接 |
| npm | path-key | 3.1.1 | 间接 |
| npm | path-to-regexp | 6.2.2 | 间接 |
| npm | path-type | 4.0.0 | 间接 |
| npm | pathval | 1.1.1 | 间接 |
| npm | picomatch | 2.3.2 | 间接 |
| npm | prelude-ls | 1.2.1 | 间接 |
| npm | prettier | 2.8.8 | 间接 |
| npm | prettier | 3.3.2 | 间接 |
| npm | prettier-eslint | 15.0.1 | 间接 |
| npm | prettier-linter-helpers | 1.0.0 | 间接 |
| npm | pretty-format | 23.6.0 | 间接 |
| npm | punycode | 2.3.1 | 间接 |
| npm | queue-microtask | 1.2.3 | 间接 |
| npm | randombytes | 2.1.0 | 间接 |
| npm | readdirp | 3.6.0 | 间接 |
| npm | require-directory | 2.1.1 | 间接 |
| npm | require-relative | 0.8.7 | 间接 |
| npm | resolve-from | 4.0.0 | 间接 |
| npm | reusify | 1.0.4 | 间接 |
| npm | rimraf | 3.0.2 | 间接 |
| npm | run-parallel | 1.2.0 | 间接 |
| npm | safe-buffer | 5.2.1 | 间接 |
| npm | semver | 7.6.2 | 间接 |
| npm | serialize-javascript | 6.0.2 | 间接 |
| npm | shebang-command | 2.0.0 | 间接 |
| npm | shebang-regex | 3.0.0 | 间接 |
| npm | sinon | 18.0.0 | 间接 |
| npm | slash | 3.0.0 | 间接 |
| npm | string-width | 4.2.3 | 间接 |
| npm | strip-ansi | 3.0.1 | 间接 |
| npm | strip-ansi | 6.0.1 | 间接 |
| npm | strip-json-comments | 3.1.1 | 间接 |
| npm | supports-color | 2.0.0 | 间接 |
| npm | supports-color | 7.2.0 | 间接 |
| npm | supports-color | 8.1.1 | 间接 |
| npm | synckit | 0.8.8 | 间接 |
| npm | text-table | 0.2.0 | 间接 |
| npm | to-regex-range | 5.0.1 | 间接 |
| npm | tslib | 1.14.1 | 间接 |
| npm | tslib | 2.6.3 | 间接 |
| npm | tsutils | 3.21.0 | 间接 |
| npm | type-check | 0.4.0 | 间接 |
| npm | type-detect | 4.0.8 | 间接 |
| npm | type-fest | 0.20.2 | 间接 |
| npm | typescript | 4.9.5 | 间接 |
| npm | uri-js | 4.4.1 | 间接 |
| npm | vue-eslint-parser | 8.3.0 | 间接 |
| npm | which | 2.0.2 | 间接 |
| npm | word-wrap | 1.2.5 | 间接 |
| npm | workerpool | 6.5.1 | 间接 |
| npm | wrap-ansi | 7.0.0 | 间接 |
| npm | wrappy | 1.0.2 | 间接 |
| npm | y18n | 5.0.8 | 间接 |
| npm | yargs | 16.2.0 | 间接 |
| npm | yargs-parser | 20.2.9 | 间接 |
| npm | yargs-unparser | 2.0.0 | 间接 |
| npm | yocto-queue | 0.1.0 | 间接 |
依赖安全公告 9
该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 261 个包，其中也包含从不交付的开发与测试版本固定：9 个存在已知公告，0 个为直接依赖。
| 软件包 | 版本 | 关系 | 严重程度 | 公告数 | 修复版本 |
|---|---|---|---|---|---|
| brace-expansion | 1.1.11 | 间接 | 高 | 4 | 5.0.8 |
| brace-expansion | 2.0.1 | 间接 | 高 | 4 | 5.0.8 |
| cross-spawn | 7.0.3 | 间接 | 高 | 1 | 7.0.5 |
| js-yaml | 4.2.0 | 间接 | 高 | 1 | 4.3.0 |
| path-to-regexp | 6.2.2 | 间接 | 高 | 1 | 8.0.0 |
| serialize-javascript | 6.0.2 | 间接 | 高 | 2 | 7.0.5 |
| ajv | 6.12.6 | 间接 | 中 | 1 | 8.18.0 |
| diff | 5.2.0 | 间接 | 中 | 1 | 8.0.3 |
| micromatch | 4.0.7 | 间接 | 中 | 1 | 4.0.8 |
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"java",
"security",
"spring",
"spring-framework",
"framework"
],
"is_fork": false,
"size_kb": 94280,
"has_wiki": true,
"homepage": "http://spring.io/projects/spring-security",
"languages": {
"CSS": 3097,
"HTML": 80,
"Java": 24225521,
"Ruby": 7010,
"XSLT": 2369,
"PLSQL": 3180,
"Shell": 1690,
"Groovy": 51429,
"Kotlin": 1010166,
"Python": 129,
"AspectJ": 16800,
"JavaScript": 59702
},
"pushed_at": "2026-07-29T03:16:18Z",
"created_at": "2012-01-10T21:50:57Z",
"owner_type": "Organization",
"updated_at": "2026-07-30T15:00:48Z",
"description": "Spring Security",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Java",
"significant_languages": [
"Java"
]
},
"owner": {
"blog": "https://spring.io/projects",
"name": "Spring",
"type": "Organization",
"login": "spring-projects",
"company": null,
"location": "United States of America",
"followers": 16783,
"avatar_url": "https://avatars.githubusercontent.com/u/317776?v=4",
"created_at": "2010-06-29T18:58:02Z",
"is_verified": null,
"public_repos": 77,
"account_age_days": 5875
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "7.1.0",
"kind": "minor",
"published_at": "2026-06-09T16:39:33Z"
},
{
"tag": "7.0.6",
"kind": "patch",
"published_at": "2026-06-09T16:06:38Z"
},
{
"tag": "6.5.11",
"kind": "patch",
"published_at": "2026-06-09T16:02:58Z"
},
{
"tag": "7.0.5",
"kind": "patch",
"published_at": "2026-04-20T20:32:10Z"
},
{
"tag": "7.1.0-RC1",
"kind": "prerelease",
"published_at": "2026-04-20T20:20:06Z"
},
{
"tag": "6.5.10",
"kind": "patch",
"published_at": "2026-04-20T18:55:24Z"
},
{
"tag": "7.0.4",
"kind": "patch",
"published_at": "2026-03-16T19:05:04Z"
},
{
"tag": "7.1.0-M3",
"kind": "prerelease",
"published_at": "2026-03-16T19:07:07Z"
},
{
"tag": "6.5.9",
"kind": "patch",
"published_at": "2026-03-16T18:13:57Z"
},
{
"tag": "6.5.8",
"kind": "patch",
"published_at": "2026-02-13T18:24:25Z"
},
{
"tag": "7.1.0-M2",
"kind": "prerelease",
"published_at": "2026-02-13T20:29:02Z"
},
{
"tag": "7.0.3",
"kind": "patch",
"published_at": "2026-02-13T15:57:30Z"
},
{
"tag": "7.1.0-M1",
"kind": "prerelease",
"published_at": "2026-01-19T15:49:33Z"
},
{
"tag": "7.0.2",
"kind": "patch",
"published_at": "2025-12-15T20:58:48Z"
},
{
"tag": "7.0.1",
"kind": "patch",
"published_at": "2025-12-15T18:22:28Z"
},
{
"tag": "6.4.13",
"kind": "patch",
"published_at": "2025-11-17T17:36:37Z"
},
{
"tag": "7.0.0",
"kind": "major",
"published_at": "2025-11-17T17:36:20Z"
},
{
"tag": "6.5.7",
"kind": "patch",
"published_at": "2025-11-17T17:46:37Z"
},
{
"tag": "7.0.0-RC3",
"kind": "prerelease",
"published_at": "2025-11-06T17:35:32Z"
},
{
"tag": "7.0.0-RC2",
"kind": "prerelease",
"published_at": "2025-12-02T20:49:46Z"
},
{
"tag": "7.0.0-RC1",
"kind": "prerelease",
"published_at": "2025-10-20T21:41:33Z"
},
{
"tag": "6.5.6",
"kind": "patch",
"published_at": "2025-10-20T22:00:22Z"
},
{
"tag": "6.4.12",
"kind": "patch",
"published_at": "2025-10-20T21:57:51Z"
},
{
"tag": "6.4.11",
"kind": "patch",
"published_at": "2025-09-17T15:23:56Z"
},
{
"tag": "6.5.5",
"kind": "patch",
"published_at": "2025-09-17T14:32:40Z"
},
{
"tag": "7.0.0-M3",
"kind": "prerelease",
"published_at": "2025-09-15T17:14:03Z"
},
{
"tag": "6.5.4",
"kind": "patch",
"published_at": "2025-09-15T16:52:25Z"
},
{
"tag": "6.4.10",
"kind": "patch",
"published_at": "2025-09-15T16:36:19Z"
},
{
"tag": "7.0.0-M2",
"kind": "prerelease",
"published_at": "2025-08-18T20:16:34Z"
},
{
"tag": "6.5.3",
"kind": "patch",
"published_at": "2025-08-18T18:06:06Z"
},
{
"tag": "6.4.9",
"kind": "patch",
"published_at": "2025-08-18T18:15:01Z"
},
{
"tag": "6.4.8",
"kind": "patch",
"published_at": "2025-07-21T19:13:11Z"
},
{
"tag": "6.5.2",
"kind": "patch",
"published_at": "2025-07-21T19:12:46Z"
},
{
"tag": "7.0.0-M1",
"kind": "prerelease",
"published_at": "2025-07-21T15:50:51Z"
},
{
"tag": "6.4.7",
"kind": "patch",
"published_at": "2025-06-16T18:46:34Z"
},
{
"tag": "6.3.10",
"kind": "patch",
"published_at": "2025-06-16T15:34:43Z"
},
{
"tag": "6.5.1",
"kind": "patch",
"published_at": "2025-06-16T18:47:02Z"
},
{
"tag": "6.5.0",
"kind": "minor",
"published_at": "2025-05-19T16:33:35Z"
},
{
"tag": "6.4.6",
"kind": "patch",
"published_at": "2025-05-19T16:33:23Z"
},
{
"tag": "6.5.0-RC1",
"kind": "prerelease",
"published_at": "2025-04-21T19:19:07Z"
},
{
"tag": "6.4.5",
"kind": "patch",
"published_at": "2025-04-21T16:28:50Z"
},
{
"tag": "6.3.9",
"kind": "patch",
"published_at": "2025-04-21T16:26:29Z"
},
{
"tag": "6.4.4",
"kind": "patch",
"published_at": "2025-03-17T21:30:51Z"
},
{
"tag": "6.5.0-M3",
"kind": "prerelease",
"published_at": "2025-03-17T21:23:42Z"
},
{
"tag": "6.3.8",
"kind": "patch",
"published_at": "2025-03-17T21:31:01Z"
},
{
"tag": "6.4.3",
"kind": "patch",
"published_at": "2025-02-18T17:24:47Z"
},
{
"tag": "6.3.7",
"kind": "patch",
"published_at": "2025-02-18T17:17:04Z"
},
{
"tag": "6.5.0-M2",
"kind": "prerelease",
"published_at": "2025-02-18T17:11:46Z"
},
{
"tag": "6.5.0-M1",
"kind": "prerelease",
"published_at": "2025-01-20T15:50:52Z"
},
{
"tag": "6.4.2",
"kind": "patch",
"published_at": "2024-12-16T16:36:37Z"
},
{
"tag": "6.3.6",
"kind": "patch",
"published_at": "2024-12-16T15:50:39Z"
},
{
"tag": "6.4.1",
"kind": "patch",
"published_at": "2024-11-20T21:29:23Z"
},
{
"tag": "5.7.14",
"kind": "patch",
"published_at": "2024-11-18T17:12:29Z"
},
{
"tag": "6.3.5",
"kind": "patch",
"published_at": "2024-11-18T16:00:53Z"
},
{
"tag": "5.8.16",
"kind": "patch",
"published_at": "2024-11-18T16:01:37Z"
},
{
"tag": "6.2.8",
"kind": "patch",
"published_at": "2024-11-18T15:48:39Z"
},
{
"tag": "6.4.0",
"kind": "minor",
"published_at": "2024-11-18T16:00:48Z"
},
{
"tag": "6.4.0-RC1",
"kind": "prerelease",
"published_at": "2024-10-21T18:41:39Z"
},
{
"tag": "5.7.13",
"kind": "patch",
"published_at": "2024-10-21T17:58:51Z"
},
{
"tag": "5.8.15",
"kind": "patch",
"published_at": "2024-10-21T17:51:34Z"
},
{
"tag": "6.3.4",
"kind": "patch",
"published_at": "2024-10-21T17:41:15Z"
},
{
"tag": "6.2.7",
"kind": "patch",
"published_at": "2024-10-21T17:41:17Z"
},
{
"tag": "6.4.0-M4",
"kind": "prerelease",
"published_at": "2024-09-16T16:57:13Z"
},
{
"tag": "6.4.0-M3",
"kind": "prerelease",
"published_at": "2024-08-22T13:51:56Z"
},
{
"tag": "6.3.3",
"kind": "patch",
"published_at": "2024-08-21T16:25:17Z"
},
{
"tag": "6.3.2",
"kind": "patch",
"published_at": "2024-08-19T21:13:29Z"
},
{
"tag": "6.4.0-M2",
"kind": "prerelease",
"published_at": "2024-08-19T20:52:04Z"
},
{
"tag": "5.8.14",
"kind": "patch",
"published_at": "2024-08-19T21:10:29Z"
},
{
"tag": "6.2.6",
"kind": "patch",
"published_at": "2024-08-19T21:05:37Z"
},
{
"tag": "6.4.0-M1",
"kind": "prerelease",
"published_at": "2024-07-15T19:28:25Z"
},
{
"tag": "5.8.13",
"kind": "patch",
"published_at": "2024-06-17T15:59:56Z"
},
{
"tag": "6.2.5",
"kind": "patch",
"published_at": "2024-06-17T18:13:07Z"
},
{
"tag": "6.3.1",
"kind": "patch",
"published_at": "2024-06-17T16:26:46Z"
},
{
"tag": "6.3.0",
"kind": "minor",
"published_at": "2024-05-20T16:36:48Z"
},
{
"tag": "5.8.12",
"kind": "patch",
"published_at": "2024-04-15T15:58:01Z"
},
{
"tag": "6.1.9",
"kind": "patch",
"published_at": "2024-04-15T15:59:39Z"
},
{
"tag": "6.2.4",
"kind": "patch",
"published_at": "2024-04-15T17:35:11Z"
},
{
"tag": "6.3.0-RC1",
"kind": "prerelease",
"published_at": "2024-04-15T15:49:06Z"
},
{
"tag": "5.7.12",
"kind": "patch",
"published_at": "2024-03-18T11:38:49Z"
},
{
"tag": "5.8.11",
"kind": "patch",
"published_at": "2024-03-18T11:47:54Z"
},
{
"tag": "6.1.8",
"kind": "patch",
"published_at": "2024-03-18T12:23:06Z"
},
{
"tag": "6.3.0-M3",
"kind": "prerelease",
"published_at": "2024-03-18T11:34:22Z"
},
{
"tag": "6.2.3",
"kind": "patch",
"published_at": "2024-03-18T12:23:12Z"
},
{
"tag": "5.8.10",
"kind": "patch",
"published_at": "2024-02-16T19:29:48Z"
},
{
"tag": "6.1.7",
"kind": "patch",
"published_at": "2024-02-16T19:29:26Z"
},
{
"tag": "6.3.0-M2",
"kind": "prerelease",
"published_at": "2024-02-16T19:03:57Z"
},
{
"tag": "6.2.2",
"kind": "patch",
"published_at": "2024-02-16T19:28:54Z"
},
{
"tag": "6.3.0-M1",
"kind": "prerelease",
"published_at": "2024-01-15T15:36:07Z"
},
{
"tag": "5.8.9",
"kind": "patch",
"published_at": "2023-12-18T19:49:35Z"
},
{
"tag": "6.1.6",
"kind": "patch",
"published_at": "2023-12-18T18:48:54Z"
},
{
"tag": "6.2.1",
"kind": "patch",
"published_at": "2023-12-18T18:49:51Z"
},
{
"tag": "6.2.0",
"kind": "minor",
"published_at": "2023-11-20T15:51:04Z"
},
{
"tag": "6.2.0-RC2",
"kind": "prerelease",
"published_at": "2023-10-16T22:00:14Z"
},
{
"tag": "5.8.8",
"kind": "patch",
"published_at": "2023-10-16T16:05:56Z"
},
{
"tag": "6.0.8",
"kind": "patch",
"published_at": "2023-10-16T15:55:29Z"
},
{
"tag": "6.1.5",
"kind": "patch",
"published_at": "2023-10-16T15:55:31Z"
},
{
"tag": "6.2.0-RC1",
"kind": "prerelease",
"published_at": "2023-10-16T15:47:07Z"
},
{
"tag": "6.2.0-M3",
"kind": "prerelease",
"published_at": "2023-09-18T15:48:24Z"
},
{
"tag": "5.7.11",
"kind": "patch",
"published_at": "2023-09-18T16:10:46Z"
},
{
"tag": "5.8.7",
"kind": "patch",
"published_at": "2023-09-18T16:10:19Z"
}
],
"recent_commits": [
{
"oid": "f94cef17b8627283ee0c53229bdbe77a7fe4dae9",
"body": "Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.6.0 to 1.6.1.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.6.0...v_1.6.1)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.6.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ch.qos.logback:logback-classic from 1.6.0 to 1.6.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-29T03:16:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25f2e1c2a3add3ae834165aed0fe4d166f6f9298",
"body": "Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.38 to 1.6.0.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.38...v_1.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.6.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ch.qos.logback:logback-classic from 1.5.38 to 1.6.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T03:13:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67a3de25eb67374525c3d3089b2ccaae0104ecf0",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb9\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 7.0.0 to 7.0.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-24T00:44:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5bd6b4a570765a1da963d6826a15b4e3fdd71463",
"body": "Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.5.0 to 5.6.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/0f481fcb613427c0f801b606911222b5b6f3083a...03ad4de0992f5dab5e18fcb136590ce7c4a0ac95)\n\n---\n[…]\ndependency-name: actions/setup-java\n dependency-version: 5.6.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/setup-java from 5.5.0 to 5.6.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-17T00:45:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "08dcb1c0e4e9c37900aa803ac3c14d674e1cd178",
"body": "Bumps `org-jetbrains-kotlin` from 2.4.0 to 2.4.10.\n\nUpdates `org.jetbrains.kotlin:kotlin-bom` from 2.4.0 to 2.4.10\n- [Release notes](https://github.com/JetBrains/kotlin/releases)\n- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)\n- [Commits](https://github.com/JetBrains/kotl\n[…]\nbrains.kotlin:kotlin-gradle-plugin\n dependency-version: 2.4.10\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org-jetbrains-kotlin from 2.4.0 to 2.4.10",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-15T03:20:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e1ad5d23922ac7bc6ac924bb5ef594d9b89172af",
"body": "Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.4.4.Final to 7.4.5.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.5/changelog.txt)\n- [Commits](https://github.c\n[…]\n.hibernate.orm:hibernate-core\n dependency-version: 7.4.5.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.hibernate.orm:hibernate-core from 7.4.4.Final to 7.4.5.Final",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-14T03:16:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7654aa2f6f15d88daedff39be12ada15d909311d",
"body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 6.1.1 to 6.1.2.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n dependency-version: 6.1.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.junit:junit-bom from 6.1.1 to 6.1.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-14T03:15:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a29d4ad5a48607b23f198f056b69ed8a6c0fb1ae",
"body": "Bumps [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) from 11.37.2 to 11.38.1.\n- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt)\n- [Commits](https://bitbucket.org/connect\n[…]\name: com.nimbusds:oauth2-oidc-sdk\n dependency-version: 11.38.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump com.nimbusds:oauth2-oidc-sdk from 11.37.2 to 11.38.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T03:17:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ab33b40f1985ddd898169f9284994372aba7618d",
"body": "Bumps `org-bouncycastle` from 1.84 to 1.85.\n\nUpdates `org.bouncycastle:bcpkix-jdk18on` from 1.84 to 1.85\n- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)\n- [Commits](https://github.com/bcgit/bc-java/commits)\n\nUpdates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.85\n[…]\ne: org.bouncycastle:bcprov-jdk18on\n dependency-version: '1.85'\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org-bouncycastle from 1.84 to 1.85",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T03:16:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d3d6497798b920e22e1fbbd8322e6ed206b50aef",
"body": "Bumps [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 3.2.0 to 3.2.1.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-3.2.0...jackson-bom-3.2.1)\n\n---\nupdated-dependencies:\n- dependency-name: tools.jackson:jackson-bom\n dependency-version: 3.2.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump tools.jackson:jackson-bom from 3.2.0 to 3.2.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T03:14:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6680d42d3498aee11fd25f4a0ab42ad5b797efd3",
"body": "Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.37 to 1.5.38.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.5.38)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.38\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-10T03:17:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2efa64c4dc286901e1e4a0825848947d6ac9885",
"body": "Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.4.0 to 5.5.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/1bcf9fb12cf4aa7d266a90ae39939e61372fe520...0f481fcb613427c0f801b606911222b5b6f3083a)\n\n---\n[…]\ndependency-name: actions/setup-java\n dependency-version: 5.5.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/setup-java from 5.4.0 to 5.5.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-10T00:57:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a75d5b7851fa09d23c8775818439249c2f13099",
"body": null,
"is_bot": false,
"headline": "Merge branch '7.0.x'",
"author_name": "Josh Cummings",
"author_login": "jzheaux",
"committed_at": "2026-07-09T17:02:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2366650ece29b93395c55986dffd48ba1345247",
"body": "This commit makes the version calculation work for\nintermediate version numbers like 7.0.5.1",
"is_bot": false,
"headline": "Polish Serialization Test",
"author_name": "Josh Cummings",
"author_login": "jzheaux",
"committed_at": "2026-07-09T17:01:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39790c0a7e3169ae388da5426ab85d60d35d38e2",
"body": null,
"is_bot": false,
"headline": "Merge branch '7.0.x'",
"author_name": "Josh Cummings",
"author_login": "jzheaux",
"committed_at": "2026-07-09T14:44:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5338b7a05bae3fb26f69c3133cb820f20f65c424",
"body": "This commit targets the major.minor version pair that\nmatches Spring Security 7.0.x\n\nSigned-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>",
"is_bot": false,
"headline": "Move Wildcards to Minor Versions",
"author_name": "Josh Cummings",
"author_login": "jzheaux",
"committed_at": "2026-07-09T14:43:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71f81dede26a4e0b75ed4fbc389af90a437ef1ac",
"body": null,
"is_bot": false,
"headline": "Merge branch '7.0.x'",
"author_name": "Josh Cummings",
"author_login": "jzheaux",
"committed_at": "2026-07-09T14:32:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd86d0b23314a8fb6a3ea0bc8297adf9bef13617",
"body": "Signed-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>",
"is_bot": false,
"headline": "Add Micrometer to Snapshot Test",
"author_name": "Josh Cummings",
"author_login": "jzheaux",
"committed_at": "2026-07-09T14:32:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8442794a88fbb5ed1bc681b78fa600e54c01f51",
"body": "This commit removes the extra build for\nJDK 21 to save time on builds.\n\nSigned-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>",
"is_bot": false,
"headline": "Check Only JDK 17",
"author_name": "Josh Cummings",
"author_login": "jzheaux",
"committed_at": "2026-07-09T14:32:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b62affe126089b168aefacd374f33b12f0d7ac12",
"body": "This commit updates all headers to have\nthe same date range.\n\nSigned-off-by: Josh Cummings <3627351+jzheaux@users.noreply.github.com>",
"is_bot": false,
"headline": "Correct Copyright Headers",
"author_name": "Josh Cummings",
"author_login": "jzheaux",
"committed_at": "2026-07-08T23:11:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60e7733d8a82983e817e6be3aabfc293a4c7078f",
"body": "Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.22.0 to 2.22.1.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.22.0...jackson-bom-2.22.1)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson:jackson-bom\n dependency-version: 2.22.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-08T03:15:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bac0be1d625bbd5a6bf6d6d0815810f31017899",
"body": "Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.4.3.Final to 7.4.4.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.4/changelog.txt)\n- [Commits](https://github.c\n[…]\n.hibernate.orm:hibernate-core\n dependency-version: 7.4.4.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.hibernate.orm:hibernate-core from 7.4.3.Final to 7.4.4.Final",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-06T03:20:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bb51ad6096714fcf77c7db7904855b98191f2d5f",
"body": "Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.31.7.RELEASE to 0.31.8.RELEASE.\n- [Release notes](https://github.com/webauthn4j/webauthn4j/releases)\n- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.7.RELEASE...0.31.8.RELEASE)\n\n---\nupdated-depe\n[…]\nwebauthn4j:webauthn4j-core\n dependency-version: 0.31.8.RELEASE\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump com.webauthn4j:webauthn4j-core",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-02T03:12:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9161eced5ba4b65d18fc0585fdf0e29b9f670235",
"body": "Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.4.2.Final to 7.4.3.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.3/changelog.txt)\n- [Commits](https://github.c\n[…]\n.hibernate.orm:hibernate-core\n dependency-version: 7.4.3.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.hibernate.orm:hibernate-core from 7.4.2.Final to 7.4.3.Final",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-30T03:16:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "769fd66ed3018d4cb1d29ec2b0185855f7d6d436",
"body": "Bumps [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) from 5.6.1 to 5.6.2.\n- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.6.2/RELEASE_NOTES.txt)\n- [Commits](https://github.com/apache/httpcomponents-client/compare/rel/v5.6.1.\n[…]\n.httpcomponents.client5:httpclient5\n dependency-version: 5.6.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.1 to 5.6.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-30T03:16:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "49ecfa71ddf6afaea9d7f9d2144df99ad4081010",
"body": "Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.6.0 to 9.6.1.\n- [Release notes](https://github.com/gradle/gradle/releases)\n- [Commits](https://github.com/gradle/gradle/compare/v9.6.0...v9.6.1)\n\n---\nupdated-dependencies:\n- dependency-name: gradle-wrapper\n dependency-version: 9.6.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump gradle-wrapper from 9.6.0 to 9.6.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-29T03:18:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6d41fd1a55e935318ebdcba6683069f3c2306a6",
"body": "Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 6.1.0 to 6.1.1.\n- [Release notes](https://github.com/junit-team/junit-framework/releases)\n- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.0...r6.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: org.junit:junit-bom\n dependency-version: 6.1.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.junit:junit-bom from 6.1.0 to 6.1.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-29T03:16:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "316cf90ec280c846b7bf85845006ae3fa98ec8cc",
"body": "Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.36 to 1.5.37.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.36...v_1.5.37)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.37\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ch.qos.logback:logback-classic from 1.5.36 to 1.5.37",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-29T03:15:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5fbc2b46baf74db7bff539fd3ae36af5bd41878",
"body": "Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.35 to 1.5.36.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.35...v_1.5.36)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.36\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ch.qos.logback:logback-classic from 1.5.35 to 1.5.36",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-26T03:16:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49d2ebf3cfcebe25760c250c0b8509f0e0f407a7",
"body": "Bumps org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.kerby:kerb-simplekdc\n dependency-version: 2.1.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.apache.kerby:kerb-simplekdc from 2.1.1 to 2.1.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-26T03:14:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc2c927a728e6829d9dff7a582243d9a9255cc1c",
"body": "---\nupdated-dependencies:\n- dependency-name: antora\n dependency-version: 3.2.0-rc.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump antora from 3.2.0-alpha.12 to 3.2.0-rc.2 in /docs",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-26T01:04:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40de3ed6bbf9eb73645248a0a5fbcccd55b44e67",
"body": "Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.3.0 to 5.4.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/ad2b38190b15e4d6bdf0c97fb4fca8412226d287...1bcf9fb12cf4aa7d266a90ae39939e61372fe520)\n\n---\n[…]\ndependency-name: actions/setup-java\n dependency-version: 5.4.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/setup-java from 5.3.0 to 5.4.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-26T01:02:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "85e8221ba027f0c9c0e7c2518c869e782fce4721",
"body": "Bumps [io.spring.nullability:io.spring.nullability.gradle.plugin](https://github.com/spring-gradle-plugins/nullability-plugin) from 0.0.13 to 0.0.14.\n- [Release notes](https://github.com/spring-gradle-plugins/nullability-plugin/releases)\n- [Commits](https://github.com/spring-gradle-plugins/nullabili\n[…]\no.spring.nullability.gradle.plugin\n dependency-version: 0.0.14\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump io.spring.nullability:io.spring.nullability.gradle.plugin",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-25T03:16:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f753a24332ad977954ee0273cb05378231b7cdc",
"body": "Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.34 to 1.5.35.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.34...v_1.5.35)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.35\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.35",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-24T03:14:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed7ae7969ed2452e6ab76c505bdc6afb9bb957ac",
"body": "Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.4.1.Final to 7.4.2.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.2/changelog.txt)\n- [Commits](https://github.c\n[…]\n.hibernate.orm:hibernate-core\n dependency-version: 7.4.2.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.hibernate.orm:hibernate-core from 7.4.1.Final to 7.4.2.Final",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-22T03:16:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4ddef4ed83b80ae5bbf5bde68eedc75b31006e94",
"body": "Bumps [gradle-wrapper](https://github.com/gradle/gradle) from 9.5.1 to 9.6.0.\n- [Release notes](https://github.com/gradle/gradle/releases)\n- [Commits](https://github.com/gradle/gradle/compare/v9.5.1...v9.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: gradle-wrapper\n dependency-version: 9.6.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump gradle-wrapper from 9.5.1 to 9.6.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T03:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abb8aa54d8f0aceb2580230a408f0b4f4ab98014",
"body": "Bumps `org-opensaml5` from 5.2.2 to 5.2.3.\n\nUpdates `org.opensaml:opensaml-saml-api` from 5.2.2 to 5.2.3\n\nUpdates `org.opensaml:opensaml-saml-impl` from 5.2.2 to 5.2.3\n\n---\nupdated-dependencies:\n- dependency-name: org.opensaml:opensaml-saml-api\n dependency-version: 5.2.3\n dependency-type: direct:p\n[…]\nme: org.opensaml:opensaml-saml-impl\n dependency-version: 5.2.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org-opensaml5 from 5.2.2 to 5.2.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T03:17:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "deb298ee816c6d2c692d515e2278c3104581a5e4",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.3 to 7.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T01:03:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3565d9bd9d1b0a6bc7cfc6e661e519cc25e036d8",
"body": "Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.\n- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/nodeca/js-yaml/commits)\n\n---\nupdated-dependencies:\n- dependency-name: js-yaml\n dependency-version: 4.2.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump js-yaml from 4.1.1 to 4.2.0 in /javascript",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T01:02:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "827a689ef8c6277a3042799c029010231c765ed4",
"body": "Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.2.0 to 5.3.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...ad2b38190b15e4d6bdf0c97fb4fca8412226d287)\n\n---\n[…]\ndependency-name: actions/setup-java\n dependency-version: 5.3.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/setup-java from 5.2.0 to 5.3.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T00:46:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "43f958e0587e07bcb322194ce2acf9ad921a5b88",
"body": "Bumps [esbuild](https://github.com/evanw/esbuild) from 0.25.0 to 0.28.1.\n- [Release notes](https://github.com/evanw/esbuild/releases)\n- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md)\n- [Commits](https://github.com/evanw/esbuild/compare/v0.25.0...v0.28.1)\n\n---\nupdated-dependencies:\n- dependency-name: esbuild\n dependency-version: 0.28.1\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump esbuild from 0.25.0 to 0.28.1 in /javascript",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-14T01:16:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5594fc018f13fa5c054672e99c1231d7a5d5e76e",
"body": "Bumps [com.unboundid:unboundid-ldapsdk](https://github.com/pingidentity/ldapsdk) from 7.0.4 to 7.0.5.\n- [Release notes](https://github.com/pingidentity/ldapsdk/releases)\n- [Changelog](https://github.com/pingidentity/ldapsdk/blob/master/docs/release-notes.html)\n- [Commits](https://github.com/pingiden\n[…]\nme: com.unboundid:unboundid-ldapsdk\n dependency-version: 7.0.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump com.unboundid:unboundid-ldapsdk from 7.0.4 to 7.0.5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-12T03:17:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bf06d192254f44844475ad3a65378fcb66775c7a",
"body": "Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.31.6.RELEASE to 0.31.7.RELEASE.\n- [Release notes](https://github.com/webauthn4j/webauthn4j/releases)\n- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.6.RELEASE...0.31.7.RELEASE)\n\n---\nupdated-depe\n[…]\nwebauthn4j:webauthn4j-core\n dependency-version: 0.31.7.RELEASE\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump com.webauthn4j:webauthn4j-core",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-10T03:17:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d511a4badbc9f26419a3077b808cf4e05543ad23",
"body": "Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 7.4.0.Final to 7.4.1.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.1/changelog.txt)\n- [Commits](https://github.c\n[…]\n.hibernate.orm:hibernate-core\n dependency-version: 7.4.1.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.hibernate.orm:hibernate-core from 7.4.0.Final to 7.4.1.Final",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-10T03:15:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "038a6601d8d3a7362a0f8d38980c2f6ee58cf4e0",
"body": null,
"is_bot": false,
"headline": "Merge branch '7.0.x'",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T18:30:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c2af49006213e20e3a640f89bee154b7332e81",
"body": null,
"is_bot": false,
"headline": "Merge branch '6.5.x' into 7.0.x",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T18:30:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4690f1bb8a282bd55e65add9b9c9914401c8ae55",
"body": null,
"is_bot": true,
"headline": "Next development version",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-09T16:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6da4ea0d0d0cf871a8624e5f3c59b96ee0b0567e",
"body": null,
"is_bot": true,
"headline": "Next development version",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-09T16:06:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8078781a6bdbd0c44755d24e13839d041caece34",
"body": null,
"is_bot": true,
"headline": "Release 7.1.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-09T16:05:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f69721f24676f462f6b7be131d7f6a77cd99d00",
"body": null,
"is_bot": true,
"headline": "Next development version",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-09T16:02:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acd131c3d1902c6422ae27fcd319d76fe7cafd3c",
"body": null,
"is_bot": true,
"headline": "Release 7.0.6",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-09T15:31:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73b077790fcb04ac3712033d3e939daf42264545",
"body": null,
"is_bot": true,
"headline": "Release 6.5.11",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-09T15:25:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "835ca03dd906e80ab1a97759f8ecc8dd30a93e04",
"body": null,
"is_bot": false,
"headline": "Merge branch '7.0.x'",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T14:10:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15e2488c84dbf0eac0f5d3f39cf8f1c49a07abd9",
"body": null,
"is_bot": false,
"headline": "Sync branch 'main'",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T14:09:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62c4d60524ba0b25d6f0e969ce08dca3987a5019",
"body": null,
"is_bot": false,
"headline": "Merge branch '6.5.x' into 7.0.x",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T14:01:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d884913175bcedb63ef1f7e44799de1ee2cd18f2",
"body": null,
"is_bot": false,
"headline": "Sync branch '7.0.x'",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T14:00:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd5dae5e4d3fece143d03f9ca2eba10ff3a420fc",
"body": null,
"is_bot": false,
"headline": "Sync branch '6.5.x'",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T13:57:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65f43d6894eb304ad2ecc33739aeae7f02d49efd",
"body": null,
"is_bot": false,
"headline": "Merge branch '7.0.x'",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T13:16:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d29c76113545c22da5583c802ce419b116f5d678",
"body": null,
"is_bot": false,
"headline": "Merge branch '6.5.x' into 7.0.x",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T13:04:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "700a4533aa70603d4076dc5ebf052b72312a39e5",
"body": "Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.32 to 1.5.34.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.34)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.34\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.34",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T12:27:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "831bfd7ffa3dc5d2790ed5ffedcfb9f6b78924da",
"body": "Closes gh-19303",
"is_bot": false,
"headline": "Update to spring-data-bom 2026.0.0",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T12:24:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a394c633f22beaad5bbaf66d1d0c895080ad6cb",
"body": "Closes gh-19302",
"is_bot": false,
"headline": "Update micrometer-bom to 1.15.12",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T12:18:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79f9bec8187b2bc8a71870ae6a0408446254c204",
"body": "Closes gh-19301",
"is_bot": false,
"headline": "Update to reactor-bom 2024.0.18",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T12:18:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b019365b73485dbab4125feb45ec55e7a3f1704",
"body": "Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.51.Final to 6.6.53.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.53/changelog.txt)\n- [Commits](https://githu\n[…]\nhibernate.orm:hibernate-core\n dependency-version: 6.6.53.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.hibernate.orm:hibernate-core from 6.6.51.Final to 6.6.53.Final",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T11:37:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "038da0289eeb0768e3d6e5314bf4246063fb61ba",
"body": "Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor) from 2025.0.5 to 2025.0.6.\n- [Release notes](https://github.com/reactor/reactor/releases)\n- [Commits](https://github.com/reactor/reactor/compare/2025.0.5...2025.0.6)\n\n---\nupdated-dependencies:\n- dependency-name: io.projectreactor:reactor-bom\n dependency-version: 2025.0.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump io.projectreactor:reactor-bom from 2025.0.5 to 2025.0.6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T11:37:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9b4afdfc5303bebf4663a573bf6df4122216d9a",
"body": "Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.18.7 to 2.18.8.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.7...jackson-bom-2.18.8)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson:jackson-bom\n dependency-version: 2.18.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump com.fasterxml.jackson:jackson-bom from 2.18.7 to 2.18.8",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T11:36:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65aaedbc83ace8e4eeb0fc912c4feb504a3aab40",
"body": "Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom) from 2025.1.5 to 2025.1.6.\n- [Release notes](https://github.com/spring-projects/spring-data-bom/releases)\n- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2025.1.5...2025.1.6)\n\n\n[…]\nngframework.data:spring-data-bom\n dependency-version: 2025.1.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.springframework.data:spring-data-bom from 2025.1.5 to 2025.1.6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T11:33:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f325ddbdaa3cf573247c8eba5c0cc4c8a7952891",
"body": "Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 6.2.18 to 6.2.19.\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.2.18...v6.2.19)\n\n---\n[…]\nringframework:spring-framework-bom\n dependency-version: 6.2.19\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.springframework:spring-framework-bom from 6.2.18 to 6.2.19",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T11:32:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bc9bdbaf83446ae451d0cd044509d46fd8de801b",
"body": "Bumps `io-micrometer` from 1.16.5 to 1.16.6.\n\nUpdates `io.micrometer:micrometer-bom` from 1.16.5 to 1.16.6\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.5...v1.16.6)\n\nUpdates `io.micrometer:micr\n[…]\n.micrometer:micrometer-observation\n dependency-version: 1.16.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump io-micrometer from 1.16.5 to 1.16.6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T11:32:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0148e9fdb39a660ee6cd2976f372450bfb989789",
"body": "Bumps [org.springframework.data:spring-data-bom](https://github.com/spring-projects/spring-data-bom) from 2025.1.5 to 2025.1.6.\n- [Release notes](https://github.com/spring-projects/spring-data-bom/releases)\n- [Commits](https://github.com/spring-projects/spring-data-bom/compare/2025.1.5...2025.1.6)\n\n\n[…]\nngframework.data:spring-data-bom\n dependency-version: 2025.1.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.springframework.data:spring-data-bom from 2025.1.5 to 2025.1.6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T11:05:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dcc03f1a20c40273b751b27b9fba11bc99308ecd",
"body": "Bumps [io.projectreactor:reactor-bom](https://github.com/reactor/reactor) from 2025.0.5 to 2025.0.6.\n- [Release notes](https://github.com/reactor/reactor/releases)\n- [Commits](https://github.com/reactor/reactor/compare/2025.0.5...2025.0.6)\n\n---\nupdated-dependencies:\n- dependency-name: io.projectreactor:reactor-bom\n dependency-version: 2025.0.6\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump io.projectreactor:reactor-bom from 2025.0.5 to 2025.0.6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T10:54:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cc80523c04281e0af87524a395134194e1dede3",
"body": "Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap) from 4.0.3 to 4.1.0.\n- [Release notes](https://github.com/spring-projects/spring-ldap/releases)\n- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt)\n- [Commits](https://\n[…]\nringframework.ldap:spring-ldap-core\n dependency-version: 4.1.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.springframework.ldap:spring-ldap-core from 4.0.3 to 4.1.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T10:51:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d43ee7a1589e9c99846e169afcd9d6836a4f2fc",
"body": null,
"is_bot": false,
"headline": "Merge branch '7.0.x'",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T10:26:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6da29433cc5974d6d2e5192be249af44a631dfb5",
"body": null,
"is_bot": false,
"headline": "Merge branch '6.5.x' into 7.0.x",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-09T10:23:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4adfdf66b9c3d47a0e8b77d3bff9e6e926f4fb29",
"body": "Bumps org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16.\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven:maven-resolver-provider\n dependency-version: 3.9.16\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:50:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e91b81a5aa387697be34e0674bf1bd36d4e2e8ad",
"body": "Bumps `org-bouncycastle` from 1.80 to 1.80.2.\n\nUpdates `org.bouncycastle:bcpkix-jdk18on` from 1.80 to 1.80.2\n- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)\n- [Commits](https://github.com/bcgit/bc-java/commits)\n\nUpdates `org.bouncycastle:bcprov-jdk18on` from 1.80 to \n[…]\ne: org.bouncycastle:bcprov-jdk18on\n dependency-version: 1.80.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org-bouncycastle from 1.80 to 1.80.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:49:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0949d3b3ea14087141dc594bc66590a9df044b58",
"body": "Bumps org.slf4j:slf4j-api from 2.0.17 to 2.0.18.\n\n---\nupdated-dependencies:\n- dependency-name: org.slf4j:slf4j-api\n dependency-version: 2.0.18\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:33:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d44efc899dc3b01fe279ba3f4f76b001369c2150",
"body": "Bumps [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) from 6.6.50.Final to 6.6.51.Final.\n- [Release notes](https://github.com/hibernate/hibernate-orm/releases)\n- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.51/changelog.txt)\n- [Commits](https://githu\n[…]\nhibernate.orm:hibernate-core\n dependency-version: 6.6.51.Final\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.hibernate.orm:hibernate-core from 6.6.50.Final to 6.6.51.Final",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:29:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5870a746a3caa930bcf945527aa1ec27df7ccbf",
"body": "Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.11 to 1.14.12.\n- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc)\n- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.11...v1.14.12)\n\n---\nupdated-dep\n[…]\nme: \"@springio/antora-extensions\"\n dependency-version: 1.14.12\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:28:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58bca0e895f0de5c600c080dfa172d50aa869a91",
"body": "Bumps [@springio/antora-extensions](https://github.com/spring-io/antora-extensions) from 1.14.11 to 1.14.12.\n- [Changelog](https://github.com/spring-io/antora-extensions/blob/main/CHANGELOG.adoc)\n- [Commits](https://github.com/spring-io/antora-extensions/compare/v1.14.11...v1.14.12)\n\n---\nupdated-dep\n[…]\nme: \"@springio/antora-extensions\"\n dependency-version: 1.14.12\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1bc3fd9ea9d829258fa614f12fa04d2c66e422c4",
"body": "Bumps [io.mockk:mockk](https://github.com/mockk/mockk) from 1.14.9 to 1.14.11.\n- [Release notes](https://github.com/mockk/mockk/releases)\n- [Commits](https://github.com/mockk/mockk/compare/1.14.9...v1.14.11)\n\n---\nupdated-dependencies:\n- dependency-name: io.mockk:mockk\n dependency-version: 1.14.11\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump io.mockk:mockk from 1.14.9 to 1.14.11",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:26:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e84b94971971f5036fab67649479240be0eaf9a1",
"body": "Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.31.5.RELEASE to 0.31.6.RELEASE.\n- [Release notes](https://github.com/webauthn4j/webauthn4j/releases)\n- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.5.RELEASE...0.31.6.RELEASE)\n\n---\nupdated-depe\n[…]\nwebauthn4j:webauthn4j-core\n dependency-version: 0.31.6.RELEASE\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump com.webauthn4j:webauthn4j-core",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:24:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "33bd1abb9d7ed36464030fa9d3abc9d7d3f60662",
"body": "Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.32 to 1.5.34.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.32...v_1.5.34)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.34\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.34",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:23:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea62b200f746d414e594f2d9b63577ff6ee23f67",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n dependency-version: 6.0.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.2 to 6.0.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:22:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5eb41b8a060c3f3369f1c52ef47263c3582afef4",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n dependency-version: 6.0.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.2 to 6.0.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:21:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8f0c077fc7a0659bb080cd2cfd761c127d9591ce",
"body": "Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 7.0.7 to 7.0.8.\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.7...v7.0.8)\n\n---\nupd\n[…]\npringframework:spring-framework-bom\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:19:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "430b9bb8c6eafc0cba324d859c84a3ccee2ae63f",
"body": "Bumps [org.springframework.ldap:spring-ldap-core](https://github.com/spring-projects/spring-ldap) from 4.0.3 to 4.0.4.\n- [Release notes](https://github.com/spring-projects/spring-ldap/releases)\n- [Changelog](https://github.com/spring-projects/spring-ldap/blob/main/changelog.txt)\n- [Commits](https://\n[…]\nringframework.ldap:spring-ldap-core\n dependency-version: 4.0.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.springframework.ldap:spring-ldap-core from 4.0.3 to 4.0.4",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T09:19:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "80f6f19a7e51cc3bcf857ed9a39e5ffdc67e1995",
"body": "Bumps [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) from 7.0.7 to 7.0.8.\n- [Release notes](https://github.com/spring-projects/spring-framework/releases)\n- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.7...v7.0.8)\n\n---\nupd\n[…]\npringframework:spring-framework-bom\n dependency-version: 7.0.8\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T03:35:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c13643d84d340413a09fbed37db4c1b6654d937c",
"body": "Bumps `io-micrometer` from 1.16.5 to 1.17.0.\n\nUpdates `io.micrometer:micrometer-bom` from 1.16.5 to 1.17.0\n- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)\n- [Commits](https://github.com/micrometer-metrics/micrometer/compare/v1.16.5...v1.17.0)\n\nUpdates `io.micrometer:micr\n[…]\n.micrometer:micrometer-observation\n dependency-version: 1.17.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump io-micrometer from 1.16.5 to 1.17.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T03:18:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0f2b4ac630001f7ef82f05c43c87dfbccbd15db4",
"body": "Bumps [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 3.1.4 to 3.2.0.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-3.1.4...jackson-bom-3.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: tools.jackson:jackson-bom\n dependency-version: 3.2.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump tools.jackson:jackson-bom from 3.1.4 to 3.2.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-09T03:15:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d85666cbd610eb8c6c4d01caba8caeac3e704955",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\n- dependency-name: actions/checkout\n dependency-version: 6.0.3\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6.0.2 to 6.0.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-05T00:44:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c6683ab6168b53ce27113cf22f33525d83baf0e",
"body": null,
"is_bot": false,
"headline": "Merge branch '7.0.x'",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-04T19:04:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faea9352dcf0ada219071f96cb2c16ab59636f2e",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main'",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-04T19:03:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fa81bfb6dbc2f1963f74ca5cc466534b9a4f226",
"body": null,
"is_bot": false,
"headline": "Merge branch '7.0.x'",
"author_name": "Joe Grandja",
"author_login": "jgrandja",
"committed_at": "2026-06-04T18:55:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ba133db7ee17ad87fb7847a5657c03f35693c5d",
"body": "Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.21.3 to 2.22.0.\n- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.21.3...jackson-bom-2.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: com.fasterxml.jackson:jackson-bom\n dependency-version: 2.22.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.22.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-04T04:54:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1d35b022a2672b7de2046b1256c6be81a1ee27a",
"body": "Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.33 to 1.5.34.\n- [Release notes](https://github.com/qos-ch/logback/releases)\n- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.33...v_1.5.34)\n\n---\nupdated-dependencies:\n- dependency-name: ch.qos.logback:logback-classic\n dependency-version: 1.5.34\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ch.qos.logback:logback-classic from 1.5.33 to 1.5.34",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-04T04:39:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80dcf01ce5e755483db5078efd96393c5c557131",
"body": "Bumps `org-jetbrains-kotlin` from 2.3.21 to 2.4.0.\n\nUpdates `org.jetbrains.kotlin:kotlin-bom` from 2.3.21 to 2.4.0\n- [Release notes](https://github.com/JetBrains/kotlin/releases)\n- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)\n- [Commits](https://github.com/JetBrains/kotl\n[…]\ntbrains.kotlin:kotlin-gradle-plugin\n dependency-version: 2.4.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump org-jetbrains-kotlin from 2.3.21 to 2.4.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-03T21:28:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "26416a1a8d859fdd8bba7ae15beb8e0e60a32069",
"body": "Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.31.5.RELEASE to 0.31.6.RELEASE.\n- [Release notes](https://github.com/webauthn4j/webauthn4j/releases)\n- [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.31.5.RELEASE...0.31.6.RELEASE)\n\n---\nupdated-depe\n[…]\nwebauthn4j:webauthn4j-core\n dependency-version: 0.31.6.RELEASE\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump com.webauthn4j:webauthn4j-core",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-03T21:24:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f83dac8cd28b6c39f72aad3ba87f4507fccc69a5",
"body": null,
"is_bot": false,
"headline": "Merge branch '7.0.x'",
"author_name": "Josh Cummings",
"author_login": "jzheaux",
"committed_at": "2026-06-02T18:43:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54e95753919cd0963bd8c6dc4af80383977075b1",
"body": null,
"is_bot": false,
"headline": "Merge branch '6.5.x' into 7.0.x",
"author_name": "Josh Cummings",
"author_login": "jzheaux",
"committed_at": "2026-06-02T18:42:44Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 1967,
"latest_release_at": "2026-06-09T16:39:33Z",
"latest_release_tag": "7.1.0",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 52,
"days_since_latest_release": 51,
"mean_days_between_releases": 12.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 87,
"has_issue_template": true,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 6316,
"stars": 9590,
"watchers": 409,
"fork_history": {
"days": [
{
"date": "2023-11-16",
"count": 1
},
{
"date": "2023-11-20",
"count": 3
},
{
"date": "2023-11-21",
"count": 1
},
{
"date": "2023-11-24",
"count": 2
},
{
"date": "2023-11-28",
"count": 2
},
{
"date": "2023-11-29",
"count": 2
},
{
"date": "2023-11-30",
"count": 1
},
{
"date": "2023-12-01",
"count": 1
},
{
"date": "2023-12-02",
"count": 1
},
{
"date": "2023-12-03",
"count": 2
},
{
"date": "2023-12-04",
"count": 2
},
{
"date": "2023-12-07",
"count": 1
},
{
"date": "2023-12-08",
"count": 1
},
{
"date": "2023-12-09",
"count": 2
},
{
"date": "2023-12-10",
"count": 1
},
{
"date": "2023-12-11",
"count": 1
},
{
"date": "2023-12-13",
"count": 3
},
{
"date": "2023-12-14",
"count": 3
},
{
"date": "2023-12-19",
"count": 1
},
{
"date": "2023-12-20",
"count": 2
},
{
"date": "2023-12-21",
"count": 2
},
{
"date": "2023-12-22",
"count": 3
},
{
"date": "2023-12-26",
"count": 5
},
{
"date": "2023-12-28",
"count": 1
},
{
"date": "2023-12-30",
"count": 1
},
{
"date": "2024-01-02",
"count": 1
},
{
"date": "2024-01-03",
"count": 1
},
{
"date": "2024-01-04",
"count": 2
},
{
"date": "2024-01-05",
"count": 1
},
{
"date": "2024-01-08",
"count": 4
},
{
"date": "2024-01-09",
"count": 1
},
{
"date": "2024-01-12",
"count": 1
},
{
"date": "2024-01-13",
"count": 2
},
{
"date": "2024-01-15",
"count": 4
},
{
"date": "2024-01-16",
"count": 1
},
{
"date": "2024-01-18",
"count": 2
},
{
"date": "2024-01-20",
"count": 1
},
{
"date": "2024-01-21",
"count": 1
},
{
"date": "2024-01-23",
"count": 2
},
{
"date": "2024-01-25",
"count": 2
},
{
"date": "2024-01-27",
"count": 1
},
{
"date": "2024-01-28",
"count": 2
},
{
"date": "2024-01-31",
"count": 1
},
{
"date": "2024-02-01",
"count": 1
},
{
"date": "2024-02-02",
"count": 2
},
{
"date": "2024-02-05",
"count": 2
},
{
"date": "2024-02-06",
"count": 1
},
{
"date": "2024-02-07",
"count": 1
},
{
"date": "2024-02-08",
"count": 1
},
{
"date": "2024-02-10",
"count": 1
},
{
"date": "2024-02-11",
"count": 3
},
{
"date": "2024-02-15",
"count": 1
},
{
"date": "2024-02-16",
"count": 3
},
{
"date": "2024-02-18",
"count": 1
},
{
"date": "2024-02-22",
"count": 1
},
{
"date": "2024-02-23",
"count": 3
},
{
"date": "2024-02-24",
"count": 3
},
{
"date": "2024-02-26",
"count": 3
},
{
"date": "2024-02-27",
"count": 2
},
{
"date": "2024-02-28",
"count": 1
},
{
"date": "2024-02-29",
"count": 1
},
{
"date": "2024-03-01",
"count": 1
},
{
"date": "2024-03-02",
"count": 1
},
{
"date": "2024-03-04",
"count": 1
},
{
"date": "2024-03-05",
"count": 1
},
{
"date": "2024-03-06",
"count": 1
},
{
"date": "2024-03-07",
"count": 1
},
{
"date": "2024-03-08",
"count": 1
},
{
"date": "2024-03-10",
"count": 3
},
{
"date": "2024-03-12",
"count": 1
},
{
"date": "2024-03-13",
"count": 3
},
{
"date": "2024-03-14",
"count": 1
},
{
"date": "2024-03-15",
"count": 3
},
{
"date": "2024-03-18",
"count": 1
},
{
"date": "2024-03-20",
"count": 1
},
{
"date": "2024-03-21",
"count": 1
},
{
"date": "2024-03-22",
"count": 1
},
{
"date": "2024-03-23",
"count": 2
},
{
"date": "2024-03-25",
"count": 1
},
{
"date": "2024-03-26",
"count": 4
},
{
"date": "2024-03-29",
"count": 3
},
{
"date": "2024-03-30",
"count": 1
},
{
"date": "2024-04-02",
"count": 1
},
{
"date": "2024-04-03",
"count": 2
},
{
"date": "2024-04-04",
"count": 2
},
{
"date": "2024-04-05",
"count": 2
},
{
"date": "2024-04-06",
"count": 3
},
{
"date": "2024-04-07",
"count": 3
},
{
"date": "2024-04-08",
"count": 1
},
{
"date": "2024-04-09",
"count": 3
},
{
"date": "2024-04-10",
"count": 4
},
{
"date": "2024-04-11",
"count": 1
},
{
"date": "2024-04-12",
"count": 2
},
{
"date": "2024-04-13",
"count": 1
},
{
"date": "2024-04-16",
"count": 1
},
{
"date": "2024-04-17",
"count": 1
},
{
"date": "2024-04-18",
"count": 1
},
{
"date": "2024-04-19",
"count": 2
},
{
"date": "2024-04-21",
"count": 1
},
{
"date": "2024-04-22",
"count": 2
},
{
"date": "2024-04-23",
"count": 3
},
{
"date": "2024-04-24",
"count": 2
},
{
"date": "2024-04-25",
"count": 2
},
{
"date": "2024-04-26",
"count": 3
},
{
"date": "2024-04-27",
"count": 1
},
{
"date": "2024-04-28",
"count": 1
},
{
"date": "2024-04-30",
"count": 1
},
{
"date": "2024-05-04",
"count": 3
},
{
"date": "2024-05-05",
"count": 1
},
{
"date": "2024-05-06",
"count": 2
},
{
"date": "2024-05-07",
"count": 1
},
{
"date": "2024-05-09",
"count": 2
},
{
"date": "2024-05-10",
"count": 1
},
{
"date": "2024-05-12",
"count": 3
},
{
"date": "2024-05-13",
"count": 1
},
{
"date": "2024-05-14",
"count": 1
},
{
"date": "2024-05-15",
"count": 1
},
{
"date": "2024-05-16",
"count": 1
},
{
"date": "2024-05-17",
"count": 1
},
{
"date": "2024-05-18",
"count": 2
},
{
"date": "2024-05-19",
"count": 1
},
{
"date": "2024-05-20",
"count": 1
},
{
"date": "2024-05-21",
"count": 1
},
{
"date": "2024-05-22",
"count": 1
},
{
"date": "2024-05-23",
"count": 3
},
{
"date": "2024-05-27",
"count": 1
},
{
"date": "2024-05-29",
"count": 1
},
{
"date": "2024-05-30",
"count": 4
},
{
"date": "2024-06-01",
"count": 2
},
{
"date": "2024-06-02",
"count": 2
},
{
"date": "2024-06-03",
"count": 1
},
{
"date": "2024-06-04",
"count": 2
},
{
"date": "2024-06-05",
"count": 1
},
{
"date": "2024-06-08",
"count": 1
},
{
"date": "2024-06-11",
"count": 1
},
{
"date": "2024-06-12",
"count": 1
},
{
"date": "2024-06-13",
"count": 1
},
{
"date": "2024-06-14",
"count": 1
},
{
"date": "2024-06-17",
"count": 3
},
{
"date": "2024-06-19",
"count": 1
},
{
"date": "2024-06-20",
"count": 1
},
{
"date": "2024-06-21",
"count": 1
},
{
"date": "2024-06-23",
"count": 2
},
{
"date": "2024-06-24",
"count": 2
},
{
"date": "2024-06-25",
"count": 2
},
{
"date": "2024-06-28",
"count": 4
},
{
"date": "2024-07-01",
"count": 1
},
{
"date": "2024-07-02",
"count": 2
},
{
"date": "2024-07-03",
"count": 2
},
{
"date": "2024-07-04",
"count": 1
},
{
"date": "2024-07-07",
"count": 2
},
{
"date": "2024-07-08",
"count": 2
},
{
"date": "2024-07-09",
"count": 1
},
{
"date": "2024-07-11",
"count": 1
},
{
"date": "2024-07-12",
"count": 2
},
{
"date": "2024-07-14",
"count": 1
},
{
"date": "2024-07-17",
"count": 2
},
{
"date": "2024-07-18",
"count": 1
},
{
"date": "2024-07-19",
"count": 1
},
{
"date": "2024-07-22",
"count": 2
},
{
"date": "2024-07-23",
"count": 1
},
{
"date": "2024-07-24",
"count": 2
},
{
"date": "2024-07-25",
"count": 1
},
{
"date": "2024-07-26",
"count": 2
},
{
"date": "2024-07-27",
"count": 3
},
{
"date": "2024-07-31",
"count": 2
},
{
"date": "2024-08-05",
"count": 1
},
{
"date": "2024-08-06",
"count": 1
},
{
"date": "2024-08-07",
"count": 3
},
{
"date": "2024-08-08",
"count": 2
},
{
"date": "2024-08-11",
"count": 3
},
{
"date": "2024-08-12",
"count": 3
},
{
"date": "2024-08-13",
"count": 2
},
{
"date": "2024-08-16",
"count": 2
},
{
"date": "2024-08-17",
"count": 1
},
{
"date": "2024-08-21",
"count": 1
},
{
"date": "2024-08-23",
"count": 3
},
{
"date": "2024-08-24",
"count": 1
},
{
"date": "2024-08-25",
"count": 2
},
{
"date": "2024-08-26",
"count": 1
},
{
"date": "2024-08-27",
"count": 1
},
{
"date": "2024-08-30",
"count": 2
},
{
"date": "2024-08-31",
"count": 1
},
{
"date": "2024-09-02",
"count": 1
},
{
"date": "2024-09-03",
"count": 2
},
{
"date": "2024-09-04",
"count": 2
},
{
"date": "2024-09-06",
"count": 2
},
{
"date": "2024-09-08",
"count": 3
},
{
"date": "2024-09-10",
"count": 1
},
{
"date": "2024-09-11",
"count": 1
},
{
"date": "2024-09-12",
"count": 3
},
{
"date": "2024-09-13",
"count": 1
},
{
"date": "2024-09-14",
"count": 1
},
{
"date": "2024-09-15",
"count": 1
},
{
"date": "2024-09-17",
"count": 1
},
{
"date": "2024-09-18",
"count": 1
},
{
"date": "2024-09-20",
"count": 1
},
{
"date": "2024-09-24",
"count": 1
},
{
"date": "2024-09-25",
"count": 1
},
{
"date": "2024-09-26",
"count": 1
},
{
"date": "2024-09-28",
"count": 1
},
{
"date": "2024-09-30",
"count": 1
},
{
"date": "2024-10-01",
"count": 2
},
{
"date": "2024-10-02",
"count": 3
},
{
"date": "2024-10-03",
"count": 1
},
{
"date": "2024-10-04",
"count": 4
},
{
"date": "2024-10-05",
"count": 1
},
{
"date": "2024-10-07",
"count": 1
},
{
"date": "2024-10-08",
"count": 4
},
{
"date": "2024-10-09",
"count": 2
},
{
"date": "2024-10-10",
"count": 2
},
{
"date": "2024-10-12",
"count": 1
},
{
"date": "2024-10-13",
"count": 3
},
{
"date": "2024-10-14",
"count": 1
},
{
"date": "2024-10-16",
"count": 1
},
{
"date": "2024-10-17",
"count": 2
},
{
"date": "2024-10-21",
"count": 1
},
{
"date": "2024-10-22",
"count": 1
},
{
"date": "2024-10-24",
"count": 2
},
{
"date": "2024-10-26",
"count": 1
},
{
"date": "2024-10-29",
"count": 1
},
{
"date": "2024-10-30",
"count": 1
},
{
"date": "2024-10-31",
"count": 2
},
{
"date": "2024-11-05",
"count": 1
},
{
"date": "2024-11-07",
"count": 1
},
{
"date": "2024-11-10",
"count": 1
},
{
"date": "2024-11-11",
"count": 1
},
{
"date": "2024-11-12",
"count": 1
},
{
"date": "2024-11-14",
"count": 2
},
{
"date": "2024-11-15",
"count": 2
},
{
"date": "2024-11-17",
"count": 1
},
{
"date": "2024-11-19",
"count": 3
},
{
"date": "2024-11-20",
"count": 1
},
{
"date": "2024-11-21",
"count": 2
},
{
"date": "2024-11-23",
"count": 1
},
{
"date": "2024-11-24",
"count": 1
},
{
"date": "2024-11-25",
"count": 1
},
{
"date": "2024-11-26",
"count": 3
},
{
"date": "2024-11-28",
"count": 1
},
{
"date": "2024-11-29",
"count": 2
},
{
"date": "2024-11-30",
"count": 2
},
{
"date": "2024-12-01",
"count": 1
},
{
"date": "2024-12-04",
"count": 1
},
{
"date": "2024-12-05",
"count": 1
},
{
"date": "2024-12-06",
"count": 1
},
{
"date": "2024-12-08",
"count": 2
},
{
"date": "2024-12-10",
"count": 2
},
{
"date": "2024-12-11",
"count": 1
},
{
"date": "2024-12-12",
"count": 2
},
{
"date": "2024-12-13",
"count": 1
},
{
"date": "2024-12-15",
"count": 1
},
{
"date": "2024-12-17",
"count": 1
},
{
"date": "2024-12-18",
"count": 1
},
{
"date": "2024-12-20",
"count": 1
},
{
"date": "2024-12-21",
"count": 2
},
{
"date": "2024-12-23",
"count": 1
},
{
"date": "2024-12-24",
"count": 1
},
{
"date": "2024-12-25",
"count": 3
},
{
"date": "2024-12-27",
"count": 1
},
{
"date": "2024-12-28",
"count": 2
},
{
"date": "2024-12-30",
"count": 2
},
{
"date": "2024-12-31",
"count": 2
},
{
"date": "2025-01-03",
"count": 1
},
{
"date": "2025-01-05",
"count": 1
},
{
"date": "2025-01-07",
"count": 3
},
{
"date": "2025-01-08",
"count": 2
},
{
"date": "2025-01-09",
"count": 2
},
{
"date": "2025-01-10",
"count": 2
},
{
"date": "2025-01-12",
"count": 2
},
{
"date": "2025-01-13",
"count": 3
},
{
"date": "2025-01-15",
"count": 1
},
{
"date": "2025-01-16",
"count": 3
},
{
"date": "2025-01-19",
"count": 2
},
{
"date": "2025-01-20",
"count": 2
},
{
"date": "2025-01-22",
"count": 3
},
{
"date": "2025-01-23",
"count": 1
},
{
"date": "2025-01-25",
"count": 1
},
{
"date": "2025-01-27",
"count": 3
},
{
"date": "2025-01-28",
"count": 1
},
{
"date": "2025-01-31",
"count": 1
},
{
"date": "2025-02-01",
"count": 1
},
{
"date": "2025-02-02",
"count": 1
},
{
"date": "2025-02-03",
"count": 1
},
{
"date": "2025-02-04",
"count": 1
},
{
"date": "2025-02-05",
"count": 2
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-07",
"count": 2
},
{
"date": "2025-02-08",
"count": 2
},
{
"date": "2025-02-09",
"count": 1
},
{
"date": "2025-02-11",
"count": 1
},
{
"date": "2025-02-12",
"count": 2
},
{
"date": "2025-02-14",
"count": 1
},
{
"date": "2025-02-15",
"count": 1
},
{
"date": "2025-02-16",
"count": 2
},
{
"date": "2025-02-17",
"count": 2
},
{
"date": "2025-02-18",
"count": 4
},
{
"date": "2025-02-19",
"count": 1
},
{
"date": "2025-02-20",
"count": 1
},
{
"date": "2025-02-21",
"count": 1
},
{
"date": "2025-02-23",
"count": 1
},
{
"date": "2025-02-26",
"count": 1
},
{
"date": "2025-02-28",
"count": 1
},
{
"date": "2025-03-05",
"count": 1
},
{
"date": "2025-03-06",
"count": 2
},
{
"date": "2025-03-07",
"count": 1
},
{
"date": "2025-03-08",
"count": 1
},
{
"date": "2025-03-09",
"count": 1
},
{
"date": "2025-03-10",
"count": 3
},
{
"date": "2025-03-12",
"count": 1
},
{
"date": "2025-03-13",
"count": 3
},
{
"date": "2025-03-15",
"count": 2
},
{
"date": "2025-03-16",
"count": 1
},
{
"date": "2025-03-17",
"count": 1
},
{
"date": "2025-03-18",
"count": 1
},
{
"date": "2025-03-20",
"count": 2
},
{
"date": "2025-03-21",
"count": 1
},
{
"date": "2025-03-23",
"count": 2
},
{
"date": "2025-03-24",
"count": 1
},
{
"date": "2025-03-25",
"count": 1
},
{
"date": "2025-03-26",
"count": 2
},
{
"date": "2025-03-28",
"count": 2
},
{
"date": "2025-04-01",
"count": 1
},
{
"date": "2025-04-02",
"count": 2
},
{
"date": "2025-04-03",
"count": 2
},
{
"date": "2025-04-04",
"count": 1
},
{
"date": "2025-04-06",
"count": 2
},
{
"date": "2025-04-07",
"count": 1
},
{
"date": "2025-04-08",
"count": 3
},
{
"date": "2025-04-09",
"count": 1
},
{
"date": "2025-04-12",
"count": 1
},
{
"date": "2025-04-15",
"count": 1
},
{
"date": "2025-04-16",
"count": 1
},
{
"date": "2025-04-18",
"count": 2
},
{
"date": "2025-04-21",
"count": 2
},
{
"date": "2025-04-23",
"count": 2
},
{
"date": "2025-04-25",
"count": 2
},
{
"date": "2025-04-26",
"count": 1
},
{
"date": "2025-04-27",
"count": 4
},
{
"date": "2025-04-28",
"count": 2
},
{
"date": "2025-04-29",
"count": 1
},
{
"date": "2025-05-07",
"count": 1
},
{
"date": "2025-05-08",
"count": 5
},
{
"date": "2025-05-09",
"count": 1
},
{
"date": "2025-05-12",
"count": 1
},
{
"date": "2025-05-13",
"count": 1
},
{
"date": "2025-05-15",
"count": 2
},
{
"date": "2025-05-18",
"count": 2
},
{
"date": "2025-05-19",
"count": 2
},
{
"date": "2025-05-20",
"count": 1
},
{
"date": "2025-05-21",
"count": 1
},
{
"date": "2025-05-23",
"count": 3
},
{
"date": "2025-05-26",
"count": 1
},
{
"date": "2025-05-27",
"count": 2
},
{
"date": "2025-05-28",
"count": 1
},
{
"date": "2025-05-29",
"count": 1
},
{
"date": "2025-05-30",
"count": 1
},
{
"date": "2025-05-31",
"count": 1
},
{
"date": "2025-06-02",
"count": 4
},
{
"date": "2025-06-08",
"count": 1
},
{
"date": "2025-06-09",
"count": 3
},
{
"date": "2025-06-10",
"count": 1
},
{
"date": "2025-06-13",
"count": 1
},
{
"date": "2025-06-14",
"count": 1
},
{
"date": "2025-06-16",
"count": 1
},
{
"date": "2025-06-18",
"count": 1
},
{
"date": "2025-06-20",
"count": 2
},
{
"date": "2025-06-21",
"count": 1
},
{
"date": "2025-06-22",
"count": 1
},
{
"date": "2025-06-23",
"count": 3
},
{
"date": "2025-06-24",
"count": 1
},
{
"date": "2025-06-25",
"count": 2
},
{
"date": "2025-06-29",
"count": 1
},
{
"date": "2025-07-01",
"count": 1
},
{
"date": "2025-07-02",
"count": 4
},
{
"date": "2025-07-03",
"count": 3
},
{
"date": "2025-07-04",
"count": 1
},
{
"date": "2025-07-07",
"count": 1
},
{
"date": "2025-07-09",
"count": 3
},
{
"date": "2025-07-10",
"count": 1
},
{
"date": "2025-07-11",
"count": 1
},
{
"date": "2025-07-12",
"count": 1
},
{
"date": "2025-07-14",
"count": 1
},
{
"date": "2025-07-16",
"count": 1
},
{
"date": "2025-07-21",
"count": 1
},
{
"date": "2025-07-22",
"count": 4
},
{
"date": "2025-07-24",
"count": 1
},
{
"date": "2025-07-25",
"count": 1
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-07-29",
"count": 1
},
{
"date": "2025-07-31",
"count": 3
},
{
"date": "2025-08-01",
"count": 2
},
{
"date": "2025-08-03",
"count": 2
},
{
"date": "2025-08-05",
"count": 1
},
{
"date": "2025-08-06",
"count": 2
},
{
"date": "2025-08-07",
"count": 3
},
{
"date": "2025-08-09",
"count": 2
},
{
"date": "2025-08-10",
"count": 1
},
{
"date": "2025-08-12",
"count": 1
},
{
"date": "2025-08-13",
"count": 2
},
{
"date": "2025-08-15",
"count": 1
},
{
"date": "2025-08-16",
"count": 2
},
{
"date": "2025-08-17",
"count": 1
},
{
"date": "2025-08-18",
"count": 1
},
{
"date": "2025-08-19",
"count": 1
},
{
"date": "2025-08-26",
"count": 1
},
{
"date": "2025-08-28",
"count": 2
},
{
"date": "2025-08-29",
"count": 2
},
{
"date": "2025-08-30",
"count": 2
},
{
"date": "2025-08-31",
"count": 2
},
{
"date": "2025-09-01",
"count": 1
},
{
"date": "2025-09-02",
"count": 1
},
{
"date": "2025-09-03",
"count": 1
},
{
"date": "2025-09-09",
"count": 1
},
{
"date": "2025-09-10",
"count": 1
},
{
"date": "2025-09-15",
"count": 2
},
{
"date": "2025-09-16",
"count": 1
},
{
"date": "2025-09-17",
"count": 1
},
{
"date": "2025-09-21",
"count": 2
},
{
"date": "2025-09-22",
"count": 1
},
{
"date": "2025-09-24",
"count": 3
},
{
"date": "2025-09-26",
"count": 2
},
{
"date": "2025-09-27",
"count": 1
},
{
"date": "2025-09-28",
"count": 1
},
{
"date": "2025-10-01",
"count": 5
},
{
"date": "2025-10-05",
"count": 1
},
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2025-10-08",
"count": 1
},
{
"date": "2025-10-10",
"count": 1
},
{
"date": "2025-10-11",
"count": 1
},
{
"date": "2025-10-13",
"count": 1
},
{
"date": "2025-10-15",
"count": 1
},
{
"date": "2025-10-17",
"count": 1
},
{
"date": "2025-10-19",
"count": 2
},
{
"date": "2025-10-20",
"count": 2
},
{
"date": "2025-10-22",
"count": 1
},
{
"date": "2025-10-23",
"count": 1
},
{
"date": "2025-10-24",
"count": 2
},
{
"date": "2025-10-25",
"count": 1
},
{
"date": "2025-10-26",
"count": 2
},
{
"date": "2025-10-27",
"count": 1
},
{
"date": "2025-10-30",
"count": 1
},
{
"date": "2025-10-31",
"count": 1
},
{
"date": "2025-11-02",
"count": 1
},
{
"date": "2025-11-03",
"count": 1
},
{
"date": "2025-11-06",
"count": 1
},
{
"date": "2025-11-09",
"count": 3
},
{
"date": "2025-11-10",
"count": 10
},
{
"date": "2025-11-11",
"count": 1
},
{
"date": "2025-11-12",
"count": 1
},
{
"date": "2025-11-13",
"count": 1
},
{
"date": "2025-11-14",
"count": 1
},
{
"date": "2025-11-17",
"count": 1
},
{
"date": "2025-11-18",
"count": 1
},
{
"date": "2025-11-19",
"count": 2
},
{
"date": "2025-11-20",
"count": 2
},
{
"date": "2025-11-22",
"count": 1
},
{
"date": "2025-11-23",
"count": 2
},
{
"date": "2025-11-24",
"count": 2
},
{
"date": "2025-11-25",
"count": 2
},
{
"date": "2025-11-27",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
},
{
"date": "2025-11-30",
"count": 1
},
{
"date": "2025-12-02",
"count": 1
},
{
"date": "2025-12-05",
"count": 1
},
{
"date": "2025-12-06",
"count": 1
},
{
"date": "2025-12-08",
"count": 1
},
{
"date": "2025-12-12",
"count": 1
},
{
"date": "2025-12-13",
"count": 2
},
{
"date": "2025-12-15",
"count": 1
},
{
"date": "2025-12-17",
"count": 1
},
{
"date": "2025-12-19",
"count": 2
},
{
"date": "2025-12-20",
"count": 2
},
{
"date": "2025-12-22",
"count": 1
},
{
"date": "2025-12-23",
"count": 1
},
{
"date": "2025-12-24",
"count": 1
},
{
"date": "2025-12-26",
"count": 2
},
{
"date": "2025-12-27",
"count": 1
},
{
"date": "2025-12-29",
"count": 2
},
{
"date": "2026-01-01",
"count": 1
},
{
"date": "2026-01-02",
"count": 1
},
{
"date": "2026-01-03",
"count": 2
},
{
"date": "2026-01-04",
"count": 2
},
{
"date": "2026-01-06",
"count": 1
},
{
"date": "2026-01-07",
"count": 1
},
{
"date": "2026-01-09",
"count": 1
},
{
"date": "2026-01-10",
"count": 6
},
{
"date": "2026-01-11",
"count": 2
},
{
"date": "2026-01-12",
"count": 4
},
{
"date": "2026-01-13",
"count": 2
},
{
"date": "2026-01-14",
"count": 1
},
{
"date": "2026-01-15",
"count": 1
},
{
"date": "2026-01-16",
"count": 1
},
{
"date": "2026-01-17",
"count": 1
},
{
"date": "2026-01-18",
"count": 1
},
{
"date": "2026-01-19",
"count": 3
},
{
"date": "2026-01-20",
"count": 2
},
{
"date": "2026-01-21",
"count": 2
},
{
"date": "2026-01-22",
"count": 3
},
{
"date": "2026-01-23",
"count": 2
},
{
"date": "2026-01-24",
"count": 2
},
{
"date": "2026-01-25",
"count": 5
},
{
"date": "2026-01-26",
"count": 2
},
{
"date": "2026-01-27",
"count": 3
},
{
"date": "2026-01-28",
"count": 1
},
{
"date": "2026-01-29",
"count": 3
},
{
"date": "2026-01-30",
"count": 2
},
{
"date": "2026-02-02",
"count": 1
},
{
"date": "2026-02-03",
"count": 1
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-02-10",
"count": 11
},
{
"date": "2026-02-11",
"count": 1
},
{
"date": "2026-02-13",
"count": 1
},
{
"date": "2026-02-15",
"count": 2
},
{
"date": "2026-02-18",
"count": 3
},
{
"date": "2026-02-20",
"count": 1
},
{
"date": "2026-02-22",
"count": 1
},
{
"date": "2026-02-24",
"count": 1
},
{
"date": "2026-02-25",
"count": 1
},
{
"date": "2026-02-26",
"count": 1
},
{
"date": "2026-02-28",
"count": 2
},
{
"date": "2026-03-02",
"count": 1
},
{
"date": "2026-03-03",
"count": 1
},
{
"date": "2026-03-04",
"count": 1
},
{
"date": "2026-03-05",
"count": 1
},
{
"date": "2026-03-08",
"count": 1
},
{
"date": "2026-03-09",
"count": 2
},
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-12",
"count": 3
},
{
"date": "2026-03-14",
"count": 1
},
{
"date": "2026-03-16",
"count": 1
},
{
"date": "2026-03-18",
"count": 3
},
{
"date": "2026-03-19",
"count": 3
},
{
"date": "2026-03-22",
"count": 1
},
{
"date": "2026-03-28",
"count": 1
},
{
"date": "2026-03-29",
"count": 3
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-03-31",
"count": 1
},
{
"date": "2026-04-01",
"count": 2
},
{
"date": "2026-04-03",
"count": 2
},
{
"date": "2026-04-04",
"count": 2
},
{
"date": "2026-04-05",
"count": 1
},
{
"date": "2026-04-07",
"count": 2
},
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-04-11",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-14",
"count": 1
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-04-16",
"count": 3
},
{
"date": "2026-04-17",
"count": 2
},
{
"date": "2026-04-18",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-04-22",
"count": 1
},
{
"date": "2026-04-24",
"count": 1
},
{
"date": "2026-04-27",
"count": 2
},
{
"date": "2026-04-28",
"count": 1
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-02",
"count": 2
},
{
"date": "2026-05-03",
"count": 1
},
{
"date": "2026-05-05",
"count": 1
},
{
"date": "2026-05-06",
"count": 3
},
{
"date": "2026-05-10",
"count": 4
},
{
"date": "2026-05-11",
"count": 1
},
{
"date": "2026-05-12",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-05-18",
"count": 3
},
{
"date": "2026-05-21",
"count": 1
},
{
"date": "2026-05-22",
"count": 1
},
{
"date": "2026-05-23",
"count": 2
},
{
"date": "2026-05-24",
"count": 2
},
{
"date": "2026-05-25",
"count": 2
},
{
"date": "2026-05-26",
"count": 2
},
{
"date": "2026-05-28",
"count": 2
},
{
"date": "2026-05-30",
"count": 1
},
{
"date": "2026-06-01",
"count": 1
},
{
"date": "2026-06-02",
"count": 1
},
{
"date": "2026-06-03",
"count": 1
},
{
"date": "2026-06-04",
"count": 3
},
{
"date": "2026-06-05",
"count": 2
},
{
"date": "2026-06-07",
"count": 1
},
{
"date": "2026-06-10",
"count": 3
},
{
"date": "2026-06-11",
"count": 1
},
{
"date": "2026-06-12",
"count": 2
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-16",
"count": 2
},
{
"date": "2026-06-17",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-06-22",
"count": 2
},
{
"date": "2026-06-23",
"count": 1
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-06-25",
"count": 1
},
{
"date": "2026-06-28",
"count": 1
},
{
"date": "2026-06-29",
"count": 2
},
{
"date": "2026-07-02",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-09",
"count": 1
},
{
"date": "2026-07-10",
"count": 2
},
{
"date": "2026-07-11",
"count": 2
},
{
"date": "2026-07-14",
"count": 1
},
{
"date": "2026-07-15",
"count": 2
},
{
"date": "2026-07-17",
"count": 1
},
{
"date": "2026-07-20",
"count": 4
},
{
"date": "2026-07-21",
"count": 2
},
{
"date": "2026-07-23",
"count": 3
},
{
"date": "2026-07-24",
"count": 5
},
{
"date": "2026-07-25",
"count": 2
},
{
"date": "2026-07-26",
"count": 1
},
{
"date": "2026-07-29",
"count": 2
}
],
"complete": false,
"collected": 1000,
"total_forks": 6316
},
"star_history": null,
"open_issues_and_prs": 1465
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example",
"examples",
"sample",
"samples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"buildSrc/src/main/graphql/org/springframework/security/convention/versions/CreateIssue.graphql",
"buildSrc/src/main/graphql/org/springframework/security/convention/versions/FindCreateIssueInput.graphql",
"buildSrc/src/main/graphql/org/springframework/security/convention/versions/RateLimit.graphql"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"build.gradle",
"buildSrc/build.gradle",
"buildSrc/src/test/resources/samples/integrationtest/withgroovy/build.gradle",
"buildSrc/src/test/resources/samples/integrationtest/withjava/build.gradle",
"buildSrc/src/test/resources/samples/integrationtest/withpropdeps/build.gradle",
"buildSrc/src/test/resources/samples/jacoco/java/build.gradle",
"buildSrc/src/test/resources/samples/javadocapi/multimodule/api/build.gradle",
"buildSrc/src/test/resources/samples/javadocapi/multimodule/build.gradle",
"buildSrc/src/test/resources/samples/javadocapi/multimodule/impl/build.gradle",
"buildSrc/src/test/resources/samples/javadocapi/multimodule/sample/build.gradle",
"buildSrc/src/test/resources/samples/maven/install-with-springio/build.gradle",
"buildSrc/src/test/resources/samples/maven/install/build.gradle",
"buildSrc/src/test/resources/samples/maven/signing/build.gradle",
"buildSrc/src/test/resources/samples/maven/upload/build.gradle",
"buildSrc/src/test/resources/samples/showcase/build.gradle",
"buildSrc/src/test/resources/samples/testsconfiguration/build.gradle",
"buildSrc/src/test/resources/samples/testsconfiguration/core/build.gradle",
"buildSrc/src/test/resources/samples/testsconfiguration/web/build.gradle"
],
"largest_source_bytes": 202111,
"source_files_sampled": 4725,
"oversized_source_files": 9,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"build.gradle",
"buildSrc/build.gradle",
"docs/package.json",
"javascript/package.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.11",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jxr-9vmj-r5cp",
"GHSA-f886-m6hf-6m8v",
"GHSA-mh99-v99m-4gvg",
"GHSA-v6h2-p8h4-qcjw"
],
"fixed_version": "5.0.8",
"advisory_count": 4,
"oldest_advisory_days": 416
},
{
"name": "brace-expansion",
"direct": false,
"version": "2.0.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jxr-9vmj-r5cp",
"GHSA-f886-m6hf-6m8v",
"GHSA-mh99-v99m-4gvg",
"GHSA-v6h2-p8h4-qcjw"
],
"fixed_version": "5.0.8",
"advisory_count": 4,
"oldest_advisory_days": 416
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.3",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3xgq-45jj-v275"
],
"fixed_version": "7.0.5",
"advisory_count": 1,
"oldest_advisory_days": 629
},
{
"name": "js-yaml",
"direct": false,
"version": "4.2.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-52cp-r559-cp3m"
],
"fixed_version": "4.3.0",
"advisory_count": 1,
"oldest_advisory_days": 10
},
{
"name": "path-to-regexp",
"direct": false,
"version": "6.2.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-9wv6-86v2-598j"
],
"fixed_version": "8.0.0",
"advisory_count": 1,
"oldest_advisory_days": 689
},
{
"name": "serialize-javascript",
"direct": false,
"version": "6.0.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 8.1,
"advisory_ids": [
"GHSA-5c6j-r48x-rmvq",
"GHSA-qj8w-gfj5-8c6v"
],
"fixed_version": "7.0.5",
"advisory_count": 2,
"oldest_advisory_days": 152
},
{
"name": "ajv",
"direct": false,
"version": "6.12.6",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-2g4f-4pwh-qvx6"
],
"fixed_version": "8.18.0",
"advisory_count": 1,
"oldest_advisory_days": 169
},
{
"name": "diff",
"direct": false,
"version": "5.2.0",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-73rr-hh4g-fpgx"
],
"fixed_version": "8.0.3",
"advisory_count": 1,
"oldest_advisory_days": 197
},
{
"name": "micromatch",
"direct": false,
"version": "4.0.7",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-952p-6rrq-rcjv"
],
"fixed_version": "4.0.8",
"advisory_count": 1,
"oldest_advisory_days": 807
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 6,
"moderate": 3
},
"advisory_count": 16,
"affected_count": 9,
"assessed_count": 261,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven",
"npm"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@antora/atlas-extension",
"direct": false,
"version": "1.0.0-alpha.5",
"ecosystem": "npm"
},
{
"name": "@antora/collector-extension",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@asciidoctor/tabs",
"direct": false,
"version": "1.0.0-beta.6",
"ecosystem": "npm"
},
{
"name": "@esbuild/aix-ppc64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ia32",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-loong64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-mips64el",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ppc64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-riscv64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-s390x",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openharmony-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/sunos-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-ia32",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@eslint-community/eslint-utils",
"direct": false,
"version": "4.4.0",
"ecosystem": "npm"
},
{
"name": "@eslint-community/regexpp",
"direct": false,
"version": "4.11.0",
"ecosystem": "npm"
},
{
"name": "@eslint/config-array",
"direct": false,
"version": "0.17.0",
"ecosystem": "npm"
},
{
"name": "@eslint/eslintrc",
"direct": false,
"version": "2.1.4",
"ecosystem": "npm"
},
{
"name": "@eslint/eslintrc",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "@eslint/js",
"direct": false,
"version": "8.57.0",
"ecosystem": "npm"
},
{
"name": "@eslint/js",
"direct": false,
"version": "9.6.0",
"ecosystem": "npm"
},
{
"name": "@eslint/object-schema",
"direct": false,
"version": "2.1.4",
"ecosystem": "npm"
},
{
"name": "@humanwhocodes/config-array",
"direct": false,
"version": "0.11.14",
"ecosystem": "npm"
},
{
"name": "@humanwhocodes/module-importer",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "@humanwhocodes/object-schema",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "@humanwhocodes/retry",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "@nodelib/fs.scandir",
"direct": false,
"version": "2.1.5",
"ecosystem": "npm"
},
{
"name": "@nodelib/fs.stat",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "@nodelib/fs.walk",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "@pkgr/core",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "@sinonjs/commons",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "@sinonjs/commons",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "@sinonjs/fake-timers",
"direct": false,
"version": "11.2.2",
"ecosystem": "npm"
},
{
"name": "@sinonjs/samsam",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "@sinonjs/text-encoding",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "@springio/antora-extensions",
"direct": false,
"version": "1.14.12",
"ecosystem": "npm"
},
{
"name": "@springio/asciidoctor-extensions",
"direct": false,
"version": "1.0.0-alpha.18",
"ecosystem": "npm"
},
{
"name": "@types/eslint",
"direct": false,
"version": "8.56.10",
"ecosystem": "npm"
},
{
"name": "@types/estree",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "@types/json-schema",
"direct": false,
"version": "7.0.15",
"ecosystem": "npm"
},
{
"name": "@types/prettier",
"direct": false,
"version": "2.7.3",
"ecosystem": "npm"
},
{
"name": "@types/sinon",
"direct": false,
"version": "17.0.3",
"ecosystem": "npm"
},
{
"name": "@types/sinonjs__fake-timers",
"direct": false,
"version": "8.1.5",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/parser",
"direct": false,
"version": "5.62.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/scope-manager",
"direct": false,
"version": "5.62.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/types",
"direct": false,
"version": "5.62.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/typescript-estree",
"direct": false,
"version": "5.62.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/visitor-keys",
"direct": false,
"version": "5.62.0",
"ecosystem": "npm"
},
{
"name": "@ungap/structured-clone",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "acorn",
"direct": false,
"version": "8.12.1",
"ecosystem": "npm"
},
{
"name": "acorn-jsx",
"direct": false,
"version": "5.3.2",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "6.12.6",
"ecosystem": "npm"
},
{
"name": "ansi-colors",
"direct": false,
"version": "4.1.3",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "3.2.1",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "antora",
"direct": false,
"version": "3.2.0-rc.2",
"ecosystem": "npm"
},
{
"name": "anymatch",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "argparse",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "array-union",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "assertion-error",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "binary-extensions",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.11",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "braces",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "browser-stdout",
"direct": false,
"version": "1.3.1",
"ecosystem": "npm"
},
{
"name": "callsites",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "camelcase",
"direct": false,
"version": "6.3.0",
"ecosystem": "npm"
},
{
"name": "chai",
"direct": false,
"version": "4.3.10",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "check-error",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "chokidar",
"direct": false,
"version": "3.5.3",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "7.0.4",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "1.9.3",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "common-tags",
"direct": false,
"version": "1.8.2",
"ecosystem": "npm"
},
{
"name": "concat-map",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.3",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.3.5",
"ecosystem": "npm"
},
{
"name": "decamelize",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "deep-eql",
"direct": false,
"version": "4.1.4",
"ecosystem": "npm"
},
{
"name": "deep-is",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "diff",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "dir-glob",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "dlv",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "doctrine",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "esbuild",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "eslint",
"direct": false,
"version": "8.57.0",
"ecosystem": "npm"
},
{
"name": "eslint",
"direct": false,
"version": "9.6.0",
"ecosystem": "npm"
},
{
"name": "eslint-config-prettier",
"direct": false,
"version": "9.1.0",
"ecosystem": "npm"
},
{
"name": "eslint-plugin-prettier",
"direct": false,
"version": "5.1.3",
"ecosystem": "npm"
},
{
"name": "eslint-scope",
"direct": false,
"version": "7.2.2",
"ecosystem": "npm"
},
{
"name": "eslint-scope",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "eslint-visitor-keys",
"direct": false,
"version": "3.4.3",
"ecosystem": "npm"
},
{
"name": "eslint-visitor-keys",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "espree",
"direct": false,
"version": "10.1.0",
"ecosystem": "npm"
},
{
"name": "espree",
"direct": false,
"version": "9.6.1",
"ecosystem": "npm"
},
{
"name": "esquery",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "esrecurse",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "estraverse",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "esutils",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-diff",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "fast-glob",
"direct": false,
"version": "3.3.2",
"ecosystem": "npm"
},
{
"name": "fast-json-stable-stringify",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "fast-levenshtein",
"direct": false,
"version": "2.0.6",
"ecosystem": "npm"
},
{
"name": "fastq",
"direct": false,
"version": "1.17.1",
"ecosystem": "npm"
},
{
"name": "file-entry-cache",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "file-entry-cache",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "fill-range",
"direct": false,
"version": "7.1.1",
"ecosystem": "npm"
},
{
"name": "find-up",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "flat",
"direct": false,
"version": "5.0.2",
"ecosystem": "npm"
},
{
"name": "flat-cache",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "flat-cache",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "flatted",
"direct": false,
"version": "3.4.2",
"ecosystem": "npm"
},
{
"name": "fs.realpath",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-func-name",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "8.1.0",
"ecosystem": "npm"
},
{
"name": "glob-parent",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "glob-parent",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "globals",
"direct": false,
"version": "13.24.0",
"ecosystem": "npm"
},
{
"name": "globals",
"direct": false,
"version": "14.0.0",
"ecosystem": "npm"
},
{
"name": "globals",
"direct": false,
"version": "15.8.0",
"ecosystem": "npm"
},
{
"name": "globby",
"direct": false,
"version": "11.1.0",
"ecosystem": "npm"
},
{
"name": "graphemer",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "has-ansi",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "he",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "ignore",
"direct": false,
"version": "5.3.1",
"ecosystem": "npm"
},
{
"name": "import-fresh",
"direct": false,
"version": "3.3.0",
"ecosystem": "npm"
},
{
"name": "imurmurhash",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "indent-string",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "inflight",
"direct": false,
"version": "1.0.6",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "is-binary-path",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "is-extglob",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-glob",
"direct": false,
"version": "4.0.3",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "is-path-inside",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "is-plain-obj",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "is-unicode-supported",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "js-yaml",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "json-buffer",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "json-stable-stringify-without-jsonify",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "just-extend",
"direct": false,
"version": "6.2.0",
"ecosystem": "npm"
},
{
"name": "keyv",
"direct": false,
"version": "4.5.4",
"ecosystem": "npm"
},
{
"name": "levn",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "locate-path",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "lodash",
"direct": false,
"version": "4.18.1",
"ecosystem": "npm"
},
{
"name": "lodash.get",
"direct": false,
"version": "4.4.2",
"ecosystem": "npm"
},
{
"name": "lodash.merge",
"direct": false,
"version": "4.6.2",
"ecosystem": "npm"
},
{
"name": "log-symbols",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "loglevel",
"direct": false,
"version": "1.9.1",
"ecosystem": "npm"
},
{
"name": "loglevel-colored-level-prefix",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "loupe",
"direct": false,
"version": "2.3.7",
"ecosystem": "npm"
},
{
"name": "merge2",
"direct": false,
"version": "1.4.1",
"ecosystem": "npm"
},
{
"name": "micromatch",
"direct": false,
"version": "4.0.7",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "3.1.5",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "5.1.9",
"ecosystem": "npm"
},
{
"name": "mocha",
"direct": false,
"version": "10.8.2",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "natural-compare",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "nise",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "normalize-path",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "optionator",
"direct": false,
"version": "0.9.4",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "p-locate",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "parent-module",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "path-exists",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "path-is-absolute",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-to-regexp",
"direct": false,
"version": "6.2.2",
"ecosystem": "npm"
},
{
"name": "path-type",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "pathval",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "prelude-ls",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "prettier",
"direct": false,
"version": "2.8.8",
"ecosystem": "npm"
},
{
"name": "prettier",
"direct": false,
"version": "3.3.2",
"ecosystem": "npm"
},
{
"name": "prettier-eslint",
"direct": false,
"version": "15.0.1",
"ecosystem": "npm"
},
{
"name": "prettier-linter-helpers",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "pretty-format",
"direct": false,
"version": "23.6.0",
"ecosystem": "npm"
},
{
"name": "punycode",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "queue-microtask",
"direct": false,
"version": "1.2.3",
"ecosystem": "npm"
},
{
"name": "randombytes",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "readdirp",
"direct": false,
"version": "3.6.0",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-relative",
"direct": false,
"version": "0.8.7",
"ecosystem": "npm"
},
{
"name": "resolve-from",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "reusify",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "rimraf",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "run-parallel",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "safe-buffer",
"direct": false,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.6.2",
"ecosystem": "npm"
},
{
"name": "serialize-javascript",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "sinon",
"direct": false,
"version": "18.0.0",
"ecosystem": "npm"
},
{
"name": "slash",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "strip-json-comments",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "8.1.1",
"ecosystem": "npm"
},
{
"name": "synckit",
"direct": false,
"version": "0.8.8",
"ecosystem": "npm"
},
{
"name": "text-table",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "to-regex-range",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "1.14.1",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "2.6.3",
"ecosystem": "npm"
},
{
"name": "tsutils",
"direct": false,
"version": "3.21.0",
"ecosystem": "npm"
},
{
"name": "type-check",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "type-detect",
"direct": false,
"version": "4.0.8",
"ecosystem": "npm"
},
{
"name": "type-fest",
"direct": false,
"version": "0.20.2",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "4.9.5",
"ecosystem": "npm"
},
{
"name": "uri-js",
"direct": false,
"version": "4.4.1",
"ecosystem": "npm"
},
{
"name": "vue-eslint-parser",
"direct": false,
"version": "8.3.0",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "word-wrap",
"direct": false,
"version": "1.2.5",
"ecosystem": "npm"
},
{
"name": "workerpool",
"direct": false,
"version": "6.5.1",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "16.2.0",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "20.2.9",
"ecosystem": "npm"
},
{
"name": "yargs-unparser",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "yocto-queue",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 261,
"direct_count": 0,
"indirect_count": 261
}
},
"maintainership": {
"issues": {
"open_prs": 195,
"merged_prs": 3659,
"open_issues": 1270,
"closed_ratio": 0.908,
"closed_issues": 12524,
"closed_unmerged_prs": 1751
},
"bus_factor": 3,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "rwinch",
"commits": 3573,
"avatar_url": "https://avatars.githubusercontent.com/u/362503?v=4"
},
{
"type": "User",
"login": "jzheaux",
"commits": 3051,
"avatar_url": "https://avatars.githubusercontent.com/u/3627351?v=4"
},
{
"type": "User",
"login": "tekul",
"commits": 2822,
"avatar_url": "https://avatars.githubusercontent.com/u/191720?v=4"
},
{
"type": "User",
"login": "marcusdacoregio",
"commits": 1460,
"avatar_url": "https://avatars.githubusercontent.com/u/13255302?v=4"
},
{
"type": "User",
"login": "jgrandja",
"commits": 894,
"avatar_url": "https://avatars.githubusercontent.com/u/10884212?v=4"
},
{
"type": "User",
"login": "eleftherias",
"commits": 603,
"avatar_url": "https://avatars.githubusercontent.com/u/6599803?v=4"
},
{
"type": "User",
"login": "sjohnr",
"commits": 269,
"avatar_url": "https://avatars.githubusercontent.com/u/5248162?v=4"
},
{
"type": "User",
"login": "ngocnhan-tran1996",
"commits": 125,
"avatar_url": "https://avatars.githubusercontent.com/u/107504266?v=4"
},
{
"type": "User",
"login": "philwebb",
"commits": 76,
"avatar_url": "https://avatars.githubusercontent.com/u/519772?v=4"
},
{
"type": "User",
"login": "fhanik",
"commits": 68,
"avatar_url": "https://avatars.githubusercontent.com/u/607429?v=4"
}
],
"contributors_sampled": 98,
"top_contributor_share": 0.254
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"auto-merge-dependabot.yml",
"check-snapshots.yml",
"clean_build_artifacts.yml",
"codeql.yml",
"continuous-integration-workflow.yml",
"defer-issues.yml",
"deploy-docs.yml",
"finalize-release.yml",
"gradle-wrapper-upgrade-execution.yml",
"milestone-spring-releasetrain.yml",
"pr-build-workflow.yml",
"release-scheduler.yml",
"update-antora-ui-spring.yml",
"update-scheduled-release-version.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "22 out of 22 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/8 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 54 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "12 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f94cef17b8627283ee0c53229bdbe77a7fe4dae9",
"ran_at": "2026-07-30T23:32:38Z",
"aggregate_score": 6.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-30T10:46:28Z",
"oldest_open_prs": [
{
"number": 16446,
"created_at": "2025-01-19T22:16:51Z",
"last_comment_at": "2026-03-26T12:59:27Z",
"last_comment_author": "luschmar"
},
{
"number": 16698,
"created_at": "2025-03-06T05:02:13Z",
"last_comment_at": "2025-04-06T06:46:43Z",
"last_comment_author": "alswp006"
},
{
"number": 16704,
"created_at": "2025-03-07T09:39:29Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 16770,
"created_at": "2025-03-19T09:48:43Z",
"last_comment_at": "2025-05-13T13:04:46Z",
"last_comment_author": "franticticktick"
},
{
"number": 16857,
"created_at": "2025-04-01T12:02:14Z",
"last_comment_at": "2025-08-11T18:09:11Z",
"last_comment_author": "yybmion"
},
{
"number": 16871,
"created_at": "2025-04-03T06:40:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 16911,
"created_at": "2025-04-09T05:32:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 16946,
"created_at": "2025-04-16T12:36:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 16954,
"created_at": "2025-04-18T02:53:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 16970,
"created_at": "2025-04-20T05:29:07Z",
"last_comment_at": "2026-03-16T23:16:00Z",
"last_comment_author": "evgeniycheban"
},
{
"number": 17035,
"created_at": "2025-05-03T08:31:29Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 17118,
"created_at": "2025-05-15T16:28:44Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 17120,
"created_at": "2025-05-15T20:56:02Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 17171,
"created_at": "2025-05-26T09:53:43Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 17178,
"created_at": "2025-05-28T04:16:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 17324,
"created_at": "2025-06-21T08:46:38Z",
"last_comment_at": "2025-06-21T08:49:28Z",
"last_comment_author": "minkukjo"
},
{
"number": 17358,
"created_at": "2025-06-25T14:19:28Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 17384,
"created_at": "2025-06-29T16:24:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 17485,
"created_at": "2025-07-04T16:53:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 17492,
"created_at": "2025-07-07T18:06:38Z",
"last_comment_at": "2025-07-08T08:39:26Z",
"last_comment_author": "DeepDhamala"
}
],
"last_merged_pr_at": "2026-07-29T03:16:10Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 1910,
"created_at": "2011-02-04T07:49:39Z",
"last_comment_at": "2014-07-14T08:29:51Z",
"last_comment_author": "spring-projects-issues"
},
{
"number": 2048,
"created_at": "2011-09-16T23:57:41Z",
"last_comment_at": "2011-10-28T02:40:00Z",
"last_comment_author": "spring-projects-issues"
},
{
"number": 2053,
"created_at": "2011-09-21T12:16:34Z",
"last_comment_at": "2024-04-09T08:23:23Z",
"last_comment_author": "skinnydan72"
},
{
"number": 2098,
"created_at": "2011-12-09T05:18:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2119,
"created_at": "2012-01-15T08:27:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2127,
"created_at": "2012-02-03T22:11:57Z",
"last_comment_at": "2012-02-08T03:54:17Z",
"last_comment_author": "spring-projects-issues"
},
{
"number": 2138,
"created_at": "2012-02-06T08:20:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2142,
"created_at": "2012-02-14T13:09:05Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2144,
"created_at": "2012-02-16T12:14:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2150,
"created_at": "2012-02-22T15:50:36Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2168,
"created_at": "2012-03-20T08:39:25Z",
"last_comment_at": "2012-03-21T06:44:08Z",
"last_comment_author": "spring-projects-issues"
},
{
"number": 2182,
"created_at": "2012-04-26T19:26:02Z",
"last_comment_at": "2012-04-27T01:00:22Z",
"last_comment_author": "spring-projects-issues"
},
{
"number": 2185,
"created_at": "2012-05-12T08:13:36Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2188,
"created_at": "2012-05-21T04:06:59Z",
"last_comment_at": "2018-12-06T14:35:01Z",
"last_comment_author": "OlegSkr"
},
{
"number": 2191,
"created_at": "2012-05-28T07:47:11Z",
"last_comment_at": "2012-05-28T21:46:57Z",
"last_comment_author": "spring-projects-issues"
},
{
"number": 2209,
"created_at": "2012-06-28T11:13:07Z",
"last_comment_at": "2016-02-06T07:23:46Z",
"last_comment_author": "spring-projects-issues"
},
{
"number": 2211,
"created_at": "2012-06-29T11:28:02Z",
"last_comment_at": "2012-06-30T03:33:34Z",
"last_comment_author": "spring-projects-issues"
},
{
"number": 2222,
"created_at": "2012-07-14T12:00:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2233,
"created_at": "2012-07-14T12:08:56Z",
"last_comment_at": "2012-07-16T08:34:20Z",
"last_comment_author": "spring-projects-issues"
},
{
"number": 2244,
"created_at": "2012-07-26T08:10:00Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/spring-projects/spring-security",
"host": "github.com",
"name": "spring-security",
"owner": "spring-projects"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": null,
"notes": [],
"value": 88,
"inputs": {
"security": 73,
"vitality": 100,
"community": 100,
"governance": 75,
"engineering": 94
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 100,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"commits_last_year": 1967,
"human_commit_share": 0.27,
"days_since_last_push": 1,
"active_weeks_last_year": 52
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "52/52 weeks with commits",
"points": 36,
"status": "met",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 52
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1967 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1967
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 100,
"latest_release_tag": "7.1.0",
"releases_from_tags": false,
"days_since_latest_release": 51,
"mean_days_between_releases": 12.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 51 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 51
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~12.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 12.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 21,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 21 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 21
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "excellent",
"name": "Community & Adoption",
"value": 100,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "excellent",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"forks": 6316,
"stars": 9590,
"watchers": 409,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "9,590 stars",
"points": 60,
"status": "met",
"details": [
{
"code": "stars",
"params": {
"count": 9590
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "6,316 forks",
"points": 25,
"status": "met",
"details": [
{
"code": "forks",
"params": {
"count": 6316
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "409 watchers",
"points": 14.5,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 409
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": true,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 7.2,
"status": "met",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 75,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 98,
"top_contributor_share": 0.254
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 25% of commits",
"points": 16.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 25
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "98 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 98
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 54 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"merged_prs": 3659,
"open_issues": 1270,
"closed_issues": 12524,
"issue_closed_ratio": 0.908,
"closed_unmerged_prs": 1751
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "91% of issues closed",
"points": 42.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 91
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "3659/5410 decided PRs merged",
"points": 25.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 3659,
"decided": 5410
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/8 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 16783,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "spring-projects",
"public_repos": 77,
"account_age_days": 5875
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "16,783 followers of spring-projects",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 16783,
"login": "spring-projects"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "77 public repos, account ~16 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 77
}
},
{
"code": "account_age_years",
"params": {
"years": 16
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 94,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "14 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 14
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "22 out of 22 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"java",
"security",
"spring",
"spring-framework",
"framework"
],
"has_wiki": true,
"homepage": "http://spring.io/projects/spring-security",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://spring.io/projects/spring-security",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "5 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 5
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 73,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 6.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "22 out of 22 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/8 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 54 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "12 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 261 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 261
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 16,
"affected_packages": 9,
"assessed_packages": 261,
"unassessed_packages": 0,
"affected_by_severity": "high 6, moderate 3",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 261,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 15
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 63,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 8,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.148,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "4 of 27 human commits state their intent (structured subject or explanatory body)",
"points": 7.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 4,
"sampled": 27
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"build.gradle",
"buildSrc/build.gradle",
"buildSrc/src/test/resources/samples/integrationtest/withgroovy/build.gradle",
"buildSrc/src/test/resources/samples/integrationtest/withjava/build.gradle",
"buildSrc/src/test/resources/samples/integrationtest/withpropdeps/build.gradle",
"buildSrc/src/test/resources/samples/jacoco/java/build.gradle",
"buildSrc/src/test/resources/samples/javadocapi/multimodule/api/build.gradle",
"buildSrc/src/test/resources/samples/javadocapi/multimodule/build.gradle",
"buildSrc/src/test/resources/samples/javadocapi/multimodule/impl/build.gradle",
"buildSrc/src/test/resources/samples/javadocapi/multimodule/sample/build.gradle",
"buildSrc/src/test/resources/samples/maven/install-with-springio/build.gradle",
"buildSrc/src/test/resources/samples/maven/install/build.gradle",
"buildSrc/src/test/resources/samples/maven/signing/build.gradle",
"buildSrc/src/test/resources/samples/maven/upload/build.gradle",
"buildSrc/src/test/resources/samples/showcase/build.gradle",
"buildSrc/src/test/resources/samples/testsconfiguration/build.gradle",
"buildSrc/src/test/resources/samples/testsconfiguration/core/build.gradle",
"buildSrc/src/test/resources/samples/testsconfiguration/web/build.gradle"
],
"dependency_bot_commit_share": 0.67
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "build.gradle, buildSrc/build.gradle, buildSrc/src/test/resources/samples/integrationtest/withgroovy/build.gradle (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "build.gradle, buildSrc/build.gradle, buildSrc/src/test/resources/samples/integrationtest/withgroovy/build.gradle"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Java (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "67 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 67,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 202111,
"source_files_sampled": 4725,
"oversized_source_files": 9
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "9/4725 source files over 60KB",
"points": 54.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 4725,
"oversized": 9
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "good",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"example_dirs": [
"example",
"examples",
"sample",
"samples"
],
"has_mcp_signal": false,
"api_schema_files": [
"buildSrc/src/main/graphql/org/springframework/security/convention/versions/CreateIssue.graphql",
"buildSrc/src/main/graphql/org/springframework/security/convention/versions/FindCreateIssueInput.graphql",
"buildSrc/src/main/graphql/org/springframework/security/convention/versions/RateLimit.graphql"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "buildSrc/src/main/graphql/org/springframework/security/convention/versions/CreateIssue.graphql, buildSrc/src/main/graphql/org/springframework/security/convention/versions/FindCreateIssueInput.graphql, buildSrc/src/main/graphql/org/springframework/security/convention/versions/RateLimit.graphql",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "buildSrc/src/main/graphql/org/springframework/security/convention/versions/CreateIssue.graphql, buildSrc/src/main/graphql/org/springframework/security/convention/versions/FindCreateIssueInput.graphql, buildSrc/src/main/graphql/org/springframework/security/convention/versions/RateLimit.graphql"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example, examples, sample, samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example, examples, sample, samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch npm package '@springprojects/spring-security-webauthn' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-30T23:33:05.916794Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/spring-projects/spring-security.svg",
"full_name": "spring-projects/spring-security",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}