{
  "kind": "sbom_heatmap",
  "analysis_version": 1,
  "generated_at": "2026-09-26T20:16:25.615473+00:00",
  "sboms": [
    {
      "artifact_path": "apache-ldap-api-2.1.7-bin.tar.gz",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.7/apache-ldap-api-2.1.7-bom.xml",
      "sha256": "cb35ebc133a2447fd0edcb20a823ccbe4bc31868f3b51bdbf2355ac1dbf717b3",
      "retrieved_at": "2026-09-26T20:16:25.633366+00:00",
      "components": 32,
      "files": 0,
      "packages": 32,
      "error": null
    },
    {
      "artifact_path": "apache-ldap-api-2.1.7-bin.zip",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.7/apache-ldap-api-2.1.7-bom.xml",
      "sha256": "cb35ebc133a2447fd0edcb20a823ccbe4bc31868f3b51bdbf2355ac1dbf717b3",
      "retrieved_at": "2026-09-26T20:16:25.633366+00:00",
      "components": 32,
      "files": 0,
      "packages": 32,
      "error": null
    },
    {
      "artifact_path": "apache-ldap-api-2.1.7-src.tar.gz",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.7/apache-ldap-api-2.1.7-bom.xml",
      "sha256": "cb35ebc133a2447fd0edcb20a823ccbe4bc31868f3b51bdbf2355ac1dbf717b3",
      "retrieved_at": "2026-09-26T20:16:25.633366+00:00",
      "components": 32,
      "files": 0,
      "packages": 32,
      "error": null
    },
    {
      "artifact_path": "apache-ldap-api-2.1.7-src.zip",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.7/apache-ldap-api-2.1.7-bom.xml",
      "sha256": "cb35ebc133a2447fd0edcb20a823ccbe4bc31868f3b51bdbf2355ac1dbf717b3",
      "retrieved_at": "2026-09-26T20:16:25.633366+00:00",
      "components": 32,
      "files": 0,
      "packages": 32,
      "error": null
    }
  ],
  "rows": [
    {
      "key": "pkg:maven/org.apache.commons/commons-lang3",
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.15.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-lang3@3.15.0?type=jar"
      ],
      "name": "commons-lang3",
      "ecosystem": "maven",
      "version": "3.15.0",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "found",
      "advisories": [
        "GHSA-j288-q9x7-2f5v"
      ],
      "published_at": "2024-07-13T22:56:46Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
      "source_repo": "github.com/apache/commons-lang",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2025-11-12T20:08:07.000Z",
      "latest_release_version": "3.20.0",
      "rankings_average": 0.0017363928575483336,
      "archived": false,
      "dds": 0.7746743486973948,
      "active_maintainers": 2,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9996240862911424,
      "health": 0.7877311965322439,
      "health_inputs": 4,
      "risk": 0.21218900871456978
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-client-api",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-client-api@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-client-api@2.1.7?type=jar"
      ],
      "name": "api-ldap-client-api",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "found",
      "advisories": [
        "GHSA-85rw-g4f4-jprr"
      ],
      "published_at": "2024-08-02T14:46:38Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-05-27T06:56:30.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 14.159116619447584,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.41093583621254004,
      "health": 0.4936073804695875,
      "health_inputs": 4,
      "risk": 0.2080948745585887
    },
    {
      "key": "pkg:maven/org.apache.mina/mina-core",
      "purl": "pkg:maven/org.apache.mina/mina-core@2.2.3",
      "source_purls": [
        "pkg:maven/org.apache.mina/mina-core@2.2.3?type=jar"
      ],
      "name": "mina-core",
      "ecosystem": "maven",
      "version": "2.2.3",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "found",
      "advisories": [
        "GHSA-76h9-2vwh-w278",
        "GHSA-8297-v2rf-2p32",
        "GHSA-995c-6rp3-4m4x",
        "GHSA-f2wh-grmh-r6jm",
        "GHSA-v3pr-hxpr-mfm8",
        "GHSA-vf5j-865m-mq7c"
      ],
      "published_at": "2023-09-06T20:49:57Z",
      "repository_url": "http://svn.apache.org/viewvc/directory/mina/tags/build-3.0.0-M1-SNAPSHOT",
      "source_repo": null,
      "repository_source": null,
      "latest_release_at": "2026-06-13T14:56:06.000Z",
      "latest_release_version": "2.2.9",
      "rankings_average": 0.1655045283321311,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.9668147203870194,
      "health": null,
      "health_inputs": 1,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.dom4j",
      "purl": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.dom4j@2.1.4_1",
      "source_purls": [
        "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.dom4j@2.1.4_1?type=jar"
      ],
      "name": "org.apache.servicemix.bundles.dom4j",
      "ecosystem": "maven",
      "version": "2.1.4_1",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2023-01-30T16:17:54Z",
      "repository_url": "https://gitbox.apache.org/repos/asf?p=servicemix-bundles.git",
      "source_repo": "github.com/apache/servicemix-bundles",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2023-01-30T16:18:04.000Z",
      "latest_release_version": "2.1.4_1",
      "rankings_average": 1.0474606609494803,
      "archived": true,
      "dds": 0.11862184506683182,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.8447277117175936,
      "health": 0.05,
      "health_inputs": 4,
      "risk": 0.8024913261317139
    },
    {
      "key": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.antlr",
      "purl": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.antlr@2.7.7_5",
      "source_purls": [
        "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.antlr@2.7.7_5?type=jar"
      ],
      "name": "org.apache.servicemix.bundles.antlr",
      "ecosystem": "maven",
      "version": "2.7.7_5",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2011-08-17T08:36:26Z",
      "repository_url": "https://gitbox.apache.org/repos/asf?p=servicemix-bundles.git",
      "source_repo": "github.com/apache/servicemix-bundles",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2022-04-30T06:14:26.000Z",
      "latest_release_version": "3.5.3_1",
      "rankings_average": 1.6329379391413532,
      "archived": true,
      "dds": 0.11862184506683182,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.7902329297132386,
      "health": 0.05,
      "health_inputs": 4,
      "risk": 0.7507212832275766
    },
    {
      "key": "pkg:maven/org.slf4j/slf4j-api",
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "source_purls": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ],
      "name": "slf4j-api",
      "ecosystem": "maven",
      "version": "1.7.36",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2022-02-08T13:33:50Z",
      "repository_url": "https://github.com/qos-ch/slf4j",
      "source_repo": "github.com/qos-ch/slf4j",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-23T02:52:54.000Z",
      "latest_release_version": "2.0.20",
      "rankings_average": 2.5688896723583943,
      "archived": false,
      "dds": 0.17976965448172255,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 6,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7243290772955459,
      "health": 0.37742536533837995,
      "health_inputs": 4,
      "risk": 0.45094891067206283
    },
    {
      "key": "pkg:maven/com.github.ben-manes.caffeine/caffeine",
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3",
      "source_purls": [
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar"
      ],
      "name": "caffeine",
      "ecosystem": "maven",
      "version": "2.9.3",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2021-12-03T04:42:47Z",
      "repository_url": "https://github.com/ben-manes/caffeine",
      "source_repo": "github.com/ben-manes/caffeine",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-22T02:34:33.000Z",
      "latest_release_version": "3.3.0",
      "rankings_average": 1.1874079786861107,
      "archived": false,
      "dds": 0.28933333333333333,
      "active_maintainers": 2,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.8304015531940725,
      "health": 0.654585065175585,
      "health_inputs": 4,
      "risk": 0.2868330983746235
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-pool2",
      "purl": "pkg:maven/org.apache.commons/commons-pool2@2.12.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"
      ],
      "name": "commons-pool2",
      "ecosystem": "maven",
      "version": "2.12.0",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2023-09-26T18:50:43Z",
      "repository_url": "https://gitbox.apache.org/repos/asf?p=commons-pool.git",
      "source_repo": "github.com/apache/commons-pool",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-01-06T19:07:04.000Z",
      "latest_release_version": "2.13.1",
      "rankings_average": 0.05249659373246773,
      "archived": false,
      "dds": 0.8437710437710437,
      "active_maintainers": 1,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9889136047425515,
      "health": 0.7342194351788905,
      "health_inputs": 4,
      "risk": 0.2628340164277547
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-util",
      "purl": "pkg:maven/org.apache.directory.api/api-util@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-util@2.1.7?type=jar"
      ],
      "name": "api-util",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:44:26Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-05-27T06:51:39.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 12.734615423119662,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4323183306217261,
      "health": 0.4936066115071319,
      "health_inputs": 4,
      "risk": 0.21892314435111593
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-asn1-api",
      "purl": "pkg:maven/org.apache.directory.api/api-asn1-api@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-asn1-api@2.1.7?type=jar"
      ],
      "name": "api-asn1-api",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:44:33Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:11:52.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 12.845658681136062,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4305735416266182,
      "health": 0.4946847787868546,
      "health_inputs": 4,
      "risk": 0.21757536443558206
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-codec-standalone",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-codec-standalone@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-codec-standalone@2.1.7?type=jar"
      ],
      "name": "api-ldap-codec-standalone",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:45:54Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:11:52.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 12.850464015056712,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.43049835310406426,
      "health": 0.4946847787868546,
      "health_inputs": 4,
      "risk": 0.217537370530675
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-all",
      "purl": "pkg:maven/org.apache.directory.api/api-all@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-all@2.1.7?type=jar"
      ],
      "name": "api-all",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:47:09Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:11:55.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 12.893351620298532,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4298284485932652,
      "health": 0.4946847867143026,
      "health_inputs": 4,
      "risk": 0.21719885417716622
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-schema-data",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-schema-data@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-schema-data@2.1.7?type=jar"
      ],
      "name": "api-ldap-schema-data",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:46:26Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:12:04.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.288470201924136,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.42375222429031045,
      "health": 0.4946848104966466,
      "health_inputs": 4,
      "risk": 0.21412843551972574
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-aci",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-aci@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-aci@2.1.7?type=jar"
      ],
      "name": "api-ldap-extras-aci",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:46:12Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-05-27T06:55:24.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.500425472274225,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4205616121717677,
      "health": 0.4936072060657316,
      "health_inputs": 4,
      "risk": 0.21296936980916165
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-util",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-util@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-util@2.1.7?type=jar"
      ],
      "name": "api-ldap-extras-util",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:46:50Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:12:05.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.44376257645987,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4214099813827521,
      "health": 0.49468481313912926,
      "health_inputs": 4,
      "risk": 0.21294486348746144
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-model",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-model@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-model@2.1.7?type=jar"
      ],
      "name": "api-ldap-model",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:45:09Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-05-27T06:53:03.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.535063920952258,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.42004462896248895,
      "health": 0.4936068334756758,
      "health_inputs": 4,
      "risk": 0.21270772974184965
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec-api",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec-api@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-codec-api@2.1.7?type=jar"
      ],
      "name": "api-ldap-extras-codec-api",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:45:41Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:11:54.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.578271881788785,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4194014688995916,
      "health": 0.4946847840718199,
      "health_inputs": 4,
      "risk": 0.21192994381759303
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-net-mina",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-net-mina@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-net-mina@2.1.7?type=jar"
      ],
      "name": "api-ldap-net-mina",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:45:34Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-05-27T06:53:50.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.651833535224096,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4183108601772513,
      "health": 0.49360695767236107,
      "health_inputs": 4,
      "risk": 0.21182970912384985
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-codec@2.1.7?type=jar"
      ],
      "name": "api-ldap-extras-codec",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:45:50Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-05-27T06:54:30.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.718027009981077,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.41733416064511575,
      "health": 0.4936070633716677,
      "health_inputs": 4,
      "risk": 0.21133507116440034
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-asn1-ber",
      "purl": "pkg:maven/org.apache.directory.api/api-asn1-ber@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-asn1-ber@2.1.7?type=jar"
      ],
      "name": "api-asn1-ber",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:44:39Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-05-27T06:51:54.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.727357366677012,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4171968424827903,
      "health": 0.4936066511443719,
      "health_inputs": 4,
      "risk": 0.21126570619685414
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-codec-core",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-codec-core@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-codec-core@2.1.7?type=jar"
      ],
      "name": "api-ldap-codec-core",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:45:27Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:11:56.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.74229394628037,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.41697719655956333,
      "health": 0.4946847893567852,
      "health_inputs": 4,
      "risk": 0.21070491991291293
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-sp",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-sp@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-sp@2.1.7?type=jar"
      ],
      "name": "api-ldap-extras-sp",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:46:54Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:11:52.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.945879926718657,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4140054064027555,
      "health": 0.4946847787868546,
      "health_inputs": 4,
      "risk": 0.20920323351984657
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-i18n",
      "purl": "pkg:maven/org.apache.directory.api/api-i18n@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-i18n@2.1.7?type=jar"
      ],
      "name": "api-i18n",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:44:17Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:11:53.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 13.990008909889976,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4133665856344144,
      "health": 0.49468478142933725,
      "health_inputs": 4,
      "risk": 0.2088804265696627
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-trigger",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-trigger@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-trigger@2.1.7?type=jar"
      ],
      "name": "api-ldap-extras-trigger",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:47:00Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:12:05.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 14.598003784200461,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.40475163465577957,
      "health": 0.49468481313912926,
      "health_inputs": 4,
      "risk": 0.20452714789832813
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-dsml-engine",
      "purl": "pkg:maven/org.apache.directory.api/api-dsml-engine@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-dsml-engine@2.1.7?type=jar"
      ],
      "name": "api-dsml-engine",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:46:44Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-05-27T06:56:41.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 15.877223718327343,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.38767254426717,
      "health": 0.49360740953689686,
      "health_inputs": 4,
      "risk": 0.19631450394287425
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-dsml-parser",
      "purl": "pkg:maven/org.apache.directory.api/api-dsml-parser@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-dsml-parser@2.1.7?type=jar"
      ],
      "name": "api-dsml-parser",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:46:05Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-06-01T00:11:55.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 15.930763147093273,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3869862636478769,
      "health": 0.4946847867143026,
      "health_inputs": 4,
      "risk": 0.19555004635386206
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-schema-converter",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-schema-converter@2.1.7",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-schema-converter@2.1.7?type=jar"
      ],
      "name": "api-ldap-schema-converter",
      "ecosystem": "maven",
      "version": "2.1.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-02T14:47:06Z",
      "repository_url": "https://github.com/apache/directory-ldap-api",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-05-27T06:57:29.000Z",
      "latest_release_version": "2.1.8",
      "rankings_average": 16.23426002863178,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3831365281939333,
      "health": 0.4936075363760648,
      "health_inputs": 4,
      "risk": 0.1940174504164472
    },
    {
      "key": "pkg:maven/commons-codec/commons-codec",
      "purl": "pkg:maven/commons-codec/commons-codec@1.17.1",
      "source_purls": [
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"
      ],
      "name": "commons-codec",
      "ecosystem": "maven",
      "version": "1.17.1",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-07-12T16:21:02Z",
      "repository_url": "https://github.com/apache/commons-codec",
      "source_repo": "github.com/apache/commons-codec",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-07-30T23:55:34.000Z",
      "latest_release_version": "1.22.1",
      "rankings_average": 6.17671928411418,
      "archived": false,
      "dds": 0.3926209537069265,
      "active_maintainers": 1,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5729597207205153,
      "health": 0.6682813070058343,
      "health_inputs": 4,
      "risk": 0.1900614496957115
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-text",
      "purl": "pkg:maven/org.apache.commons/commons-text@1.12.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"
      ],
      "name": "commons-text",
      "ecosystem": "maven",
      "version": "1.12.0",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-04-13T13:34:59Z",
      "repository_url": "https://gitbox.apache.org/repos/asf?p=commons-text.git",
      "source_repo": "github.com/apache/commons-text",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2025-12-04T15:57:25.000Z",
      "latest_release_version": "1.15.0",
      "rankings_average": 0.032192567657823724,
      "archived": false,
      "dds": 0.603321033210332,
      "active_maintainers": 3,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9931344704641122,
      "health": 0.8332092838197882,
      "health_inputs": 4,
      "risk": 0.16564560959196467
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-collections4",
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.4",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"
      ],
      "name": "commons-collections4",
      "ecosystem": "maven",
      "version": "4.4",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2019-07-05T18:10:17Z",
      "repository_url": "https://gitbox.apache.org/repos/asf?p=commons-collections.git",
      "source_repo": "github.com/apache/commons-collections",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-08-11T02:17:54.000Z",
      "latest_release_version": "4.6.0",
      "rankings_average": 0.023843872725815504,
      "archived": false,
      "dds": 0.7490305902628178,
      "active_maintainers": 2,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9948941643309859,
      "health": 0.8432510318052164,
      "health_inputs": 4,
      "risk": 0.1559486337218935
    },
    {
      "key": "pkg:maven/antlr/antlr",
      "purl": "pkg:maven/antlr/antlr@2.7.7",
      "source_purls": [
        "pkg:maven/antlr/antlr@2.7.7?type=jar"
      ],
      "name": "antlr",
      "ecosystem": "maven",
      "version": "2.7.7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2007-01-13T06:28:39Z",
      "repository_url": "",
      "source_repo": null,
      "repository_source": null,
      "latest_release_at": "2006-01-31T01:35:34.000Z",
      "latest_release_version": "2.7.6",
      "rankings_average": 0.09243675028719511,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.9808432409261966,
      "health": null,
      "health_inputs": 1,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xpp3",
      "purl": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xpp3@1.1.4c_7",
      "source_purls": [
        "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xpp3@1.1.4c_7?type=jar"
      ],
      "name": "org.apache.servicemix.bundles.xpp3",
      "ecosystem": "maven",
      "version": "1.1.4c_7",
      "artifacts": [
        "apache-ldap-api-2.1.7-bin.tar.gz",
        "apache-ldap-api-2.1.7-bin.zip",
        "apache-ldap-api-2.1.7-src.tar.gz",
        "apache-ldap-api-2.1.7-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2014-02-14T19:02:51Z",
      "repository_url": "http://svn.apache.org/viewvc/servicemix/smx4/bundles/tags/org.apache.servicemix.bundles.xpp3-1.1.4c_7",
      "source_repo": null,
      "repository_source": null,
      "latest_release_at": "2014-02-14T19:02:53.000Z",
      "latest_release_version": "1.1.4c_7",
      "rankings_average": 1.069568005129438,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.842400671950067,
      "health": null,
      "health_inputs": 1,
      "risk": null
    }
  ],
  "sources": {
    "Alpha-Omega heuristic": "https://github.com/alpha-omega-security/heatmap/tree/4ed37981",
    "ecosyste.ms packages": "https://packages.ecosyste.ms/api/v1",
    "ecosyste.ms repositories": "https://repos.ecosyste.ms/api/v1",
    "ecosyste.ms issues": "https://issues.ecosyste.ms/api/v1",
    "deps.dev and OpenSSF Scorecard": "https://api.deps.dev/v3alpha",
    "ecosyste.ms data licence": "https://creativecommons.org/licenses/by-sa/4.0/",
    "deps.dev terms": "https://docs.deps.dev/api/v3alpha/#terms"
  },
  "attribution": "Alpha-Omega maintenance heuristic, with missing inputs left unknown. Includes ecosyste.ms data under CC BY-SA 4.0 and deps.dev and OpenSSF Scorecard observations. ATR selected, normalised and combined records and calculated maintenance indicators. gitbox_mirror identifies an inferred Apache GitHub mirror, not verified repository identity."
}