{
  "kind": "sbom_heatmap",
  "analysis_version": 1,
  "generated_at": "2026-10-12T15:43:02.201369+00:00",
  "sboms": [
    {
      "artifact_path": "apache-ant-antunit-1.5.0-bin.tar.bz2",
      "sbom_url": "https://downloads.apache.org/ant/antlibs/antunit/binaries/apache-ant-antunit-1.5.0-bin.tar.bz2.cyclonedx.json",
      "sha256": "3848664252cb32e5d01af32468f725d8656eee2ad8c9754a04ef0f6c9892dac5",
      "retrieved_at": "2026-10-12T15:43:02.221993+00:00",
      "components": 125,
      "files": 123,
      "packages": 2,
      "error": null
    },
    {
      "artifact_path": "apache-ant-antunit-1.5.0-bin.tar.gz",
      "sbom_url": "https://downloads.apache.org/ant/antlibs/antunit/binaries/apache-ant-antunit-1.5.0-bin.tar.gz.cyclonedx.json",
      "sha256": "d3a1e9e211fb3b98e76e6462785cfda39b0b00b49ca87cdaa70c545c0f2f6390",
      "retrieved_at": "2026-10-12T15:43:02.253774+00:00",
      "components": 125,
      "files": 123,
      "packages": 2,
      "error": null
    },
    {
      "artifact_path": "apache-ant-antunit-1.5.0-bin.zip",
      "sbom_url": "https://downloads.apache.org/ant/antlibs/antunit/binaries/apache-ant-antunit-1.5.0-bin.zip.cyclonedx.json",
      "sha256": "48d20ed6944dbaa9a3d915467600a9deaf6753047e040ebfd7101e3538e521be",
      "retrieved_at": "2026-10-12T15:43:02.277777+00:00",
      "components": 125,
      "files": 123,
      "packages": 2,
      "error": null
    },
    {
      "artifact_path": "apache-ant-antunit-1.5.0-src.tar.bz2",
      "sbom_url": "https://downloads.apache.org/ant/antlibs/antunit/source/apache-ant-antunit-1.5.0-src.tar.bz2.cyclonedx.json",
      "sha256": "33e494e6b4b2e99dcbb816c205d0c445204d6b4448a5f197e2e231e7728e712f",
      "retrieved_at": "2026-10-12T15:43:02.300562+00:00",
      "components": 130,
      "files": 130,
      "packages": 0,
      "error": null
    },
    {
      "artifact_path": "apache-ant-antunit-1.5.0-src.tar.gz",
      "sbom_url": "https://downloads.apache.org/ant/antlibs/antunit/source/apache-ant-antunit-1.5.0-src.tar.gz.cyclonedx.json",
      "sha256": "7b6310746e01a65db84816617a901c99854957d9cceb2416582796a8d684a052",
      "retrieved_at": "2026-10-12T15:43:02.327040+00:00",
      "components": 130,
      "files": 130,
      "packages": 0,
      "error": null
    },
    {
      "artifact_path": "apache-ant-antunit-1.5.0-src.zip",
      "sbom_url": "https://downloads.apache.org/ant/antlibs/antunit/source/apache-ant-antunit-1.5.0-src.zip.cyclonedx.json",
      "sha256": "3a0c287d4af8d69f66ac5202ed3e77b738021ba8e7e7cd404e787da9ba0050d0",
      "retrieved_at": "2026-10-12T15:43:02.351921+00:00",
      "components": 130,
      "files": 130,
      "packages": 0,
      "error": null
    }
  ],
  "rows": [
    {
      "key": "pkg:maven/junit/junit",
      "purl": "pkg:maven/junit/junit@4.13.2",
      "source_purls": [
        "pkg:maven/junit/junit@4.13.2?type=jar"
      ],
      "name": "junit",
      "ecosystem": "maven",
      "version": "4.13.2",
      "artifacts": [
        "apache-ant-antunit-1.5.0-bin.tar.bz2",
        "apache-ant-antunit-1.5.0-bin.tar.gz",
        "apache-ant-antunit-1.5.0-bin.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2021-02-13T16:31:52Z",
      "repository_url": "https://github.com/junit-team/junit4",
      "source_repo": "github.com/junit-team/junit4",
      "repository_source": "deps.dev",
      "latest_release_at": "2021-02-13T16:31:54.000Z",
      "latest_release_version": "4.13.2",
      "rankings_average": 1.1279111228631067,
      "archived": false,
      "dds": 0.89120151371807,
      "active_maintainers": 1,
      "governance_files": 2,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.8363767961682208,
      "health": 0.4728003784295175,
      "health_inputs": 4,
      "risk": 0.4409375304302186
    },
    {
      "key": "pkg:maven/org.apache.ant/ant",
      "purl": "pkg:maven/org.apache.ant/ant@1.10.13",
      "source_purls": [
        "pkg:maven/org.apache.ant/ant@1.10.13?type=jar"
      ],
      "name": "ant",
      "ecosystem": "maven",
      "version": "1.10.13",
      "artifacts": [
        "apache-ant-antunit-1.5.0-bin.tar.bz2",
        "apache-ant-antunit-1.5.0-bin.tar.gz",
        "apache-ant-antunit-1.5.0-bin.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2023-01-04T10:49:01Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/ant.git",
      "source_repo": "github.com/apache/ant",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-07T01:57:09.000Z",
      "latest_release_version": "1.10.18",
      "rankings_average": 0.3819027009697844,
      "archived": false,
      "dds": 0.6688188120157673,
      "active_maintainers": 2,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9299127038658057,
      "health": 0.7424162252817381,
      "health_inputs": 4,
      "risk": 0.23953042442021946
    }
  ],
  "sources": {
    "Alpha-Omega heuristic": "https://github.com/alpha-omega-security/heatmap/tree/4ed37981",
    "ecosyste.ms packages": "https://packages.ecosyste.ms/api/v1",
    "ecosyste.ms repositories": "https://repos.ecosyste.ms/api/v1",
    "ecosyste.ms issues": "https://issues.ecosyste.ms/api/v1",
    "deps.dev and OpenSSF Scorecard": "https://api.deps.dev/v3alpha",
    "ecosyste.ms data licence": "https://creativecommons.org/licenses/by-sa/4.0/",
    "deps.dev terms": "https://docs.deps.dev/api/v3alpha/#terms"
  },
  "attribution": "Alpha-Omega maintenance heuristic, with missing inputs left unknown. Includes ecosyste.ms data under CC BY-SA 4.0 and deps.dev and OpenSSF Scorecard observations. ATR selected, normalised and combined records and calculated maintenance indicators. gitbox_mirror identifies an inferred Apache GitHub mirror, not verified repository identity."
}