{
  "kind": "sbom_heatmap",
  "analysis_version": 1,
  "generated_at": "2026-10-13T15:53:03.373629+00:00",
  "sboms": [
    {
      "artifact_path": "apache-ldap-api-2.1.9-bin.tar.gz",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.9/apache-ldap-api-2.1.9-bom.json",
      "sha256": "73c69f96dec8672e8fea131b3143b38c6df9a6332dbc1e890aecdfdc6a837654",
      "retrieved_at": "2026-10-13T15:53:03.401368+00:00",
      "components": 30,
      "files": 0,
      "packages": 30,
      "error": null
    },
    {
      "artifact_path": "apache-ldap-api-2.1.9-bin.zip",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.9/apache-ldap-api-2.1.9-bom.json",
      "sha256": "73c69f96dec8672e8fea131b3143b38c6df9a6332dbc1e890aecdfdc6a837654",
      "retrieved_at": "2026-10-13T15:53:03.401368+00:00",
      "components": 30,
      "files": 0,
      "packages": 30,
      "error": null
    },
    {
      "artifact_path": "apache-ldap-api-2.1.9-src.tar.gz",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.9/apache-ldap-api-2.1.9-bom.json",
      "sha256": "73c69f96dec8672e8fea131b3143b38c6df9a6332dbc1e890aecdfdc6a837654",
      "retrieved_at": "2026-10-13T15:53:03.401368+00:00",
      "components": 30,
      "files": 0,
      "packages": 30,
      "error": null
    },
    {
      "artifact_path": "apache-ldap-api-2.1.9-src.zip",
      "sbom_url": "https://downloads.apache.org/directory/api/dist/2.1.9/apache-ldap-api-2.1.9-bom.json",
      "sha256": "73c69f96dec8672e8fea131b3143b38c6df9a6332dbc1e890aecdfdc6a837654",
      "retrieved_at": "2026-10-13T15:53:03.401368+00:00",
      "components": 30,
      "files": 0,
      "packages": 30,
      "error": null
    }
  ],
  "rows": [
    {
      "key": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.dom4j",
      "purl": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.dom4j@2.1.4_1",
      "source_purls": [
        "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.dom4j@2.1.4_1?type=jar"
      ],
      "name": "org.apache.servicemix.bundles.dom4j",
      "ecosystem": "maven",
      "version": "2.1.4_1",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2023-01-30T16:17:54Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/servicemix-bundles.git",
      "source_repo": "github.com/apache/servicemix-bundles",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2023-01-30T16:18:04.000Z",
      "latest_release_version": "2.1.4_1",
      "rankings_average": 1.0474606609494803,
      "archived": true,
      "dds": 0.11862184506683182,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.8447277117175936,
      "health": 0.05,
      "health_inputs": 4,
      "risk": 0.8024913261317139
    },
    {
      "key": "pkg:maven/org.slf4j/slf4j-api",
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36",
      "source_purls": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ],
      "name": "slf4j-api",
      "ecosystem": "maven",
      "version": "1.7.36",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2022-02-08T13:33:50Z",
      "repository_url": "https://github.com/qos-ch/slf4j",
      "source_repo": "github.com/qos-ch/slf4j",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-23T02:52:54.000Z",
      "latest_release_version": "2.0.20",
      "rankings_average": 2.5688896723583943,
      "archived": false,
      "dds": 0.17976965448172255,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 6,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7243290772955459,
      "health": 0.37358584394971306,
      "health_inputs": 4,
      "risk": 0.4537299876567724
    },
    {
      "key": "pkg:maven/org.apache.mina/mina-core",
      "purl": "pkg:maven/org.apache.mina/mina-core@2.2.9",
      "source_purls": [
        "pkg:maven/org.apache.mina/mina-core@2.2.9?type=jar"
      ],
      "name": "mina-core",
      "ecosystem": "maven",
      "version": "2.2.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-06-13T14:56:06Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/mina.git",
      "source_repo": "github.com/apache/mina",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-06-13T14:56:06.000Z",
      "latest_release_version": "2.2.9",
      "rankings_average": 0.1655045283321311,
      "archived": false,
      "dds": 0.5549036043587594,
      "active_maintainers": 3,
      "governance_files": 0,
      "maintained": 3,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9668147203870194,
      "health": 0.6108629894605755,
      "health_inputs": 4,
      "risk": 0.37622339003691435
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-pool2",
      "purl": "pkg:maven/org.apache.commons/commons-pool2@2.13.1",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-pool2@2.13.1?type=jar"
      ],
      "name": "commons-pool2",
      "ecosystem": "maven",
      "version": "2.13.1",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-12-30T19:02:59Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-pool.git",
      "source_repo": "github.com/apache/commons-pool",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-01-06T19:07:04.000Z",
      "latest_release_version": "2.13.1",
      "rankings_average": 0.05249659373246773,
      "archived": false,
      "dds": 0.8437710437710437,
      "active_maintainers": 0,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9889136047425515,
      "health": 0.6470465804568903,
      "health_inputs": 4,
      "risk": 0.3490404384265867
    },
    {
      "key": "pkg:maven/com.github.ben-manes.caffeine/caffeine",
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3",
      "source_purls": [
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar"
      ],
      "name": "caffeine",
      "ecosystem": "maven",
      "version": "2.9.3",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2021-12-03T04:42:47Z",
      "repository_url": "https://github.com/ben-manes/caffeine",
      "source_repo": "github.com/ben-manes/caffeine",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-22T02:34:33.000Z",
      "latest_release_version": "3.3.0",
      "rankings_average": 1.1874079786861107,
      "archived": false,
      "dds": 0.28933333333333333,
      "active_maintainers": 3,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.8304015531940725,
      "health": 0.7340788771202514,
      "health_inputs": 4,
      "risk": 0.220821313466455
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-util",
      "purl": "pkg:maven/org.apache.directory.api/api-util@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-util@2.1.9?type=jar"
      ],
      "name": "api-util",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:46Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 12.734615423119662,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4323183306217261,
      "health": 0.518262478986214,
      "health_inputs": 4,
      "risk": 0.20826396088252863
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-asn1-api",
      "purl": "pkg:maven/org.apache.directory.api/api-asn1-api@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-asn1-api@2.1.9?type=jar"
      ],
      "name": "api-asn1-api",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:43Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 12.845658681136062,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4305735416266182,
      "health": 0.518262471058766,
      "health_inputs": 4,
      "risk": 0.2074234339706826
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-codec-standalone",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-codec-standalone@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-codec-standalone@2.1.9?type=jar"
      ],
      "name": "api-ldap-codec-standalone",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:43Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 12.850464015056712,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.43049835310406426,
      "health": 0.518262471058766,
      "health_inputs": 4,
      "risk": 0.20738721283762274
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-all",
      "purl": "pkg:maven/org.apache.directory.api/api-all@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-all@2.1.9?type=jar"
      ],
      "name": "api-all",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:44Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:44.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 12.893351620298532,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4298284485932652,
      "health": 0.5182624737012487,
      "health_inputs": 4,
      "risk": 0.20706449355814957
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-schema-data",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-schema-data@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-schema-data@2.1.9?type=jar"
      ],
      "name": "api-ldap-schema-data",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:42Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:42.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.288470201924136,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.42375222429031045,
      "health": 0.5182624684162833,
      "health_inputs": 4,
      "risk": 0.20413735053272364
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-util",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-util@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-util@2.1.9?type=jar"
      ],
      "name": "api-ldap-extras-util",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:46Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.44376257645987,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4214099813827521,
      "health": 0.518262478986214,
      "health_inputs": 4,
      "risk": 0.2030089997617927
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-aci",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-aci@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-aci@2.1.9?type=jar"
      ],
      "name": "api-ldap-extras-aci",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:46Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.500425472274225,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4205616121717677,
      "health": 0.518262478986214,
      "health_inputs": 4,
      "risk": 0.20260030848118865
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-model",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-model@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-model@2.1.9?type=jar"
      ],
      "name": "api-ldap-model",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-24T16:55:45Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.535063920952258,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.42004462896248895,
      "health": 0.518262471058766,
      "health_inputs": 4,
      "risk": 0.2023512616014269
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec-api",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec-api@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-codec-api@2.1.9?type=jar"
      ],
      "name": "api-ldap-extras-codec-api",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:43Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.578271881788785,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4194014688995916,
      "health": 0.518262471058766,
      "health_inputs": 4,
      "risk": 0.20204142726201307
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-net-mina",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-net-mina@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-net-mina@2.1.9?type=jar"
      ],
      "name": "api-ldap-net-mina",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:42Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:42.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.651833535224096,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4183108601772513,
      "health": 0.5182624684162833,
      "health_inputs": 4,
      "risk": 0.20151604121645028
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-codec@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-codec@2.1.9?type=jar"
      ],
      "name": "api-ldap-extras-codec",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:43Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.718027009981077,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.41733416064511575,
      "health": 0.518262471058766,
      "health_inputs": 4,
      "risk": 0.20104552729194206
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-asn1-ber",
      "purl": "pkg:maven/org.apache.directory.api/api-asn1-ber@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-asn1-ber@2.1.9?type=jar"
      ],
      "name": "api-asn1-ber",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:44Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:44.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.727357366677012,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4171968424827903,
      "health": 0.5182624737012487,
      "health_inputs": 4,
      "risk": 0.2009793748773092
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-codec-core",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-codec-core@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-codec-core@2.1.9?type=jar"
      ],
      "name": "api-ldap-codec-core",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:45Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:45.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.74229394628037,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.41697719655956333,
      "health": 0.5182624763437313,
      "health_inputs": 4,
      "risk": 0.20087356209173723
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-sp",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-sp@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-sp@2.1.9?type=jar"
      ],
      "name": "api-ldap-extras-sp",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:46Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.945879926718657,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4140054064027555,
      "health": 0.518262478986214,
      "health_inputs": 4,
      "risk": 0.19944193816676845
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-i18n",
      "purl": "pkg:maven/org.apache.directory.api/api-i18n@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-i18n@2.1.9?type=jar"
      ],
      "name": "api-i18n",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:47Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:47.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 13.990008909889976,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4133665856344144,
      "health": 0.5182624816286967,
      "health_inputs": 4,
      "risk": 0.19913419314114164
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-client-api",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-client-api@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-client-api@2.1.9?type=jar"
      ],
      "name": "api-ldap-client-api",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-24T16:59:11Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 14.159116619447584,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.41093583621254004,
      "health": 0.518262478986214,
      "health_inputs": 4,
      "risk": 0.19796321103275621
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-extras-trigger",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-extras-trigger@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-extras-trigger@2.1.9?type=jar"
      ],
      "name": "api-ldap-extras-trigger",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:47Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:47.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 14.598003784200461,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.40475163465577957,
      "health": 0.5182624816286967,
      "health_inputs": 4,
      "risk": 0.19498404803580366
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-dsml-engine",
      "purl": "pkg:maven/org.apache.directory.api/api-dsml-engine@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-dsml-engine@2.1.9?type=jar"
      ],
      "name": "api-dsml-engine",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:46Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:46.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 15.877223718327343,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.38767254426717,
      "health": 0.518262478986214,
      "health_inputs": 4,
      "risk": 0.1867564104403737
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-dsml-parser",
      "purl": "pkg:maven/org.apache.directory.api/api-dsml-parser@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-dsml-parser@2.1.9?type=jar"
      ],
      "name": "api-dsml-parser",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:45Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:45.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 15.930763147093273,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3869862636478769,
      "health": 0.5182624763437313,
      "health_inputs": 4,
      "risk": 0.18642580433872014
    },
    {
      "key": "pkg:maven/org.apache.directory.api/api-ldap-schema-converter",
      "purl": "pkg:maven/org.apache.directory.api/api-ldap-schema-converter@2.1.9",
      "source_purls": [
        "pkg:maven/org.apache.directory.api/api-ldap-schema-converter@2.1.9?type=jar"
      ],
      "name": "api-ldap-schema-converter",
      "ecosystem": "maven",
      "version": "2.1.9",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-29T02:17:43Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/directory-ldap-api.git",
      "source_repo": "github.com/apache/directory-ldap-api",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-29T02:17:43.000Z",
      "latest_release_version": "2.1.9",
      "rankings_average": 16.23426002863178,
      "archived": false,
      "dds": 0.41968569065343264,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3831365281939333,
      "health": 0.518262471058766,
      "health_inputs": 4,
      "risk": 0.18457124433926886
    },
    {
      "key": "pkg:maven/commons-codec/commons-codec",
      "purl": "pkg:maven/commons-codec/commons-codec@1.22.1",
      "source_purls": [
        "pkg:maven/commons-codec/commons-codec@1.22.1?type=jar"
      ],
      "name": "commons-codec",
      "ecosystem": "maven",
      "version": "1.22.1",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-07-27T00:12:48Z",
      "repository_url": "https://github.com/apache/commons-codec",
      "source_repo": "github.com/apache/commons-codec",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-10-12T01:54:25.000Z",
      "latest_release_version": "1.23.0",
      "rankings_average": 6.17671928411418,
      "archived": false,
      "dds": 0.3926209537069265,
      "active_maintainers": 1,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5729597207205153,
      "health": 0.6811272958277205,
      "health_inputs": 4,
      "risk": 0.18270121552794477
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-text",
      "purl": "pkg:maven/org.apache.commons/commons-text@1.15.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar"
      ],
      "name": "commons-text",
      "ecosystem": "maven",
      "version": "1.15.0",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-12-04T15:57:28Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-text.git",
      "source_repo": "github.com/apache/commons-text",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2025-12-04T15:57:25.000Z",
      "latest_release_version": "1.15.0",
      "rankings_average": 0.032192567657823724,
      "archived": false,
      "dds": 0.603321033210332,
      "active_maintainers": 3,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9931344704641122,
      "health": 0.8293697624311213,
      "health_inputs": 4,
      "risk": 0.16945877063313405
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-collections4",
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.6.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-collections4@4.6.0?type=jar"
      ],
      "name": "commons-collections4",
      "ecosystem": "maven",
      "version": "4.6.0",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-06T10:04:36Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-collections.git",
      "source_repo": "github.com/apache/commons-collections",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-08-11T02:17:54.000Z",
      "latest_release_version": "4.6.0",
      "rankings_average": 0.023843872725815504,
      "archived": false,
      "dds": 0.7490305902628178,
      "active_maintainers": 2,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9948941643309859,
      "health": 0.8394115104165495,
      "health_inputs": 4,
      "risk": 0.15976855114530222
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-lang3",
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.20.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ],
      "name": "commons-lang3",
      "ecosystem": "maven",
      "version": "3.20.0",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-11-12T20:08:11Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
      "source_repo": "github.com/apache/commons-lang",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-30T02:08:31.000Z",
      "latest_release_version": "3.21.0",
      "rankings_average": 0.0017363928575483336,
      "archived": false,
      "dds": 0.7746743486973948,
      "active_maintainers": 2,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9996240862911424,
      "health": 0.8572364874216084,
      "health_inputs": 4,
      "risk": 0.14270984581688873
    },
    {
      "key": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xpp3",
      "purl": "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xpp3@1.1.4c_7",
      "source_purls": [
        "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.xpp3@1.1.4c_7?type=jar"
      ],
      "name": "org.apache.servicemix.bundles.xpp3",
      "ecosystem": "maven",
      "version": "1.1.4c_7",
      "artifacts": [
        "apache-ldap-api-2.1.9-bin.tar.gz",
        "apache-ldap-api-2.1.9-bin.zip",
        "apache-ldap-api-2.1.9-src.tar.gz",
        "apache-ldap-api-2.1.9-src.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2014-02-14T19:02:51Z",
      "repository_url": "http://svn.apache.org/viewvc/servicemix/smx4/bundles/tags/org.apache.servicemix.bundles.xpp3-1.1.4c_7",
      "source_repo": null,
      "repository_source": null,
      "latest_release_at": "2014-02-14T19:02:53.000Z",
      "latest_release_version": "1.1.4c_7",
      "rankings_average": 1.069568005129438,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.842400671950067,
      "health": null,
      "health_inputs": 1,
      "risk": null
    }
  ],
  "sources": {
    "Alpha-Omega heuristic": "https://github.com/alpha-omega-security/heatmap/tree/4ed37981",
    "ecosyste.ms packages": "https://packages.ecosyste.ms/api/v1",
    "ecosyste.ms repositories": "https://repos.ecosyste.ms/api/v1",
    "ecosyste.ms issues": "https://issues.ecosyste.ms/api/v1",
    "deps.dev and OpenSSF Scorecard": "https://api.deps.dev/v3alpha",
    "ecosyste.ms data licence": "https://creativecommons.org/licenses/by-sa/4.0/",
    "deps.dev terms": "https://docs.deps.dev/api/v3alpha/#terms"
  },
  "attribution": "Alpha-Omega maintenance heuristic, with missing inputs left unknown. Includes ecosyste.ms data under CC BY-SA 4.0 and deps.dev and OpenSSF Scorecard observations. ATR selected, normalised and combined records and calculated maintenance indicators. gitbox_mirror identifies an inferred Apache GitHub mirror, not verified repository identity."
}