{
  "kind": "sbom_heatmap",
  "analysis_version": 1,
  "generated_at": "2026-10-12T20:18:04.854932+00:00",
  "sboms": [
    {
      "artifact_path": "apache-ldap-api-2.1.8-bin.tar.gz",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.8/apache-ldap-api-2.1.8-bom.json",
      "sha256": "b2ad56b12549424e9eb6634d1bf5f94ad3a80f3a905977676d4844da2453acb8",
      "retrieved_at": "2026-10-12T20:18:04.884368+00:00",
      "components": 30,
      "files": 0,
      "packages": 30,
      "error": null
    },
    {
      "artifact_path": "apache-ldap-api-2.1.8-bin.zip",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.8/apache-ldap-api-2.1.8-bom.json",
      "sha256": "b2ad56b12549424e9eb6634d1bf5f94ad3a80f3a905977676d4844da2453acb8",
      "retrieved_at": "2026-10-12T20:18:04.884368+00:00",
      "components": 30,
      "files": 0,
      "packages": 30,
      "error": null
    },
    {
      "artifact_path": "apache-ldap-api-2.1.8-src.tar.gz",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.8/apache-ldap-api-2.1.8-bom.json",
      "sha256": "b2ad56b12549424e9eb6634d1bf5f94ad3a80f3a905977676d4844da2453acb8",
      "retrieved_at": "2026-10-12T20:18:04.884368+00:00",
      "components": 30,
      "files": 0,
      "packages": 30,
      "error": null
    },
    {
      "artifact_path": "apache-ldap-api-2.1.8-src.zip",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.8/apache-ldap-api-2.1.8-bom.json",
      "sha256": "b2ad56b12549424e9eb6634d1bf5f94ad3a80f3a905977676d4844da2453acb8",
      "retrieved_at": "2026-10-12T20:18:04.884368+00:00",
      "components": 30,
      "files": 0,
      "packages": 30,
      "error": null
    }
  ],
  "rows": [
    {
      "key": "pkg:maven/org.apache.mina/mina-core",
      "purl": "pkg:maven/org.apache.mina/mina-core@2.2.7",
      "source_purls": [
        "pkg:maven/org.apache.mina/mina-core@2.2.7?type=jar"
      ],
      "name": "mina-core",
      "ecosystem": "maven",
      "version": "2.2.7",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "found",
      "advisories": [
        "GHSA-v3pr-hxpr-mfm8"
      ],
      "published_at": "2026-04-29T20:12:06Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/mina.git",
      "source_repo": "github.com/apache/mina",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-06-13T14:56:06.000Z",
      "latest_release_version": "2.2.9",
      "rankings_average": 0.1655045283321311,
      "archived": false,
      "dds": 0.5549036043587594,
      "active_maintainers": 3,
      "governance_files": 0,
      "maintained": 3,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9668147203870194,
      "health": 0.6110492805741626,
      "health_inputs": 4,
      "risk": 0.376043281046021
    },
    {
      "key": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.dom4j",
      "purl": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.dom4j@2.1.4_1",
      "source_purls": [
        "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.dom4j@2.1.4_1?type=jar"
      ],
      "name": "org.apache.servicemix.bundles.dom4j",
      "ecosystem": "maven",
      "version": "2.1.4_1",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2023-01-30T16:17:54Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/servicemix-bundles.git",
      "source_repo": "github.com/apache/servicemix-bundles",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2023-01-30T16:18:04.000Z",
      "latest_release_version": "2.1.4_1",
      "rankings_average": 1.0474606609494803,
      "archived": true,
      "dds": 0.11862184506683182,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.8447277117175936,
      "health": 0.05,
      "health_inputs": 4,
      "risk": 0.8024913261317139
    },
    {
      "key": "pkg:maven/org.slf4j/slf4j-api",
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "source_purls": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ],
      "name": "slf4j-api",
      "ecosystem": "maven",
      "version": "1.7.36",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2022-02-08T13:33:50Z",
      "repository_url": "https://github.com/qos-ch/slf4j",
      "source_repo": "github.com/qos-ch/slf4j",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-23T02:52:54.000Z",
      "latest_release_version": "2.0.20",
      "rankings_average": 2.5688896723583943,
      "archived": false,
      "dds": 0.17976965448172255,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 6,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7243290772955459,
      "health": 0.37377213506330015,
      "health_inputs": 4,
      "risk": 0.45359505158635954
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-pool2",
      "purl": "pkg:maven/org.apache.commons/commons-pool2@2.13.1",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-pool2@2.13.1?type=jar"
      ],
      "name": "commons-pool2",
      "ecosystem": "maven",
      "version": "2.13.1",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-12-30T19:02:59Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-pool.git",
      "source_repo": "github.com/apache/commons-pool",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-01-06T19:07:04.000Z",
      "latest_release_version": "2.13.1",
      "rankings_average": 0.05249659373246773,
      "archived": false,
      "dds": 0.8437710437710437,
      "active_maintainers": 0,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9889136047425515,
      "health": 0.6472328715704774,
      "health_inputs": 4,
      "risk": 0.34885621260991784
    },
    {
      "key": "pkg:maven/com.github.ben-manes.caffeine/caffeine",
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3",
      "source_purls": [
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar"
      ],
      "name": "caffeine",
      "ecosystem": "maven",
      "version": "2.9.3",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2021-12-03T04:42:47Z",
      "repository_url": "https://github.com/ben-manes/caffeine",
      "source_repo": "github.com/ben-manes/caffeine",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-22T02:34:33.000Z",
      "latest_release_version": "3.3.0",
      "rankings_average": 1.1874079786861107,
      "archived": false,
      "dds": 0.28933333333333333,
      "active_maintainers": 3,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.8304015531940725,
      "health": 0.7342651682338386,
      "health_inputs": 4,
      "risk": 0.220666617036386
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-util",
      "purl": "pkg:maven/org.apache.directory.api/api-util@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-util@2.1.8?type=jar"
      ],
      "name": "api-util",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:51:40Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 12.734615423119662,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4323183306217261,
      "health": 0.5184487700998012,
      "health_inputs": 4,
      "risk": 0.20818342381929297
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-asn1-api",
      "purl": "pkg:maven/org.apache.directory.api/api-asn1-api@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-asn1-api@2.1.8?type=jar"
      ],
      "name": "api-asn1-api",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:51:20Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 12.845658681136062,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4305735416266182,
      "health": 0.5184487621723531,
      "health_inputs": 4,
      "risk": 0.20734322194613183
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-codec-standalone",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-codec-standalone@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-codec-standalone@2.1.8?type=jar"
      ],
      "name": "api-ldap-codec-standalone",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:54:41Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 12.850464015056712,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.43049835310406426,
      "health": 0.5184487621723531,
      "health_inputs": 4,
      "risk": 0.20730701482002553
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-all",
      "purl": "pkg:maven/org.apache.directory.api/api-all@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-all@2.1.8?type=jar"
      ],
      "name": "api-all",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:57:36Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:44.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 12.893351620298532,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4298284485932652,
      "health": 0.5184487648148358,
      "health_inputs": 4,
      "risk": 0.2069844203378097
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-schema-data",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-schema-data@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-schema-data@2.1.8?type=jar"
      ],
      "name": "api-ldap-schema-data",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:55:49Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:42.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.288470201924136,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.42375222429031045,
      "health": 0.5184487595298705,
      "health_inputs": 4,
      "risk": 0.20405840925897556
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-util",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-util@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-util@2.1.8?type=jar"
      ],
      "name": "api-ldap-extras-util",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:56:54Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.44376257645987,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4214099813827521,
      "health": 0.5184487700998012,
      "health_inputs": 4,
      "risk": 0.20293049482708417
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-aci",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-aci@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-aci@2.1.8?type=jar"
      ],
      "name": "api-ldap-extras-aci",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:55:24Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.500425472274225,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4205616121717677,
      "health": 0.5184487700998012,
      "health_inputs": 4,
      "risk": 0.20252196159012517
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-model",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-model@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-model@2.1.8?type=jar"
      ],
      "name": "api-ldap-model",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:53:04Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.535063920952258,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.42004462896248895,
      "health": 0.5184487621723531,
      "health_inputs": 4,
      "risk": 0.2022730110197412
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec-api",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec-api@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-codec-api@2.1.8?type=jar"
      ],
      "name": "api-ldap-extras-codec-api",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:54:10Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.578271881788785,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4194014688995916,
      "health": 0.5184487621723531,
      "health_inputs": 4,
      "risk": 0.20196329649533168
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-net-mina",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-net-mina@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-net-mina@2.1.8?type=jar"
      ],
      "name": "api-ldap-net-mina",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:53:50Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:42.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.651833535224096,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4183108601772513,
      "health": 0.5184487595298705,
      "health_inputs": 4,
      "risk": 0.20143811362048225
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-codec@2.1.8?type=jar"
      ],
      "name": "api-ldap-extras-codec",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:54:30Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.718027009981077,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.41733416064511575,
      "health": 0.5184487621723531,
      "health_inputs": 4,
      "risk": 0.20096778164641751
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-asn1-ber",
      "purl": "pkg:maven/org.apache.directory.api/api-asn1-ber@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-asn1-ber@2.1.8?type=jar"
      ],
      "name": "api-asn1-ber",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:51:55Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:44.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.727357366677012,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4171968424827903,
      "health": 0.5184487648148358,
      "health_inputs": 4,
      "risk": 0.20090165481293806
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-codec-core",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-codec-core@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-codec-core@2.1.8?type=jar"
      ],
      "name": "api-ldap-codec-core",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:53:37Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:45.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.74229394628037,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.41697719655956333,
      "health": 0.5184487674573185,
      "health_inputs": 4,
      "risk": 0.2007958829454497
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-sp",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-sp@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-sp@2.1.8?type=jar"
      ],
      "name": "api-ldap-extras-sp",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:57:03Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.945879926718657,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4140054064027555,
      "health": 0.5184487700998012,
      "health_inputs": 4,
      "risk": 0.19936481263857858
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-i18n",
      "purl": "pkg:maven/org.apache.directory.api/api-i18n@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-i18n@2.1.8?type=jar"
      ],
      "name": "api-i18n",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:51:02Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:47.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.990008909889976,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4133665856344144,
      "health": 0.5184487727422838,
      "health_inputs": 4,
      "risk": 0.19905718661958408
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-client-api",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-client-api@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-client-api@2.1.8?type=jar"
      ],
      "name": "api-ldap-client-api",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:56:30Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 14.159116619447584,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.41093583621254004,
      "health": 0.5184487700998012,
      "health_inputs": 4,
      "risk": 0.1978866573382153
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-trigger",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-trigger@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-trigger@2.1.8?type=jar"
      ],
      "name": "api-ldap-extras-trigger",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:57:16Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:47.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 14.598003784200461,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.40475163465577957,
      "health": 0.5184487727422838,
      "health_inputs": 4,
      "risk": 0.1949086464030574
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-dsml-engine",
      "purl": "pkg:maven/org.apache.directory.api/api-dsml-engine@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-dsml-engine@2.1.8?type=jar"
      ],
      "name": "api-dsml-engine",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:56:41Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 15.877223718327343,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.38767254426717,
      "health": 0.5184487700998012,
      "health_inputs": 4,
      "risk": 0.186684190490395
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-dsml-parser",
      "purl": "pkg:maven/org.apache.directory.api/api-dsml-parser@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-dsml-parser@2.1.8?type=jar"
      ],
      "name": "api-dsml-parser",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:55:08Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:45.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 15.930763147093273,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3869862636478769,
      "health": 0.5184487674573185,
      "health_inputs": 4,
      "risk": 0.18635371223672223
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-schema-converter",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-schema-converter@2.1.8",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-schema-converter@2.1.8?type=jar"
      ],
      "name": "api-ldap-schema-converter",
      "ecosystem": "maven",
      "version": "2.1.8",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-27T06:57:30Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 16.23426002863178,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3831365281939333,
      "health": 0.5184487621723531,
      "health_inputs": 4,
      "risk": 0.1844998694087757
    },
    {
      "key": "pkg:maven/commons-codec/commons-codec",
      "purl": "pkg:maven/commons-codec/commons-codec@1.22.0",
      "source_purls": [
        "pkg:maven/commons-codec/commons-codec@1.22.0?type=jar"
      ],
      "name": "commons-codec",
      "ecosystem": "maven",
      "version": "1.22.0",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-04-19T11:13:36Z",
      "repository_url": "https://github.com/apache/commons-codec",
      "source_repo": "github.com/apache/commons-codec",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-10-12T01:54:25.000Z",
      "latest_release_version": "1.23.0",
      "rankings_average": 6.17671928411418,
      "archived": false,
      "dds": 0.3926209537069265,
      "active_maintainers": 1,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5729597207205153,
      "health": 0.6813135869413075,
      "health_inputs": 4,
      "risk": 0.18259447822353123
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-text",
      "purl": "pkg:maven/org.apache.commons/commons-text@1.15.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar"
      ],
      "name": "commons-text",
      "ecosystem": "maven",
      "version": "1.15.0",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-12-04T15:57:28Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-text.git",
      "source_repo": "github.com/apache/commons-text",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2025-12-04T15:57:25.000Z",
      "latest_release_version": "1.15.0",
      "rankings_average": 0.032192567657823724,
      "archived": false,
      "dds": 0.603321033210332,
      "active_maintainers": 3,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9931344704641122,
      "health": 0.8295560535447084,
      "health_inputs": 4,
      "risk": 0.16927375850668952
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-collections4",
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.5.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar"
      ],
      "name": "commons-collections4",
      "ecosystem": "maven",
      "version": "4.5.0",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-04-19T13:59:53Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-collections.git",
      "source_repo": "github.com/apache/commons-collections",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-08-11T02:17:54.000Z",
      "latest_release_version": "4.6.0",
      "rankings_average": 0.023843872725815504,
      "archived": false,
      "dds": 0.7490305902628178,
      "active_maintainers": 2,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9948941643309859,
      "health": 0.8395978015301366,
      "health_inputs": 4,
      "risk": 0.15958321120352764
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-lang3",
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.20.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ],
      "name": "commons-lang3",
      "ecosystem": "maven",
      "version": "3.20.0",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-11-12T20:08:11Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
      "source_repo": "github.com/apache/commons-lang",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-30T02:08:31.000Z",
      "latest_release_version": "3.21.0",
      "rankings_average": 0.0017363928575483336,
      "archived": false,
      "dds": 0.7746743486973948,
      "active_maintainers": 2,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9996240862911424,
      "health": 0.8574227785351956,
      "health_inputs": 4,
      "risk": 0.142523624732685
    },
    {
      "key": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xpp3",
      "purl": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xpp3@1.1.4c_7",
      "source_purls": [
        "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xpp3@1.1.4c_7?type=jar"
      ],
      "name": "org.apache.servicemix.bundles.xpp3",
      "ecosystem": "maven",
      "version": "1.1.4c_7",
      "artifacts": [
        "apache-ldap-api-2.1.8-bin.tar.gz",
        "apache-ldap-api-2.1.8-bin.zip",
        "apache-ldap-api-2.1.8-src.tar.gz",
        "apache-ldap-api-2.1.8-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2014-02-14T19:02:51Z",
      "repository_url": "http://svn.apache.org/viewvc/servicemix/smx4/bundles/tags/org.apache.servicemix.bundles.xpp3-1.1.4c_7",
      "source_repo": null,
      "repository_source": null,
      "latest_release_at": "2014-02-14T19:02:53.000Z",
      "latest_release_version": "1.1.4c_7",
      "rankings_average": 1.069568005129438,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.842400671950067,
      "health": null,
      "health_inputs": 1,
      "risk": null
    }
  ],
  "sources": {
    "Alpha-Omega heuristic": "https://github.com/alpha-omega-security/heatmap/tree/4ed37981",
    "ecosyste.ms packages": "https://packages.ecosyste.ms/api/v1",
    "ecosyste.ms repositories": "https://repos.ecosyste.ms/api/v1",
    "ecosyste.ms issues": "https://issues.ecosyste.ms/api/v1",
    "deps.dev and OpenSSF Scorecard": "https://api.deps.dev/v3alpha",
    "ecosyste.ms data licence": "https://creativecommons.org/licenses/by-sa/4.0/",
    "deps.dev terms": "https://docs.deps.dev/api/v3alpha/#terms"
  },
  "attribution": "Alpha-Omega maintenance heuristic, with missing inputs left unknown. Includes ecosyste.ms data under CC BY-SA 4.0 and deps.dev and OpenSSF Scorecard observations. ATR selected, normalised and combined records and calculated maintenance indicators. gitbox_mirror identifies an inferred Apache GitHub mirror, not verified repository identity."
}