Dependency heatmap
Table view · 3D view
Maintenance observations and advisories for the package versions listed in this release's SBOMs.
Analysed . Download analysis JSON
How to read this report
Health (0–1) averages release recency, shared workload, active maintainers and project guidance using A-O's formula. Maintained (0–10) is OpenSSF Scorecard's check of commits and issue activity over 90 days. We show both because an active project can still rely on one person.
Criticality (0–1) estimates importance from ecosyste.ms popularity rankings: downloads, dependents, stars and forks.
Risk (0–1) is criticality × (1 − health). It highlights important packages with poor health.
Missing data stays unknown. Archived projects get Health 0.05. Advisories are separate from these scores.
Input SBOMs (9)
apache-ant-cyclonedx-0.2-bin-withdeps.tar.bz2 SBOM — 94 components, 90 file entries, 4 package versions.
Retrieved 2026-10-18T16:48:01.339787+00:00.
SHA-256: 12569931fe292f71373358ed58e914eb2a965a401866d160b4728f12ea7a8ba2
apache-ant-cyclonedx-0.2-bin-withdeps.tar.gz SBOM — 94 components, 90 file entries, 4 package versions.
Retrieved 2026-10-18T16:48:01.370807+00:00.
SHA-256: e2907a0e586993db35ba36cf21277362f4fd4ecf19e89794e39bbb95b8a52737
apache-ant-cyclonedx-0.2-bin-withdeps.zip SBOM — 94 components, 90 file entries, 4 package versions.
Retrieved 2026-10-18T16:48:01.401404+00:00.
SHA-256: 06e59eb2045ed51c2ff2989553fe2cc62d7542a2e3a41e30cb3254203148d82c
apache-ant-cyclonedx-0.2-bin.tar.bz2 SBOM — 86 components, 82 file entries, 4 package versions.
Retrieved 2026-10-18T16:48:01.431121+00:00.
SHA-256: 7c05645c2fdd07627e97418b3a936dd6fec3830d7e827fac63de7aeffada3955
apache-ant-cyclonedx-0.2-bin.tar.gz SBOM — 86 components, 82 file entries, 4 package versions.
Retrieved 2026-10-18T16:48:01.459317+00:00.
SHA-256: 052026843623715dfa1622cebe770ed9a7cd568ab4f76d95ddcb618baeb9e7d6
apache-ant-cyclonedx-0.2-bin.zip SBOM — 86 components, 82 file entries, 4 package versions.
Retrieved 2026-10-18T16:48:01.485630+00:00.
SHA-256: 293c37d91b830e96870938bd8c738d7b5d5d94594b7d464e6ee7c90c8c61f5d9
apache-ant-cyclonedx-0.2-src.tar.bz2 SBOM — 79 components, 79 file entries, 0 package versions.
Retrieved 2026-10-18T16:48:01.513123+00:00.
SHA-256: 84d425a89fb997979f34b2d44bb91b09a2d5fea1c09541fb477a9d1f0bfa8bbf
apache-ant-cyclonedx-0.2-src.tar.gz SBOM — 79 components, 79 file entries, 0 package versions.
Retrieved 2026-10-18T16:48:01.541466+00:00.
SHA-256: f392d9d8d88b72893f7e601ecf949a96d7b86328f7339270cb9f9681d1ef6da0
apache-ant-cyclonedx-0.2-src.zip SBOM — 79 components, 79 file entries, 0 package versions.
Retrieved 2026-10-18T16:48:01.569038+00:00.
SHA-256: fda2b47e171cbfcf7bc0f1b0fb741e78fc4e17c7a9cea7833fd6a762c846a710
Artifact not found; showing all artifacts.
Loading analysis…
Credits and sources
Adapted from the Alpha-Omega heatmap. Copyright (c) 2026 Alpha-Omega. MIT licence.
Alpha-Omega maintenance heuristic, with missing inputs left unknown. Includes ecosyste.ms data under CC BY-SA 4.0 and deps.dev and OpenSSF Scorecard observations. ATR selected, normalised and combined records and calculated maintenance indicators. gitbox_mirror identifies an inferred Apache GitHub mirror, not verified repository identity.
Alpha-Omega heuristic · ecosyste.ms packages · ecosyste.ms repositories · ecosyste.ms issues · deps.dev and OpenSSF Scorecard · ecosyste.ms data licence · deps.dev terms
Last updated 22 Oct 2026 16:47 UTC.