Dependency heatmap
Table view · 3D view
Maintenance observations and advisories for the package versions listed in this release's SBOMs.
Analysed . Download analysis JSON
How to read this report
Health (0–1) averages release recency, shared workload, active maintainers and project guidance using A-O's formula. Maintained (0–10) is OpenSSF Scorecard's check of commits and issue activity over 90 days. We show both because an active project can still rely on one person.
Criticality (0–1) estimates importance from ecosyste.ms popularity rankings: downloads, dependents, stars and forks.
Risk (0–1) is criticality × (1 − health). It highlights important packages with poor health.
Missing data stays unknown. Archived projects get Health 0.05. Advisories are separate from these scores.
Input SBOMs (6)
apache-ant-antunit-1.5.0-bin.tar.bz2 SBOM — 125 components, 123 file entries, 2 package versions.
Retrieved 2026-10-12T15:43:02.221993+00:00.
SHA-256: 3848664252cb32e5d01af32468f725d8656eee2ad8c9754a04ef0f6c9892dac5
apache-ant-antunit-1.5.0-bin.tar.gz SBOM — 125 components, 123 file entries, 2 package versions.
Retrieved 2026-10-12T15:43:02.253774+00:00.
SHA-256: d3a1e9e211fb3b98e76e6462785cfda39b0b00b49ca87cdaa70c545c0f2f6390
apache-ant-antunit-1.5.0-bin.zip SBOM — 125 components, 123 file entries, 2 package versions.
Retrieved 2026-10-12T15:43:02.277777+00:00.
SHA-256: 48d20ed6944dbaa9a3d915467600a9deaf6753047e040ebfd7101e3538e521be
apache-ant-antunit-1.5.0-src.tar.bz2 SBOM — 130 components, 130 file entries, 0 package versions.
Retrieved 2026-10-12T15:43:02.300562+00:00.
SHA-256: 33e494e6b4b2e99dcbb816c205d0c445204d6b4448a5f197e2e231e7728e712f
apache-ant-antunit-1.5.0-src.tar.gz SBOM — 130 components, 130 file entries, 0 package versions.
Retrieved 2026-10-12T15:43:02.327040+00:00.
SHA-256: 7b6310746e01a65db84816617a901c99854957d9cceb2416582796a8d684a052
apache-ant-antunit-1.5.0-src.zip SBOM — 130 components, 130 file entries, 0 package versions.
Retrieved 2026-10-12T15:43:02.351921+00:00.
SHA-256: 3a0c287d4af8d69f66ac5202ed3e77b738021ba8e7e7cd404e787da9ba0050d0
Artifact not found; showing all artifacts.
Loading analysis…
Credits and sources
Adapted from the Alpha-Omega heatmap. Copyright (c) 2026 Alpha-Omega. MIT licence.
Alpha-Omega maintenance heuristic, with missing inputs left unknown. Includes ecosyste.ms data under CC BY-SA 4.0 and deps.dev and OpenSSF Scorecard observations. ATR selected, normalised and combined records and calculated maintenance indicators. gitbox_mirror identifies an inferred Apache GitHub mirror, not verified repository identity.
Alpha-Omega heuristic · ecosyste.ms packages · ecosyste.ms repositories · ecosyste.ms issues · deps.dev and OpenSSF Scorecard · ecosyste.ms data licence · deps.dev terms
Last updated 16 Oct 2026 19:16 UTC.