← Apache CycloneDX Antlib 0.2

Dependency heatmap

Table view · 3D view

Maintenance observations and advisories for the package versions listed in this release's SBOMs.

Analysed . Download analysis JSON

How to read this report

Health (0–1) averages release recency, shared workload, active maintainers and project guidance using A-O's formula. Maintained (0–10) is OpenSSF Scorecard's check of commits and issue activity over 90 days. We show both because an active project can still rely on one person.

Criticality (0–1) estimates importance from ecosyste.ms popularity rankings: downloads, dependents, stars and forks.

Risk (0–1) is criticality × (1 − health). It highlights important packages with poor health.

Missing data stays unknown. Archived projects get Health 0.05. Advisories are separate from these scores.

Input SBOMs (9)

apache-ant-cyclonedx-0.2-bin-withdeps.tar.bz2 SBOM — 94 components, 90 file entries, 4 package versions.

Retrieved 2026-10-18T16:48:01.339787+00:00.

SHA-256: 12569931fe292f71373358ed58e914eb2a965a401866d160b4728f12ea7a8ba2

apache-ant-cyclonedx-0.2-bin-withdeps.tar.gz SBOM — 94 components, 90 file entries, 4 package versions.

Retrieved 2026-10-18T16:48:01.370807+00:00.

SHA-256: e2907a0e586993db35ba36cf21277362f4fd4ecf19e89794e39bbb95b8a52737

apache-ant-cyclonedx-0.2-bin-withdeps.zip SBOM — 94 components, 90 file entries, 4 package versions.

Retrieved 2026-10-18T16:48:01.401404+00:00.

SHA-256: 06e59eb2045ed51c2ff2989553fe2cc62d7542a2e3a41e30cb3254203148d82c

apache-ant-cyclonedx-0.2-bin.tar.bz2 SBOM — 86 components, 82 file entries, 4 package versions.

Retrieved 2026-10-18T16:48:01.431121+00:00.

SHA-256: 7c05645c2fdd07627e97418b3a936dd6fec3830d7e827fac63de7aeffada3955

apache-ant-cyclonedx-0.2-bin.tar.gz SBOM — 86 components, 82 file entries, 4 package versions.

Retrieved 2026-10-18T16:48:01.459317+00:00.

SHA-256: 052026843623715dfa1622cebe770ed9a7cd568ab4f76d95ddcb618baeb9e7d6

apache-ant-cyclonedx-0.2-bin.zip SBOM — 86 components, 82 file entries, 4 package versions.

Retrieved 2026-10-18T16:48:01.485630+00:00.

SHA-256: 293c37d91b830e96870938bd8c738d7b5d5d94594b7d464e6ee7c90c8c61f5d9

apache-ant-cyclonedx-0.2-src.tar.bz2 SBOM — 79 components, 79 file entries, 0 package versions.

Retrieved 2026-10-18T16:48:01.513123+00:00.

SHA-256: 84d425a89fb997979f34b2d44bb91b09a2d5fea1c09541fb477a9d1f0bfa8bbf

apache-ant-cyclonedx-0.2-src.tar.gz SBOM — 79 components, 79 file entries, 0 package versions.

Retrieved 2026-10-18T16:48:01.541466+00:00.

SHA-256: f392d9d8d88b72893f7e601ecf949a96d7b86328f7339270cb9f9681d1ef6da0

apache-ant-cyclonedx-0.2-src.zip SBOM — 79 components, 79 file entries, 0 package versions.

Retrieved 2026-10-18T16:48:01.569038+00:00.

SHA-256: fda2b47e171cbfcf7bc0f1b0fb741e78fc4e17c7a9cea7833fd6a762c846a710

Drag to rotate, scroll to zoom, or right-drag to pan. Select a box to show its package version; select it again or use Clear selection to return.

Colour shows health (red to green; grey means unknown). Height shows relative criticality within this release (unknown uses minimum height). Districts group ecosystems and repository owners; width carries no measurement. Faded boxes are outside the filter or selection.

Loading analysis…

Credits and sources

Adapted from the Alpha-Omega heatmap. Copyright (c) 2026 Alpha-Omega. MIT licence.

3D rendering uses Three.js. Copyright © 2010–2021 Three.js Authors. MIT licence.

Alpha-Omega maintenance heuristic, with missing inputs left unknown. Includes ecosyste.ms data under CC BY-SA 4.0 and deps.dev and OpenSSF Scorecard observations. ATR selected, normalised and combined records and calculated maintenance indicators. gitbox_mirror identifies an inferred Apache GitHub mirror, not verified repository identity.

Alpha-Omega heuristic · ecosyste.ms packages · ecosyste.ms repositories · ecosyste.ms issues · deps.dev and OpenSSF Scorecard · ecosyste.ms data licence · deps.dev terms

Last updated 22 Oct 2026 16:47 UTC.