{ "kind": "sbom_heatmap", "analysis_version": 1, "generated_at": "2026-10-12T20:28:04.903859+00:00", "sboms": [ { "artifact_path": "apache-plc4x-extras-0.13.1-source-release.zip", "sbom_url": "https://downloads.apache.org/plc4x/plc4x-extras/0.13.1/apache-plc4x-extras-0.13.1-sbom.json", "sha256": "4a4d936adf5ce9345a4383df68eb668676e371dabb2591a843d8413eca50900a", "retrieved_at": "2026-10-12T20:28:04.945144+00:00", "components": 217, "files": 0, "packages": 217, "error": null } ], "rows": [ { "key": "pkg:maven/org.lz4/lz4-java", "purl": "pkg:maven/org.lz4/lz4-java@1.8.0", "source_purls": [ "pkg:maven/org.lz4/lz4-java@1.8.0?type=jar" ], "name": "lz4-java", "ecosystem": "maven", "version": "1.8.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-343h-94h5-c4wr", "GHSA-4v53-57pg-c464", "GHSA-6cx8-rjf8-pr8g", "GHSA-cmp6-m4wj-q63q", "GHSA-gm45-99xc-r7wv", "GHSA-mcr4-qmvw-px4g", "GHSA-vqf4-7m7x-wgfc", "GHSA-xx22-p4ch-683r" ], "published_at": "2021-06-19T06:31:32Z", "repository_url": "", "source_repo": "github.com/lz4/lz4-java", "repository_source": "deps.dev", "latest_release_at": "2025-11-26T08:55:02.000Z", "latest_release_version": "1.8.1", "rankings_average": 5.847851114737359, "archived": false, "dds": 0.5037037037037038, "active_maintainers": 0, "governance_files": 0, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.58312358471254, "health": 0.30275668309271153, "health_inputs": 4, "risk": 0.4065790223718396 }, { "key": "pkg:maven/net.minidev/json-smart", "purl": "pkg:maven/net.minidev/json-smart@2.5.0", "source_purls": [ "pkg:maven/net.minidev/json-smart@2.5.0?type=jar" ], "name": "json-smart", "ecosystem": "maven", "version": "2.5.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-pq2g-wx69-c263" ], "published_at": "2023-07-09T18:46:25Z", "repository_url": "https://github.com/netplex/json-smart-v2", "source_repo": "github.com/netplex/json-smart-v2", "repository_source": "deps.dev", "latest_release_at": "2025-08-02T21:31:21.000Z", "latest_release_version": "2.6.0", "rankings_average": 9.656184729868013, "archived": false, "dds": 0.44034090909090906, "active_maintainers": 0, "governance_files": 0, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.48730689896953716, "health": 0.2605518793955419, "health_inputs": 4, "risk": 0.3603381706006108 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-core", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.4", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.4?type=jar" ], "name": "jackson-core", "ecosystem": "maven", "version": "2.15.4", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-72hv-8253-57qq", "GHSA-7hhh-6rmp-j9qf", "GHSA-r7wm-3cxj-wff9" ], "published_at": "2024-02-15T17:09:49Z", "repository_url": "https://github.com/FasterXML/jackson-core", "source_repo": "github.com/fasterxml/jackson-core", "repository_source": "deps.dev", "latest_release_at": "2026-09-22T02:29:25.000Z", "latest_release_version": "2.22.3", "rankings_average": 2.8085276909513506, "archived": false, "dds": 0.1548655812192351, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7102475056169733, "health": 0.5339791640350985, "health_inputs": 4, "risk": 0.33099013630960794 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-core", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.1", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.1?type=jar" ], "name": "jackson-core", "ecosystem": "maven", "version": "2.18.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-72hv-8253-57qq", "GHSA-7hhh-6rmp-j9qf", "GHSA-p6pp-m3f8-5c89", "GHSA-r7wm-3cxj-wff9" ], "published_at": "2024-10-28T23:13:13Z", "repository_url": "https://github.com/FasterXML/jackson-core", "source_repo": "github.com/fasterxml/jackson-core", "repository_source": "deps.dev", "latest_release_at": "2026-09-22T02:29:25.000Z", "latest_release_version": "2.22.3", "rankings_average": 2.8085276909513506, "archived": false, "dds": 0.1548655812192351, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7102475056169733, "health": 0.5339791640350985, "health_inputs": 4, "risk": 0.33099013630960794 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-core", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.3", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.3?type=jar" ], "name": "jackson-core", "ecosystem": "maven", "version": "2.18.3", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-72hv-8253-57qq", "GHSA-7hhh-6rmp-j9qf", "GHSA-p6pp-m3f8-5c89", "GHSA-r7wm-3cxj-wff9" ], "published_at": "2025-02-28T23:29:12Z", "repository_url": "https://github.com/FasterXML/jackson-core", "source_repo": "github.com/fasterxml/jackson-core", "repository_source": "deps.dev", "latest_release_at": "2026-09-22T02:29:25.000Z", "latest_release_version": "2.22.3", "rankings_average": 2.8085276909513506, "archived": false, "dds": 0.1548655812192351, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7102475056169733, "health": 0.5339791640350985, "health_inputs": 4, "risk": 0.33099013630960794 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-core", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.2", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.2?type=jar" ], "name": "jackson-core", "ecosystem": "maven", "version": "2.19.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-72hv-8253-57qq", "GHSA-7hhh-6rmp-j9qf", "GHSA-p6pp-m3f8-5c89", "GHSA-r7wm-3cxj-wff9" ], "published_at": "2025-07-18T17:41:18Z", "repository_url": "https://github.com/FasterXML/jackson-core", "source_repo": "github.com/fasterxml/jackson-core", "repository_source": "deps.dev", "latest_release_at": "2026-09-22T02:29:25.000Z", "latest_release_version": "2.22.3", "rankings_average": 2.8085276909513506, "archived": false, "dds": 0.1548655812192351, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7102475056169733, "health": 0.5339791640350985, "health_inputs": 4, "risk": 0.33099013630960794 }, { "key": "pkg:maven/ch.qos.logback/logback-core", "purl": "pkg:maven/ch.qos.logback/logback-core@1.5.18", "source_purls": [ "pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar" ], "name": "logback-core", "ecosystem": "maven", "version": "1.5.18", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-25qh-j22f-pwp8", "GHSA-jhq6-gfmj-v8fx", "GHSA-p47f-322f-whfh", "GHSA-qqpg-mvqg-649v" ], "published_at": "2025-03-18T12:47:13Z", "repository_url": "https://github.com/qos-ch/logback", "source_repo": "github.com/qos-ch/logback", "repository_source": "deps.dev", "latest_release_at": "2026-10-01T01:54:33.000Z", "latest_release_version": "1.6.5", "rankings_average": 2.7443996954396086, "archived": false, "dds": 0.3090237710593122, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7139270135286714, "health": 0.5745679779419298, "health_inputs": 4, "risk": 0.30372741296738187 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-databind", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.4", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.4?type=jar" ], "name": "jackson-databind", "ecosystem": "maven", "version": "2.15.4", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3pjw-73gf-8qr5", "GHSA-5jmj-h7xm-6q6v", "GHSA-cxp5-3px4-pw24", "GHSA-gx83-3vf8-gh7j", "GHSA-hgj6-7826-r7m5", "GHSA-j3rv-43j4-c7qm", "GHSA-q4xh-88c3-wmh7", "GHSA-rmj7-2vxq-3g9f", "GHSA-vvgp-rfg2-7rr6", "GHSA-wjgm-6hv5-3cvf", "GHSA-wv8q-qhhj-9h54" ], "published_at": "2024-02-15T17:35:31Z", "repository_url": "https://github.com/FasterXML/jackson-databind", "source_repo": "github.com/fasterxml/jackson-databind", "repository_source": "deps.dev", "latest_release_at": "2026-09-22T02:29:22.000Z", "latest_release_version": "2.22.3", "rankings_average": 2.031618177446502, "archived": false, "dds": 0.148047640584954, "active_maintainers": 3, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7596820007448203, "health": 0.6156080042824136, "health_inputs": 4, "risk": 0.29201568037703046 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-databind", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.1", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.1?type=jar" ], "name": "jackson-databind", "ecosystem": "maven", "version": "2.18.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3pjw-73gf-8qr5", "GHSA-5gvw-p9qm-jgwh", "GHSA-5jmj-h7xm-6q6v", "GHSA-cxp5-3px4-pw24", "GHSA-gx83-3vf8-gh7j", "GHSA-hgj6-7826-r7m5", "GHSA-j3rv-43j4-c7qm", "GHSA-mhm7-754m-9p8w", "GHSA-q4xh-88c3-wmh7", "GHSA-rmj7-2vxq-3g9f", "GHSA-vvgp-rfg2-7rr6", "GHSA-wjgm-6hv5-3cvf", "GHSA-wv8q-qhhj-9h54" ], "published_at": "2024-10-28T23:23:32Z", "repository_url": "https://github.com/FasterXML/jackson-databind", "source_repo": "github.com/fasterxml/jackson-databind", "repository_source": "deps.dev", "latest_release_at": "2026-09-22T02:29:22.000Z", "latest_release_version": "2.22.3", "rankings_average": 2.031618177446502, "archived": false, "dds": 0.148047640584954, "active_maintainers": 3, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7596820007448203, "health": 0.6156080042824136, "health_inputs": 4, "risk": 0.29201568037703046 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-databind", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.3", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.3?type=jar" ], "name": "jackson-databind", "ecosystem": "maven", "version": "2.18.3", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3pjw-73gf-8qr5", "GHSA-5gvw-p9qm-jgwh", "GHSA-5jmj-h7xm-6q6v", "GHSA-cxp5-3px4-pw24", "GHSA-gx83-3vf8-gh7j", "GHSA-hgj6-7826-r7m5", "GHSA-j3rv-43j4-c7qm", "GHSA-mhm7-754m-9p8w", "GHSA-q4xh-88c3-wmh7", "GHSA-rmj7-2vxq-3g9f", "GHSA-vvgp-rfg2-7rr6", "GHSA-wjgm-6hv5-3cvf", "GHSA-wv8q-qhhj-9h54" ], "published_at": "2025-02-28T23:38:21Z", "repository_url": "https://github.com/FasterXML/jackson-databind", "source_repo": "github.com/fasterxml/jackson-databind", "repository_source": "deps.dev", "latest_release_at": "2026-09-22T02:29:22.000Z", "latest_release_version": "2.22.3", "rankings_average": 2.031618177446502, "archived": false, "dds": 0.148047640584954, "active_maintainers": 3, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7596820007448203, "health": 0.6156080042824136, "health_inputs": 4, "risk": 0.29201568037703046 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-databind", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2?type=jar" ], "name": "jackson-databind", "ecosystem": "maven", "version": "2.19.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3pjw-73gf-8qr5", "GHSA-5jmj-h7xm-6q6v", "GHSA-cxp5-3px4-pw24", "GHSA-gx83-3vf8-gh7j", "GHSA-hgj6-7826-r7m5", "GHSA-j3rv-43j4-c7qm", "GHSA-q4xh-88c3-wmh7", "GHSA-rmj7-2vxq-3g9f", "GHSA-vvgp-rfg2-7rr6", "GHSA-wjgm-6hv5-3cvf", "GHSA-wv8q-qhhj-9h54" ], "published_at": "2025-07-18T17:50:07Z", "repository_url": "https://github.com/FasterXML/jackson-databind", "source_repo": "github.com/fasterxml/jackson-databind", "repository_source": "deps.dev", "latest_release_at": "2026-09-22T02:29:22.000Z", "latest_release_version": "2.22.3", "rankings_average": 2.031618177446502, "archived": false, "dds": 0.148047640584954, "active_maintainers": 3, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7596820007448203, "health": 0.6156080042824136, "health_inputs": 4, "risk": 0.29201568037703046 }, { "key": "pkg:maven/org.bouncycastle/bcprov-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.79", "source_purls": [ "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.79?type=jar" ], "name": "bcprov-jdk18on", "ecosystem": "maven", "version": "1.79", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-574f-3g2m-x479", "GHSA-9pwp-9qqc-pr26", "GHSA-c3fc-8qff-9hwx", "GHSA-qp49-qgx5-5m26" ], "published_at": "2024-10-30T02:03:35Z", "repository_url": "https://github.com/bcgit/bc-java", "source_repo": "github.com/bcgit/bc-java", "repository_source": "deps.dev", "latest_release_at": "2026-09-12T02:10:20.000Z", "latest_release_version": "1.86", "rankings_average": 3.1826974292842927, "archived": false, "dds": 0.5124223602484472, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6899417141551654, "health": 0.6210822281269187, "health_inputs": 4, "risk": 0.2614311770499696 }, { "key": "pkg:maven/org.bouncycastle/bcprov-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80", "source_purls": [ "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar" ], "name": "bcprov-jdk18on", "ecosystem": "maven", "version": "1.80", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-574f-3g2m-x479", "GHSA-9pwp-9qqc-pr26", "GHSA-c3fc-8qff-9hwx", "GHSA-qp49-qgx5-5m26" ], "published_at": "2025-01-14T20:00:33Z", "repository_url": "https://github.com/bcgit/bc-java", "source_repo": "github.com/bcgit/bc-java", "repository_source": "deps.dev", "latest_release_at": "2026-09-12T02:10:20.000Z", "latest_release_version": "1.86", "rankings_average": 3.1826974292842927, "archived": false, "dds": 0.5124223602484472, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6899417141551654, "health": 0.6210822281269187, "health_inputs": 4, "risk": 0.2614311770499696 }, { "key": "pkg:maven/org.bouncycastle/bcprov-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.81", "source_purls": [ "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.81?type=jar" ], "name": "bcprov-jdk18on", "ecosystem": "maven", "version": "1.81", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-574f-3g2m-x479", "GHSA-9pwp-9qqc-pr26", "GHSA-c3fc-8qff-9hwx", "GHSA-qp49-qgx5-5m26" ], "published_at": "2025-06-04T07:35:12Z", "repository_url": "https://github.com/bcgit/bc-java", "source_repo": "github.com/bcgit/bc-java", "repository_source": "deps.dev", "latest_release_at": "2026-09-12T02:10:20.000Z", "latest_release_version": "1.86", "rankings_average": 3.1826974292842927, "archived": false, "dds": 0.5124223602484472, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6899417141551654, "health": 0.6210822281269187, "health_inputs": 4, "risk": 0.2614311770499696 }, { "key": "pkg:maven/org.bouncycastle/bcpkix-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.79", "source_purls": [ "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.79?type=jar" ], "name": "bcpkix-jdk18on", "ecosystem": "maven", "version": "1.79", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-wg6q-6289-32hp" ], "published_at": "2024-10-30T02:04:11Z", "repository_url": "https://github.com/bcgit/bc-java", "source_repo": "github.com/bcgit/bc-java", "repository_source": "deps.dev", "latest_release_at": "2026-09-12T02:10:16.000Z", "latest_release_version": "1.86", "rankings_average": 3.1983564079664553, "archived": false, "dds": 0.5124223602484472, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6891320363082117, "health": 0.621082217556988, "health_inputs": 4, "risk": 0.26112438300834484 }, { "key": "pkg:maven/org.bouncycastle/bcpkix-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.80", "source_purls": [ "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.80?type=jar" ], "name": "bcpkix-jdk18on", "ecosystem": "maven", "version": "1.80", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-wg6q-6289-32hp" ], "published_at": "2025-01-14T20:01:57Z", "repository_url": "https://github.com/bcgit/bc-java", "source_repo": "github.com/bcgit/bc-java", "repository_source": "deps.dev", "latest_release_at": "2026-09-12T02:10:16.000Z", "latest_release_version": "1.86", "rankings_average": 3.1983564079664553, "archived": false, "dds": 0.5124223602484472, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6891320363082117, "health": 0.621082217556988, "health_inputs": 4, "risk": 0.26112438300834484 }, { "key": "pkg:maven/org.bouncycastle/bcpkix-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.81", "source_purls": [ "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.81?type=jar" ], "name": "bcpkix-jdk18on", "ecosystem": "maven", "version": "1.81", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-wg6q-6289-32hp" ], "published_at": "2025-06-04T07:44:04Z", "repository_url": "https://github.com/bcgit/bc-java", "source_repo": "github.com/bcgit/bc-java", "repository_source": "deps.dev", "latest_release_at": "2026-09-12T02:10:16.000Z", "latest_release_version": "1.86", "rankings_average": 3.1983564079664553, "archived": false, "dds": 0.5124223602484472, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6891320363082117, "health": 0.621082217556988, "health_inputs": 4, "risk": 0.26112438300834484 }, { "key": "pkg:maven/io.netty/netty-handler", "purl": "pkg:maven/io.netty/netty-handler@4.1.115.Final", "source_purls": [ "pkg:maven/io.netty/netty-handler@4.1.115.Final?type=jar" ], "name": "netty-handler", "ecosystem": "maven", "version": "4.1.115.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3qp7-7mw8-wx86", "GHSA-4g8c-wm8x-jfhw", "GHSA-c4c3-7fpv-j4q5", "GHSA-c653-97m9-rcg9", "GHSA-fccg-mwvh-qqg4", "GHSA-x4gw-5cx5-pgmh" ], "published_at": "2024-11-12T12:38:15Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:13.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.2776308407469744, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9469120131687663, "health": 0.7607618871642295, "health_inputs": 4, "risk": 0.22653744305201587 }, { "key": "pkg:maven/io.netty/netty-handler", "purl": "pkg:maven/io.netty/netty-handler@4.1.119.Final", "source_purls": [ "pkg:maven/io.netty/netty-handler@4.1.119.Final?type=jar" ], "name": "netty-handler", "ecosystem": "maven", "version": "4.1.119.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3qp7-7mw8-wx86", "GHSA-c4c3-7fpv-j4q5", "GHSA-c653-97m9-rcg9", "GHSA-fccg-mwvh-qqg4", "GHSA-x4gw-5cx5-pgmh" ], "published_at": "2025-02-26T09:07:07Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:13.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.2776308407469744, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9469120131687663, "health": 0.7607618871642295, "health_inputs": 4, "risk": 0.22653744305201587 }, { "key": "pkg:maven/io.netty/netty-handler", "purl": "pkg:maven/io.netty/netty-handler@4.1.123.Final", "source_purls": [ "pkg:maven/io.netty/netty-handler@4.1.123.Final?type=jar" ], "name": "netty-handler", "ecosystem": "maven", "version": "4.1.123.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3qp7-7mw8-wx86", "GHSA-c4c3-7fpv-j4q5", "GHSA-c653-97m9-rcg9", "GHSA-fccg-mwvh-qqg4", "GHSA-x4gw-5cx5-pgmh" ], "published_at": "2025-07-15T09:23:59Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:13.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.2776308407469744, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9469120131687663, "health": 0.7607618871642295, "health_inputs": 4, "risk": 0.22653744305201587 }, { "key": "pkg:maven/io.netty/netty-handler", "purl": "pkg:maven/io.netty/netty-handler@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-handler@4.2.0.Final?type=jar" ], "name": "netty-handler", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3qp7-7mw8-wx86", "GHSA-c4c3-7fpv-j4q5", "GHSA-c653-97m9-rcg9", "GHSA-fccg-mwvh-qqg4", "GHSA-x4gw-5cx5-pgmh" ], "published_at": "2025-04-03T15:26:26Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:13.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.2776308407469744, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9469120131687663, "health": 0.7607618871642295, "health_inputs": 4, "risk": 0.22653744305201587 }, { "key": "pkg:maven/io.netty/netty-codec-http", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.119.Final", "source_purls": [ "pkg:maven/io.netty/netty-codec-http@4.1.119.Final?type=jar" ], "name": "netty-codec-http", "ecosystem": "maven", "version": "4.1.119.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-38f8-5428-x5cv", "GHSA-4mp9-239f-g9hg", "GHSA-57rv-r2g8-2cj3", "GHSA-6cqp-g7gg-8hr5", "GHSA-6jqx-86gh-f27w", "GHSA-84h7-rjj3-6jx4", "GHSA-8c42-7qj2-3j46", "GHSA-f6hv-jmp6-3vwv", "GHSA-fghv-69vj-qj49", "GHSA-gcjf-9mgh-3p7g", "GHSA-hvcg-qmg6-jm4c", "GHSA-jppx-w49h-x2qq", "GHSA-m4cv-j2px-7723", "GHSA-mvh2-crg5-v77c", "GHSA-pwqr-wmgm-9rr8", "GHSA-q4f6-jm68-57ww", "GHSA-v8h7-rr48-vmmv", "GHSA-xxqh-mfjm-7mv9" ], "published_at": "2025-02-26T09:09:03Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:00.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.28556544041035503, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9455705106523604, "health": 0.760761852811955, "health_inputs": 4, "risk": 0.2262165370041243 }, { "key": "pkg:maven/io.netty/netty-common", "purl": "pkg:maven/io.netty/netty-common@4.1.115.Final", "source_purls": [ "pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar" ], "name": "netty-common", "ecosystem": "maven", "version": "4.1.115.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-389x-839f-4rhx" ], "published_at": "2024-11-12T12:38:53Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:11.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.28668750500921697, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9453814717599126, "health": 0.7607618818792642, "health_inputs": 4, "risk": 0.22617128421005303 }, { "key": "pkg:maven/io.netty/netty-codec", "purl": "pkg:maven/io.netty/netty-codec@4.1.115.Final", "source_purls": [ "pkg:maven/io.netty/netty-codec@4.1.115.Final?type=jar" ], "name": "netty-codec", "ecosystem": "maven", "version": "4.1.115.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3p8m-j85q-pgmj", "GHSA-558v-64gr-wgg4", "GHSA-mj4r-2hfc-f8p6" ], "published_at": "2024-11-12T12:38:01Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:12.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.29041436242686547, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.944754773564519, "health": 0.7607618845217469, "health_inputs": 4, "risk": 0.2260213516166593 }, { "key": "pkg:maven/io.netty/netty-codec", "purl": "pkg:maven/io.netty/netty-codec@4.1.119.Final", "source_purls": [ "pkg:maven/io.netty/netty-codec@4.1.119.Final?type=jar" ], "name": "netty-codec", "ecosystem": "maven", "version": "4.1.119.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3p8m-j85q-pgmj", "GHSA-558v-64gr-wgg4", "GHSA-mj4r-2hfc-f8p6" ], "published_at": "2025-02-26T09:09:35Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:12.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.29041436242686547, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.944754773564519, "health": 0.7607618845217469, "health_inputs": 4, "risk": 0.2260213516166593 }, { "key": "pkg:maven/io.netty/netty-codec", "purl": "pkg:maven/io.netty/netty-codec@4.1.123.Final", "source_purls": [ "pkg:maven/io.netty/netty-codec@4.1.123.Final?type=jar" ], "name": "netty-codec", "ecosystem": "maven", "version": "4.1.123.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3p8m-j85q-pgmj", "GHSA-558v-64gr-wgg4", "GHSA-mj4r-2hfc-f8p6" ], "published_at": "2025-07-15T09:23:59Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:12.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.29041436242686547, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.944754773564519, "health": 0.7607618845217469, "health_inputs": 4, "risk": 0.2260213516166593 }, { "key": "pkg:maven/org.apache.httpcomponents.client5/httpclient5", "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.1", "source_purls": [ "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.1?type=jar" ], "name": "httpclient5", "ecosystem": "maven", "version": "5.4.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-73m2-qfq3-56cx", "GHSA-hjcp-jmpx-g3qm" ], "published_at": "2024-10-25T07:30:53Z", "repository_url": "https://gitbox.apache.org/repos/asf/httpcomponents-client.git", "source_repo": "github.com/apache/httpcomponents-client", "repository_source": "gitbox_mirror", "latest_release_at": "2026-10-11T02:15:11.000Z", "latest_release_version": "5.6.5", "rankings_average": 3.2819988779354015, "archived": false, "dds": 0.3961652714015663, "active_maintainers": 2, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6848576493684431, "health": 0.6819730627771974, "health_inputs": 4, "risk": 0.21780318066225401 }, { "key": "pkg:maven/org.apache.calcite/calcite-core", "purl": "pkg:maven/org.apache.calcite/calcite-core@1.40.0", "source_purls": [ "pkg:maven/org.apache.calcite/calcite-core@1.40.0?type=jar" ], "name": "calcite-core", "ecosystem": "maven", "version": "1.40.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-c2rv-hwqm-wjpg" ], "published_at": "2025-05-23T16:26:10Z", "repository_url": "https://gitbox.apache.org/repos/asf/calcite.git", "source_repo": "github.com/apache/calcite", "repository_source": "deps.dev", "latest_release_at": "2026-05-28T11:27:35.000Z", "latest_release_version": "1.42.0", "rankings_average": 1.9592351839424684, "archived": false, "dds": 0.7882707299787385, "active_maintainers": 9, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.764918197220023, "health": 0.7490367815564474, "health_inputs": 4, "risk": 0.1919663326203771 }, { "key": "pkg:maven/org.apache.httpcomponents.core5/httpcore5", "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.1", "source_purls": [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.1?type=jar" ], "name": "httpcore5", "ecosystem": "maven", "version": "5.3.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-hf6x-8p5f-cgmf" ], "published_at": "2024-10-19T10:20:07Z", "repository_url": "https://gitbox.apache.org/repos/asf/httpcomponents-core.git", "source_repo": "github.com/apache/httpcomponents-core", "repository_source": "gitbox_mirror", "latest_release_at": "2026-09-25T02:15:02.000Z", "latest_release_version": "5.4.4", "rankings_average": 6.040024427114097, "archived": false, "dds": 0.31870669745958424, "active_maintainers": 3, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5771266139632245, "health": 0.7422887608061616, "health_inputs": 4, "risk": 0.1487320148562066 }, { "key": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2", "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.1", "source_purls": [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.1?type=jar" ], "name": "httpcore5-h2", "ecosystem": "maven", "version": "5.3.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-v3jc-474w-2wm6" ], "published_at": "2024-10-19T10:20:32Z", "repository_url": "https://gitbox.apache.org/repos/asf/httpcomponents-core.git", "source_repo": "github.com/apache/httpcomponents-core", "repository_source": "gitbox_mirror", "latest_release_at": "2026-09-25T02:15:01.000Z", "latest_release_version": "5.4.4", "rankings_average": 6.29142348006287, "archived": false, "dds": 0.31870669745958424, "active_maintainers": 3, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5695239627082371, "health": 0.7422887581636789, "health_inputs": 4, "risk": 0.14677272768508243 }, { "key": "pkg:maven/org.apache.commons/commons-lang3", "purl": "pkg:maven/org.apache.commons/commons-lang3@3.17.0", "source_purls": [ "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar" ], "name": "commons-lang3", "ecosystem": "maven", "version": "3.17.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-j288-q9x7-2f5v" ], "published_at": "2024-08-24T19:06:31Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-lang.git", "source_repo": "github.com/apache/commons-lang", "repository_source": "gitbox_mirror", "latest_release_at": "2026-09-30T02:08:31.000Z", "latest_release_version": "3.21.0", "rankings_average": 0.0017363928575483336, "archived": false, "dds": 0.7746743486973948, "active_maintainers": 2, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9996240862911424, "health": 0.8574211929163076, "health_inputs": 4, "risk": 0.1425252097555171 }, { "key": "pkg:maven/org.eclipse.jetty/jetty-util", "purl": "pkg:maven/org.eclipse.jetty/jetty-util@12.0.23", "source_purls": [ "pkg:maven/org.eclipse.jetty/jetty-util@12.0.23?type=jar" ], "name": "jetty-util", "ecosystem": "maven", "version": "12.0.23", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-w7x5-g22v-xqhr" ], "published_at": "2025-07-02T14:15:47Z", "repository_url": "https://github.com/jetty/jetty.project", "source_repo": "github.com/jetty/jetty.project", "repository_source": "deps.dev", "latest_release_at": "2026-10-06T00:27:11.000Z", "latest_release_version": "12.1.14", "rankings_average": 1.8227381536643263, "archived": false, "dds": 0.785330550992319, "active_maintainers": 2, "governance_files": 3, "maintained": null, "scorecard_date": null, "criticality": 0.7751505325706559, "health": 0.8614390402091322, "health_inputs": 4, "risk": 0.10740560177539242 }, { "key": "pkg:maven/io.netty/netty-codec-compression", "purl": "pkg:maven/io.netty/netty-codec-compression@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-codec-compression@4.2.0.Final?type=jar" ], "name": "netty-codec-compression", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-3p8m-j85q-pgmj", "GHSA-558v-64gr-wgg4", "GHSA-mj4r-2hfc-f8p6" ], "published_at": "2025-04-03T15:25:42Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:55:59.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 42.65347322360897, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.18175856184426553, "health": 0.7607618501694723, "health_inputs": 4, "risk": 0.04348358205147963 }, { "key": "pkg:maven/commons-lang/commons-lang", "purl": "pkg:maven/commons-lang/commons-lang@2.4", "source_purls": [ "pkg:maven/commons-lang/commons-lang@2.4?type=jar" ], "name": "commons-lang", "ecosystem": "maven", "version": "2.4", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-j288-q9x7-2f5v" ], "published_at": "2008-03-19T05:42:28Z", "repository_url": "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X", "source_repo": null, "repository_source": null, "latest_release_at": "2011-01-16T22:21:47.000Z", "latest_release_version": "2.6", "rankings_average": 0.007480430659079373, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.9983851795506924, "health": null, "health_inputs": 1, "risk": null }, { "key": "pkg:maven/org.apache.kafka/kafka-clients", "purl": "pkg:maven/org.apache.kafka/kafka-clients@3.9.0", "source_purls": [ "pkg:maven/org.apache.kafka/kafka-clients@3.9.0?type=jar" ], "name": "kafka-clients", "ecosystem": "maven", "version": "3.9.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "found", "advisories": [ "GHSA-5qcv-4rpc-jp93", "GHSA-vgq5-3255-v292", "GHSA-wf66-mphr-4c4r" ], "published_at": "2024-10-30T16:24:34Z", "repository_url": "", "source_repo": null, "repository_source": null, "latest_release_at": "2026-06-17T18:46:39.000Z", "latest_release_version": "4.3.1", "rankings_average": 0.6696321231065161, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.8889295924718089, "health": null, "health_inputs": 1, "risk": null }, { "key": "pkg:maven/org.codehaus.janino/janino", "purl": "pkg:maven/org.codehaus.janino/janino@3.1.12", "source_purls": [ "pkg:maven/org.codehaus.janino/janino@3.1.12?type=jar" ], "name": "janino", "ecosystem": "maven", "version": "3.1.12", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-02-06T10:50:26Z", "repository_url": "https://github.com/janino-compiler/janino", "source_repo": "github.com/janino-compiler/janino", "repository_source": "deps.dev", "latest_release_at": "2024-02-06T10:50:28.000Z", "latest_release_version": "3.1.12", "rankings_average": 5.360750432980608, "archived": true, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5991120153315594, "health": 0.05, "health_inputs": 3, "risk": 0.5691564145649814 }, { "key": "pkg:maven/org.codehaus.janino/commons-compiler", "purl": "pkg:maven/org.codehaus.janino/commons-compiler@3.1.12", "source_purls": [ "pkg:maven/org.codehaus.janino/commons-compiler@3.1.12?type=jar" ], "name": "commons-compiler", "ecosystem": "maven", "version": "3.1.12", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-02-06T10:52:03Z", "repository_url": "https://github.com/janino-compiler/janino", "source_repo": "github.com/janino-compiler/janino", "repository_source": "deps.dev", "latest_release_at": "2024-02-06T10:52:04.000Z", "latest_release_version": "3.1.12", "rankings_average": 5.4529327553584475, "archived": true, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5959943599703521, "health": 0.05, "health_inputs": 3, "risk": 0.5661946419718344 }, { "key": "pkg:maven/com.google.guava/guava", "purl": "pkg:maven/com.google.guava/guava@33.2.1-jre", "source_purls": [ "pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar" ], "name": "guava", "ecosystem": "maven", "version": "33.2.1-jre", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-05-31T18:06:43Z", "repository_url": "https://github.com/google/guava", "source_repo": "github.com/google/guava", "repository_source": "deps.dev", "latest_release_at": "2017-08-04T21:24:32.000Z", "latest_release_version": "23.0", "rankings_average": 0.2313456760439208, "archived": false, "dds": 0.6975382767937557, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9549074360772664, "health": 0.4243845691984389, "health_inputs": 4, "risk": 0.5496594551932298 }, { "key": "pkg:maven/com.google.guava/guava", "purl": "pkg:maven/com.google.guava/guava@33.3.0-jre", "source_purls": [ "pkg:maven/com.google.guava/guava@33.3.0-jre?type=jar" ], "name": "guava", "ecosystem": "maven", "version": "33.3.0-jre", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-08-16T23:08:19Z", "repository_url": "https://github.com/google/guava", "source_repo": "github.com/google/guava", "repository_source": "deps.dev", "latest_release_at": "2017-08-04T21:24:32.000Z", "latest_release_version": "23.0", "rankings_average": 0.2313456760439208, "archived": false, "dds": 0.6975382767937557, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9549074360772664, "health": 0.4243845691984389, "health_inputs": 4, "risk": 0.5496594551932298 }, { "key": "pkg:maven/com.yahoo.datasketches/memory", "purl": "pkg:maven/com.yahoo.datasketches/memory@0.9.0", "source_purls": [ "pkg:maven/com.yahoo.datasketches/memory@0.9.0?type=jar" ], "name": "memory", "ecosystem": "maven", "version": "0.9.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2017-03-24T22:54:16Z", "repository_url": "https://github.com/DataSketches/memory", "source_repo": "github.com/datasketches/sketches-core", "repository_source": "deps.dev", "latest_release_at": "2019-04-09T23:15:35.000Z", "latest_release_version": "0.12.2", "rankings_average": 2.883400574637848, "archived": false, "dds": 0.5788206979542719, "active_maintainers": 1, "governance_files": 0, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7060290838342713, "health": 0.22803850782190133, "health_inputs": 4, "risk": 0.5450272650778399 }, { "key": "pkg:maven/com.google.guava/listenablefuture", "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava", "source_purls": [ "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" ], "name": "listenablefuture", "ecosystem": "maven", "version": "9999.0-empty-to-avoid-conflict-with-guava", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2018-09-11T19:40:43Z", "repository_url": "https://github.com/google/guava", "source_repo": "github.com/google/guava", "repository_source": "deps.dev", "latest_release_at": "2018-09-11T19:40:24.000Z", "latest_release_version": "1.0", "rankings_average": 0.3375747079257977, "archived": false, "dds": 0.6975382767937557, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.93697714857936, "health": 0.4243845691984389, "health_inputs": 4, "risk": 0.5393385050307266 }, { "key": "pkg:maven/com.jayway.jsonpath/json-path", "purl": "pkg:maven/com.jayway.jsonpath/json-path@2.9.0", "source_purls": [ "pkg:maven/com.jayway.jsonpath/json-path@2.9.0?type=jar" ], "name": "json-path", "ecosystem": "maven", "version": "2.9.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-01-20T10:04:55Z", "repository_url": "https://github.com/jayway/JsonPath", "source_repo": "github.com/jayway/jsonpath", "repository_source": "ecosyste.ms", "latest_release_at": "2026-02-22T18:32:09.000Z", "latest_release_version": "3.0.0", "rankings_average": 1.5985012422858058, "archived": false, "dds": 0.5708661417322834, "active_maintainers": 0, "governance_files": 0, "maintained": null, "scorecard_date": null, "criticality": 0.7930856128112812, "health": 0.3397301180480215, "health_inputs": 4, "risk": 0.5236505439487172 }, { "key": "pkg:maven/org.locationtech.jts/jts-core", "purl": "pkg:maven/org.locationtech.jts/jts-core@1.19.0", "source_purls": [ "pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar" ], "name": "jts-core", "ecosystem": "maven", "version": "1.19.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2022-06-21T20:03:12Z", "repository_url": "https://github.com/locationtech/jts", "source_repo": "github.com/locationtech/jts", "repository_source": "deps.dev", "latest_release_at": "2024-08-30T06:48:40.000Z", "latest_release_version": "1.20.0", "rankings_average": 4.0004404889427265, "archived": false, "dds": 0.15815959741193386, "active_maintainers": 0, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6512494093125274, "health": 0.19625929701528738, "health_inputs": 4, "risk": 0.5234356580592295 }, { "key": "pkg:maven/org.locationtech.jts.io/jts-io-common", "purl": "pkg:maven/org.locationtech.jts.io/jts-io-common@1.19.0", "source_purls": [ "pkg:maven/org.locationtech.jts.io/jts-io-common@1.19.0?type=jar" ], "name": "jts-io-common", "ecosystem": "maven", "version": "1.19.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2022-06-21T20:02:58Z", "repository_url": "https://github.com/locationtech/jts", "source_repo": "github.com/locationtech/jts", "repository_source": "deps.dev", "latest_release_at": "2024-08-30T06:48:25.000Z", "latest_release_version": "1.20.0", "rankings_average": 4.522700197218913, "archived": false, "dds": 0.15815959741193386, "active_maintainers": 0, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6297243158411192, "health": 0.1962592573780474, "health_inputs": 4, "risk": 0.5061350892612422 }, { "key": "pkg:maven/org.apache.commons/commons-math3", "purl": "pkg:maven/org.apache.commons/commons-math3@3.6.1", "source_purls": [ "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar" ], "name": "commons-math3", "ecosystem": "maven", "version": "3.6.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2016-03-17T17:35:08Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-math.git", "source_repo": "github.com/apache/commons-math", "repository_source": "gitbox_mirror", "latest_release_at": "2016-03-17T17:35:11.000Z", "latest_release_version": "3.6.1", "rankings_average": 0.0293851098969718, "archived": false, "dds": 0.7372056957563795, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9937246182002422, "health": 0.5176347572724282, "health_inputs": 4, "risk": 0.47933821666252335 }, { "key": "pkg:maven/org.xerial.snappy/snappy-java", "purl": "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5", "source_purls": [ "pkg:maven/org.xerial.snappy/snappy-java@1.1.10.5?type=jar" ], "name": "snappy-java", "ecosystem": "maven", "version": "1.1.10.5", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-09-27T07:21:26Z", "repository_url": "https://github.com/xerial/snappy-java", "source_repo": "github.com/xerial/snappy-java", "repository_source": "deps.dev", "latest_release_at": "2020-10-21T04:36:03.000Z", "latest_release_version": "1.1.8", "rankings_average": 5.227922111750963, "archived": false, "dds": 0.2874762808349146, "active_maintainers": 1, "governance_files": 1, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6036847269583454, "health": 0.2385357368753953, "health_inputs": 4, "risk": 0.45968434577291467 }, { "key": "pkg:maven/org.slf4j/slf4j-api", "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.25", "source_purls": [ "pkg:maven/org.slf4j/slf4j-api@1.7.25?type=jar" ], "name": "slf4j-api", "ecosystem": "maven", "version": "1.7.25", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2017-03-16T16:36:32Z", "repository_url": "https://github.com/qos-ch/slf4j", "source_repo": "github.com/qos-ch/slf4j", "repository_source": "deps.dev", "latest_release_at": "2026-09-23T02:52:54.000Z", "latest_release_version": "2.0.20", "rankings_average": 2.5688896723583943, "archived": false, "dds": 0.17976965448172255, "active_maintainers": 0, "governance_files": 1, "maintained": 6, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7243290772955459, "health": 0.37377054944441224, "health_inputs": 4, "risk": 0.45359620009622553 }, { "key": "pkg:maven/org.slf4j/slf4j-api", "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.16", "source_purls": [ "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar" ], "name": "slf4j-api", "ecosystem": "maven", "version": "2.0.16", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-08-10T09:15:06Z", "repository_url": "https://github.com/qos-ch/slf4j", "source_repo": "github.com/qos-ch/slf4j", "repository_source": "deps.dev", "latest_release_at": "2026-09-23T02:52:54.000Z", "latest_release_version": "2.0.20", "rankings_average": 2.5688896723583943, "archived": false, "dds": 0.17976965448172255, "active_maintainers": 0, "governance_files": 1, "maintained": 6, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7243290772955459, "health": 0.37377054944441224, "health_inputs": 4, "risk": 0.45359620009622553 }, { "key": "pkg:maven/org.slf4j/slf4j-api", "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.17", "source_purls": [ "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" ], "name": "slf4j-api", "ecosystem": "maven", "version": "2.0.17", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-25T16:43:12Z", "repository_url": "https://github.com/qos-ch/slf4j", "source_repo": "github.com/qos-ch/slf4j", "repository_source": "deps.dev", "latest_release_at": "2026-09-23T02:52:54.000Z", "latest_release_version": "2.0.20", "rankings_average": 2.5688896723583943, "archived": false, "dds": 0.17976965448172255, "active_maintainers": 0, "governance_files": 1, "maintained": 6, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7243290772955459, "health": 0.37377054944441224, "health_inputs": 4, "risk": 0.45359620009622553 }, { "key": "pkg:maven/org.slf4j/log4j-over-slf4j", "purl": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17", "source_purls": [ "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.17?type=jar" ], "name": "log4j-over-slf4j", "ecosystem": "maven", "version": "2.0.17", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-25T16:45:51Z", "repository_url": "https://github.com/qos-ch/slf4j", "source_repo": "github.com/qos-ch/slf4j", "repository_source": "deps.dev", "latest_release_at": "2026-09-23T02:52:53.000Z", "latest_release_version": "2.0.20", "rankings_average": 2.5843542920329163, "archived": false, "dds": 0.17976965448172255, "active_maintainers": 0, "governance_files": 1, "maintained": 6, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7233921975878264, "health": 0.37377054680192956, "health_inputs": 4, "risk": 0.45300950034317505 }, { "key": "pkg:maven/com.google.guava/failureaccess", "purl": "pkg:maven/com.google.guava/failureaccess@1.0.2", "source_purls": [ "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar" ], "name": "failureaccess", "ecosystem": "maven", "version": "1.0.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-10-17T13:16:09Z", "repository_url": "https://github.com/google/guava", "source_repo": "github.com/google/guava", "repository_source": "deps.dev", "latest_release_at": "2025-03-19T16:15:50.000Z", "latest_release_version": "1.0.3", "rankings_average": 0.3299671395367476, "archived": false, "dds": 0.6975382767937557, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9382130469242052, "health": 0.5437509681714142, "health_inputs": 4, "risk": 0.4280587943081161 }, { "key": "pkg:maven/com.google.j2objc/j2objc-annotations", "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0", "source_purls": [ "pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar" ], "name": "j2objc-annotations", "ecosystem": "maven", "version": "3.0.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-03-09T17:12:59Z", "repository_url": "https://github.com/google/j2objc", "source_repo": "github.com/google/j2objc", "repository_source": "deps.dev", "latest_release_at": "2025-08-14T17:49:49.000Z", "latest_release_version": "3.1", "rankings_average": 1.8673527615653374, "archived": false, "dds": 0.5127977248489157, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.771752608075782, "health": 0.4480373521495202, "health_inputs": 4, "risk": 0.42597861303902224 }, { "key": "pkg:maven/net.java.dev.jna/jna", "purl": "pkg:maven/net.java.dev.jna/jna@5.3.1", "source_purls": [ "pkg:maven/net.java.dev.jna/jna@5.3.1?type=jar" ], "name": "jna", "ecosystem": "maven", "version": "5.3.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2019-04-28T10:12:58Z", "repository_url": "https://github.com/java-native-access/jna", "source_repo": "github.com/java-native-access/jna", "repository_source": "deps.dev", "latest_release_at": "2026-06-12T16:48:57.000Z", "latest_release_version": "5.19.1", "rankings_average": 1.6758836258716037, "archived": false, "dds": 0.6145235361653272, "active_maintainers": 1, "governance_files": 0, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7867272047092311, "health": 0.4590755929880937, "health_inputs": 4, "risk": 0.4255599466874755 }, { "key": "pkg:maven/commons-cli/commons-cli", "purl": "pkg:maven/commons-cli/commons-cli@1.10.0", "source_purls": [ "pkg:maven/commons-cli/commons-cli@1.10.0?type=jar" ], "name": "commons-cli", "ecosystem": "maven", "version": "1.10.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-30T15:13:55Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-cli.git", "source_repo": "github.com/apache/commons-cli", "repository_source": "gitbox_mirror", "latest_release_at": "2025-11-08T22:40:25.000Z", "latest_release_version": "1.11.0", "rankings_average": 0.015962704709999734, "archived": false, "dds": 0.6930415263748597, "active_maintainers": 0, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9965685315340851, "health": 0.596112413388439, "health_inputs": 4, "risk": 0.40250165909432895 }, { "key": "pkg:maven/io.vavr/vavr", "purl": "pkg:maven/io.vavr/vavr@0.10.7", "source_purls": [ "pkg:maven/io.vavr/vavr@0.10.7?type=jar" ], "name": "vavr", "ecosystem": "maven", "version": "0.10.7", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-20T11:23:13Z", "repository_url": "https://github.com/vavr-io/vavr", "source_repo": "github.com/vavr-io/vavr", "repository_source": "ecosyste.ms", "latest_release_at": "2026-03-01T05:46:06.000Z", "latest_release_version": "1.0.1", "rankings_average": 2.4445227615870433, "archived": false, "dds": 0.4627841793833697, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7320145032806458, "health": 0.48085301121269564, "health_inputs": 4, "risk": 0.3800231251267816 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.4", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.4?type=jar" ], "name": "jackson-annotations", "ecosystem": "maven", "version": "2.15.4", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-02-15T16:59:33Z", "repository_url": "https://github.com/FasterXML/jackson-annotations", "source_repo": "github.com/fasterxml/jackson-annotations", "repository_source": "deps.dev", "latest_release_at": "2026-05-31T04:44:48.000Z", "latest_release_version": "2.22", "rankings_average": 4.647643917199174, "archived": false, "dds": 0.10285006195786861, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6248768702649806, "health": 0.41163601851283993, "health_inputs": 4, "risk": 0.3676550433283396 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.1", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.1?type=jar" ], "name": "jackson-annotations", "ecosystem": "maven", "version": "2.18.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-10-28T23:04:42Z", "repository_url": "https://github.com/FasterXML/jackson-annotations", "source_repo": "github.com/fasterxml/jackson-annotations", "repository_source": "deps.dev", "latest_release_at": "2026-05-31T04:44:48.000Z", "latest_release_version": "2.22", "rankings_average": 4.647643917199174, "archived": false, "dds": 0.10285006195786861, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6248768702649806, "health": 0.41163601851283993, "health_inputs": 4, "risk": 0.3676550433283396 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.3", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.3?type=jar" ], "name": "jackson-annotations", "ecosystem": "maven", "version": "2.18.3", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-28T23:25:05Z", "repository_url": "https://github.com/FasterXML/jackson-annotations", "source_repo": "github.com/fasterxml/jackson-annotations", "repository_source": "deps.dev", "latest_release_at": "2026-05-31T04:44:48.000Z", "latest_release_version": "2.22", "rankings_average": 4.647643917199174, "archived": false, "dds": 0.10285006195786861, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6248768702649806, "health": 0.41163601851283993, "health_inputs": 4, "risk": 0.3676550433283396 }, { "key": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2", "source_purls": [ "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2?type=jar" ], "name": "jackson-annotations", "ecosystem": "maven", "version": "2.19.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-18T17:34:27Z", "repository_url": "https://github.com/FasterXML/jackson-annotations", "source_repo": "github.com/fasterxml/jackson-annotations", "repository_source": "deps.dev", "latest_release_at": "2026-05-31T04:44:48.000Z", "latest_release_version": "2.22", "rankings_average": 4.647643917199174, "archived": false, "dds": 0.10285006195786861, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6248768702649806, "health": 0.41163601851283993, "health_inputs": 4, "risk": 0.3676550433283396 }, { "key": "pkg:maven/net.minidev/accessors-smart", "purl": "pkg:maven/net.minidev/accessors-smart@2.5.0", "source_purls": [ "pkg:maven/net.minidev/accessors-smart@2.5.0?type=jar" ], "name": "accessors-smart", "ecosystem": "maven", "version": "2.5.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-07-09T17:52:10Z", "repository_url": "https://github.com/netplex/json-smart-v2", "source_repo": "github.com/netplex/json-smart-v2", "repository_source": "deps.dev", "latest_release_at": "2025-08-02T21:05:32.000Z", "latest_release_version": "2.6.0", "rankings_average": 9.962692619626926, "archived": false, "dds": 0.44034090909090906, "active_maintainers": 0, "governance_files": 0, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.48116242694386735, "health": 0.2605477861898934, "health_inputs": 4, "risk": 0.3557966218058864 }, { "key": "pkg:maven/org.apache.commons/commons-pool2", "purl": "pkg:maven/org.apache.commons/commons-pool2@2.12.0", "source_purls": [ "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar" ], "name": "commons-pool2", "ecosystem": "maven", "version": "2.12.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-09-26T18:50:43Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-pool.git", "source_repo": "github.com/apache/commons-pool", "repository_source": "gitbox_mirror", "latest_release_at": "2026-01-06T19:07:04.000Z", "latest_release_version": "2.13.1", "rankings_average": 0.05249659373246773, "archived": false, "dds": 0.8437710437710437, "active_maintainers": 0, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9889136047425515, "health": 0.6472312859515894, "health_inputs": 4, "risk": 0.3488577806500081 }, { "key": "pkg:maven/com.fazecast/jSerialComm", "purl": "pkg:maven/com.fazecast/jSerialComm@2.11.2", "source_purls": [ "pkg:maven/com.fazecast/jSerialComm@2.11.2?type=jar" ], "name": "jSerialComm", "ecosystem": "maven", "version": "2.11.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-01T07:31:51Z", "repository_url": "https://github.com/Fazecast/jSerialComm", "source_repo": "github.com/fazecast/jserialcomm", "repository_source": "deps.dev", "latest_release_at": "2025-11-01T20:34:40.000Z", "latest_release_version": "2.11.4", "rankings_average": 6.492137788486382, "archived": false, "dds": 0.518796992481203, "active_maintainers": 0, "governance_files": 1, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5636399594594412, "health": 0.38426650220066655, "health_inputs": 4, "risk": 0.3470520037374362 }, { "key": "pkg:maven/org.apache.nifi/nifi-utils", "purl": "pkg:maven/org.apache.nifi/nifi-utils@1.28.1", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-utils@1.28.1?type=jar" ], "name": "nifi-utils", "ecosystem": "maven", "version": "1.28.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-15T07:49:45Z", "repository_url": "https://gitbox.apache.org/repos/asf/nifi.git", "source_repo": "github.com/apache/nifi", "repository_source": "gitbox_mirror", "latest_release_at": "2026-09-15T02:39:25.000Z", "latest_release_version": "2.12.0", "rankings_average": 0.6657583286580642, "archived": false, "dds": 0.8619301600080507, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.8894329041829506, "health": 0.6258153873725865, "health_inputs": 4, "risk": 0.3328121067097728 }, { "key": "pkg:maven/org.apache.nifi/nifi-utils", "purl": "pkg:maven/org.apache.nifi/nifi-utils@2.4.0", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-utils@2.4.0?type=jar" ], "name": "nifi-utils", "ecosystem": "maven", "version": "2.4.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-28T18:57:18Z", "repository_url": "https://gitbox.apache.org/repos/asf/nifi.git", "source_repo": "github.com/apache/nifi", "repository_source": "gitbox_mirror", "latest_release_at": "2026-09-15T02:39:25.000Z", "latest_release_version": "2.12.0", "rankings_average": 0.6657583286580642, "archived": false, "dds": 0.8619301600080507, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.8894329041829506, "health": 0.6258153873725865, "health_inputs": 4, "risk": 0.3328121067097728 }, { "key": "pkg:maven/org.eclipse.milo/sdk-server", "purl": "pkg:maven/org.eclipse.milo/sdk-server@0.6.16", "source_purls": [ "pkg:maven/org.eclipse.milo/sdk-server@0.6.16?type=jar" ], "name": "sdk-server", "ecosystem": "maven", "version": "0.6.16", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-21T23:19:41Z", "repository_url": "https://github.com/eclipse/milo", "source_repo": "github.com/eclipse/milo", "repository_source": "deps.dev", "latest_release_at": "2025-04-21T23:19:41.000Z", "latest_release_version": "0.6.16", "rankings_average": 6.424802036297573, "archived": false, "dds": 0.14904679376083185, "active_maintainers": 0, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5655961712723818, "health": 0.4142295449651874, "health_inputs": 4, "risk": 0.3313095266121709 }, { "key": "pkg:maven/org.apache.commons/commons-csv", "purl": "pkg:maven/org.apache.commons/commons-csv@1.14.1", "source_purls": [ "pkg:maven/org.apache.commons/commons-csv@1.14.1?type=jar" ], "name": "commons-csv", "ecosystem": "maven", "version": "1.14.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-27T13:10:02Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-csv.git", "source_repo": "github.com/apache/commons-csv", "repository_source": "gitbox_mirror", "latest_release_at": "2025-07-27T13:09:59.000Z", "latest_release_version": "1.14.1", "rankings_average": 0.05897518099970613, "archived": false, "dds": 0.7443578169881001, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9875839363512539, "health": 0.6684400855259365, "health_inputs": 4, "risk": 0.32744324547258075 }, { "key": "pkg:maven/javax.ws.rs/javax.ws.rs-api", "purl": "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1", "source_purls": [ "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1?type=jar" ], "name": "javax.ws.rs-api", "ecosystem": "maven", "version": "2.1.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2018-08-24T16:05:49Z", "repository_url": "https://github.com/eclipse-ee4j/jaxrs-api", "source_repo": "github.com/eclipse-ee4j/jaxrs-api", "repository_source": "deps.dev", "latest_release_at": "2018-08-24T16:05:49.000Z", "latest_release_version": "2.1.1", "rankings_average": 7.627900270928907, "archived": false, "dds": 0.5948827292110874, "active_maintainers": 2, "governance_files": 1, "maintained": 7, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5330563607546588, "health": 0.39872068230277186, "health_inputs": 4, "risk": 0.3205157648887288 }, { "key": "pkg:maven/org.eclipse.milo/stack-core", "purl": "pkg:maven/org.eclipse.milo/stack-core@0.6.16", "source_purls": [ "pkg:maven/org.eclipse.milo/stack-core@0.6.16?type=jar" ], "name": "stack-core", "ecosystem": "maven", "version": "0.6.16", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-21T23:19:48Z", "repository_url": "https://github.com/eclipse/milo", "source_repo": "github.com/eclipse/milo", "repository_source": "deps.dev", "latest_release_at": "2025-04-21T23:19:48.000Z", "latest_release_version": "0.6.16", "rankings_average": 7.1224171329158015, "archived": false, "dds": 0.14904679376083185, "active_maintainers": 0, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5461380090291048, "health": 0.414229563462566, "health_inputs": 4, "risk": 0.3199114999586638 }, { "key": "pkg:maven/commons-net/commons-net", "purl": "pkg:maven/commons-net/commons-net@3.11.1", "source_purls": [ "pkg:maven/commons-net/commons-net@3.11.1?type=jar" ], "name": "commons-net", "ecosystem": "maven", "version": "3.11.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-06-07T12:26:11Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-net", "source_repo": "github.com/apache/commons-net", "repository_source": "gitbox_mirror", "latest_release_at": "2026-03-15T16:25:13.000Z", "latest_release_version": "3.13.0", "rankings_average": 0.049157115759664444, "archived": false, "dds": 0.5900978698906161, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9896022011288896, "health": 0.6826457788209042, "health_inputs": 4, "risk": 0.3140544358163777 }, { "key": "pkg:maven/commons-net/commons-net", "purl": "pkg:maven/commons-net/commons-net@3.12.0", "source_purls": [ "pkg:maven/commons-net/commons-net@3.12.0?type=jar" ], "name": "commons-net", "ecosystem": "maven", "version": "3.12.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-28T12:02:29Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-net", "source_repo": "github.com/apache/commons-net", "repository_source": "gitbox_mirror", "latest_release_at": "2026-03-15T16:25:13.000Z", "latest_release_version": "3.13.0", "rankings_average": 0.049157115759664444, "archived": false, "dds": 0.5900978698906161, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9896022011288896, "health": 0.6826457788209042, "health_inputs": 4, "risk": 0.3140544358163777 }, { "key": "pkg:maven/org.eclipse.milo/stack-server", "purl": "pkg:maven/org.eclipse.milo/stack-server@0.6.16", "source_purls": [ "pkg:maven/org.eclipse.milo/stack-server@0.6.16?type=jar" ], "name": "stack-server", "ecosystem": "maven", "version": "0.6.16", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-21T23:19:42Z", "repository_url": "https://github.com/eclipse/milo", "source_repo": "github.com/eclipse/milo", "repository_source": "deps.dev", "latest_release_at": "2025-04-21T23:19:42.000Z", "latest_release_version": "0.6.16", "rankings_average": 7.75602629069798, "archived": false, "dds": 0.14904679376083185, "active_maintainers": 0, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5298622919313429, "health": 0.41422954760767006, "health_inputs": 4, "risk": 0.31037767445025954 }, { "key": "pkg:maven/org.eclipse.milo/sdk-core", "purl": "pkg:maven/org.eclipse.milo/sdk-core@0.6.16", "source_purls": [ "pkg:maven/org.eclipse.milo/sdk-core@0.6.16?type=jar" ], "name": "sdk-core", "ecosystem": "maven", "version": "0.6.16", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-21T23:19:39Z", "repository_url": "https://github.com/eclipse/milo", "source_repo": "github.com/eclipse/milo", "repository_source": "deps.dev", "latest_release_at": "2025-04-21T23:19:39.000Z", "latest_release_version": "0.6.16", "rankings_average": 7.899149567575035, "archived": false, "dds": 0.14904679376083185, "active_maintainers": 0, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5263491581659523, "health": 0.414229539680222, "health_inputs": 4, "risk": 0.3083197886677975 }, { "key": "pkg:maven/ch.qos.logback/logback-classic", "purl": "pkg:maven/ch.qos.logback/logback-classic@1.5.18", "source_purls": [ "pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar" ], "name": "logback-classic", "ecosystem": "maven", "version": "1.5.18", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-03-18T12:47:58Z", "repository_url": "https://github.com/qos-ch/logback", "source_repo": "github.com/qos-ch/logback", "repository_source": "deps.dev", "latest_release_at": "2026-10-01T01:54:32.000Z", "latest_release_version": "1.6.5", "rankings_average": 2.737737436883866, "archived": false, "dds": 0.3090237710593122, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7143128851888307, "health": 0.5745679752994473, "health_inputs": 4, "risk": 0.30389157701557773 }, { "key": "pkg:maven/org.apache.nifi/nifi-record", "purl": "pkg:maven/org.apache.nifi/nifi-record@1.28.1", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-record@1.28.1?type=jar" ], "name": "nifi-record", "ecosystem": "maven", "version": "1.28.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-15T07:38:21Z", "repository_url": "https://gitbox.apache.org/repos/asf/nifi.git", "source_repo": "github.com/apache/nifi", "repository_source": "gitbox_mirror", "latest_release_at": "2026-09-15T02:43:31.000Z", "latest_release_version": "2.12.0", "rankings_average": 1.5783708690657476, "archived": false, "dds": 0.8619301600080507, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7947707432703853, "health": 0.6258160374233221, "health_inputs": 4, "risk": 0.2973904660569243 }, { "key": "pkg:maven/org.apache.nifi/nifi-record", "purl": "pkg:maven/org.apache.nifi/nifi-record@2.4.0", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-record@2.4.0?type=jar" ], "name": "nifi-record", "ecosystem": "maven", "version": "2.4.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-28T18:30:50Z", "repository_url": "https://gitbox.apache.org/repos/asf/nifi.git", "source_repo": "github.com/apache/nifi", "repository_source": "gitbox_mirror", "latest_release_at": "2026-09-15T02:43:31.000Z", "latest_release_version": "2.12.0", "rankings_average": 1.5783708690657476, "archived": false, "dds": 0.8619301600080507, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7947707432703853, "health": 0.6258160374233221, "health_inputs": 4, "risk": 0.2973904660569243 }, { "key": "pkg:maven/org.eclipse.milo/dictionary-manager", "purl": "pkg:maven/org.eclipse.milo/dictionary-manager@0.6.16", "source_purls": [ "pkg:maven/org.eclipse.milo/dictionary-manager@0.6.16?type=jar" ], "name": "dictionary-manager", "ecosystem": "maven", "version": "0.6.16", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-21T23:19:47Z", "repository_url": "https://github.com/eclipse/milo", "source_repo": "github.com/eclipse/milo", "repository_source": "deps.dev", "latest_release_at": "2025-04-21T23:19:48.000Z", "latest_release_version": "0.6.16", "rankings_average": 8.737927844403107, "archived": false, "dds": 0.14904679376083185, "active_maintainers": 0, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5068323048696499, "health": 0.414229563462566, "health_inputs": 4, "risk": 0.29688738047476865 }, { "key": "pkg:maven/org.apache.commons/commons-dbcp2", "purl": "pkg:maven/org.apache.commons/commons-dbcp2@2.11.0", "source_purls": [ "pkg:maven/org.apache.commons/commons-dbcp2@2.11.0?type=jar" ], "name": "commons-dbcp2", "ecosystem": "maven", "version": "2.11.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-10-23T17:37:28Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-dbcp.git", "source_repo": "github.com/apache/commons-dbcp", "repository_source": "gitbox_mirror", "latest_release_at": "2025-12-11T23:13:36.000Z", "latest_release_version": "2.14.0", "rankings_average": 0.07805728830716512, "archived": false, "dds": 0.7772856690920595, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9837142683614504, "health": 0.7080462901594013, "health_inputs": 4, "risk": 0.2871990300712557 }, { "key": "pkg:maven/commons-logging/commons-logging", "purl": "pkg:maven/commons-logging/commons-logging@1.1.3", "source_purls": [ "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar" ], "name": "commons-logging", "ecosystem": "maven", "version": "1.1.3", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2013-05-16T20:05:21Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-logging", "source_repo": "github.com/apache/commons-logging", "repository_source": "gitbox_mirror", "latest_release_at": "2026-06-11T20:49:26.000Z", "latest_release_version": "1.4.0", "rankings_average": 0.0072132724212551095, "archived": false, "dds": 0.7431629013079667, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9984426449584805, "health": 0.7410452521538483, "health_inputs": 4, "risk": 0.25855146336406803 }, { "key": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml", "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.18.1", "source_purls": [ "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.18.1?type=jar" ], "name": "jackson-dataformat-xml", "ecosystem": "maven", "version": "2.18.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-10-29T00:12:07Z", "repository_url": "https://github.com/FasterXML/jackson-dataformat-xml", "source_repo": "github.com/fasterxml/jackson-dataformat-xml", "repository_source": "deps.dev", "latest_release_at": "2026-09-23T02:17:38.000Z", "latest_release_version": "2.22.3", "rankings_average": 5.78386008469401, "archived": false, "dds": 0.2647058823529411, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5851579028148066, "health": 0.5616656815855637, "health_inputs": 4, "risk": 0.25649479049514917 }, { "key": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml", "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.18.3", "source_purls": [ "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.18.3?type=jar" ], "name": "jackson-dataformat-xml", "ecosystem": "maven", "version": "2.18.3", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-03-01T00:18:04Z", "repository_url": "https://github.com/FasterXML/jackson-dataformat-xml", "source_repo": "github.com/fasterxml/jackson-dataformat-xml", "repository_source": "deps.dev", "latest_release_at": "2026-09-23T02:17:38.000Z", "latest_release_version": "2.22.3", "rankings_average": 5.78386008469401, "archived": false, "dds": 0.2647058823529411, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5851579028148066, "health": 0.5616656815855637, "health_inputs": 4, "risk": 0.25649479049514917 }, { "key": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml", "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.19.2", "source_purls": [ "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.19.2?type=jar" ], "name": "jackson-dataformat-xml", "ecosystem": "maven", "version": "2.19.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-18T18:10:17Z", "repository_url": "https://github.com/FasterXML/jackson-dataformat-xml", "source_repo": "github.com/fasterxml/jackson-dataformat-xml", "repository_source": "deps.dev", "latest_release_at": "2026-09-23T02:17:38.000Z", "latest_release_version": "2.22.3", "rankings_average": 5.78386008469401, "archived": false, "dds": 0.2647058823529411, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5851579028148066, "health": 0.5616656815855637, "health_inputs": 4, "risk": 0.25649479049514917 }, { "key": "pkg:maven/org.bouncycastle/bcutil-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.79", "source_purls": [ "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.79?type=jar" ], "name": "bcutil-jdk18on", "ecosystem": "maven", "version": "1.79", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-10-30T02:02:18Z", "repository_url": "https://github.com/bcgit/bc-java", "source_repo": "github.com/bcgit/bc-java", "repository_source": "deps.dev", "latest_release_at": "2026-09-12T02:10:09.000Z", "latest_release_version": "1.86", "rankings_average": 3.5062495744842748, "archived": false, "dds": 0.5124223602484472, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6737972015834578, "health": 0.6210821990596094, "health_inputs": 4, "risk": 0.2553137539037929 }, { "key": "pkg:maven/org.bouncycastle/bcutil-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.80", "source_purls": [ "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.80?type=jar" ], "name": "bcutil-jdk18on", "ecosystem": "maven", "version": "1.80", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-01-14T19:59:44Z", "repository_url": "https://github.com/bcgit/bc-java", "source_repo": "github.com/bcgit/bc-java", "repository_source": "deps.dev", "latest_release_at": "2026-09-12T02:10:09.000Z", "latest_release_version": "1.86", "rankings_average": 3.5062495744842748, "archived": false, "dds": 0.5124223602484472, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6737972015834578, "health": 0.6210821990596094, "health_inputs": 4, "risk": 0.2553137539037929 }, { "key": "pkg:maven/org.bouncycastle/bcutil-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.81", "source_purls": [ "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.81?type=jar" ], "name": "bcutil-jdk18on", "ecosystem": "maven", "version": "1.81", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-06-04T07:57:06Z", "repository_url": "https://github.com/bcgit/bc-java", "source_repo": "github.com/bcgit/bc-java", "repository_source": "deps.dev", "latest_release_at": "2026-09-12T02:10:09.000Z", "latest_release_version": "1.86", "rankings_average": 3.5062495744842748, "archived": false, "dds": 0.5124223602484472, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6737972015834578, "health": 0.6210821990596094, "health_inputs": 4, "risk": 0.2553137539037929 }, { "key": "pkg:maven/org.bouncycastle/bcmail-jdk18on", "purl": "pkg:maven/org.bouncycastle/bcmail-jdk18on@1.81", "source_purls": [ "pkg:maven/org.bouncycastle/bcmail-jdk18on@1.81?type=jar" ], "name": "bcmail-jdk18on", "ecosystem": "maven", "version": "1.81", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-06-04T08:19:57Z", "repository_url": "https://github.com/bcgit/bc-java", "source_repo": "github.com/bcgit/bc-java", "repository_source": "deps.dev", "latest_release_at": "2026-09-12T02:10:40.000Z", "latest_release_version": "1.86", "rankings_average": 3.5354449592906603, "archived": false, "dds": 0.5124223602484472, "active_maintainers": 1, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6723978951472401, "health": 0.621082280976572, "health_inputs": 4, "risk": 0.2547834767053463 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-transport-tcp", "purl": "pkg:maven/org.apache.plc4x/plc4j-transport-tcp@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-transport-tcp@0.13.1?type=jar" ], "name": "plc4j-transport-tcp", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:51:55Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:51:55.000Z", "latest_release_version": "0.13.1", "rankings_average": 9.447300980695925, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.49159644756197285, "health": 0.4860077949274564, "health_inputs": 4, "risk": 0.2526767420882075 }, { "key": "pkg:maven/org.eclipse.milo/bsd-core", "purl": "pkg:maven/org.eclipse.milo/bsd-core@0.6.16", "source_purls": [ "pkg:maven/org.eclipse.milo/bsd-core@0.6.16?type=jar" ], "name": "bsd-core", "ecosystem": "maven", "version": "0.6.16", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-21T23:19:42Z", "repository_url": "https://github.com/eclipse/milo", "source_repo": "github.com/eclipse/milo", "repository_source": "deps.dev", "latest_release_at": "2025-04-21T23:19:43.000Z", "latest_release_version": "0.6.16", "rankings_average": 13.00986063748057, "archived": false, "dds": 0.14904679376083185, "active_maintainers": 0, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.42801896433556974, "health": 0.41422955025015273, "health_inputs": 4, "risk": 0.2507208612403105 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-transport-serial", "purl": "pkg:maven/org.apache.plc4x/plc4j-transport-serial@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-transport-serial@0.13.1?type=jar" ], "name": "plc4j-transport-serial", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:15Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:52:15.000Z", "latest_release_version": "0.13.1", "rankings_average": 10.578542181821822, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.46931969289898323, "health": 0.48600784777710965, "health_inputs": 4, "risk": 0.2412266390337343 }, { "key": "pkg:maven/org.eclipse.milo/bsd-generator", "purl": "pkg:maven/org.eclipse.milo/bsd-generator@0.6.16", "source_purls": [ "pkg:maven/org.eclipse.milo/bsd-generator@0.6.16?type=jar" ], "name": "bsd-generator", "ecosystem": "maven", "version": "0.6.16", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-21T23:19:44Z", "repository_url": "https://github.com/eclipse/milo", "source_repo": "github.com/eclipse/milo", "repository_source": "deps.dev", "latest_release_at": "2025-04-21T23:19:45.000Z", "latest_release_version": "0.6.16", "rankings_average": 14.189706303452391, "archived": false, "dds": 0.14904679376083185, "active_maintainers": 0, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.410499038620719, "health": 0.414229555535118, "health_inputs": 4, "risk": 0.24045820430526535 }, { "key": "pkg:maven/org.apache.nifi/nifi-json-utils", "purl": "pkg:maven/org.apache.nifi/nifi-json-utils@1.28.1", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-json-utils@1.28.1?type=jar" ], "name": "nifi-json-utils", "ecosystem": "maven", "version": "1.28.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-15T09:34:56Z", "repository_url": "https://git-wip-us.apache.org/repos/asf?p=nifi.git", "source_repo": null, "repository_source": null, "latest_release_at": "2026-02-12T22:18:27.000Z", "latest_release_version": "2.8.0", "rankings_average": 3.077819362810168, "archived": false, "dds": 0.8619301600080507, "active_maintainers": 2, "governance_files": 1, "maintained": null, "scorecard_date": null, "criticality": 0.6954440581762606, "health": 0.6602488972237619, "health_inputs": 4, "risk": 0.23627788568456684 }, { "key": "pkg:maven/org.apache.nifi/nifi-json-utils", "purl": "pkg:maven/org.apache.nifi/nifi-json-utils@2.4.0", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-json-utils@2.4.0?type=jar" ], "name": "nifi-json-utils", "ecosystem": "maven", "version": "2.4.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-28T19:00:59Z", "repository_url": "https://git-wip-us.apache.org/repos/asf?p=nifi.git", "source_repo": null, "repository_source": null, "latest_release_at": "2026-02-12T22:18:27.000Z", "latest_release_version": "2.8.0", "rankings_average": 3.077819362810168, "archived": false, "dds": 0.8619301600080507, "active_maintainers": 2, "governance_files": 1, "maintained": null, "scorecard_date": null, "criticality": 0.6954440581762606, "health": 0.6602488972237619, "health_inputs": 4, "risk": 0.23627788568456684 }, { "key": "pkg:maven/org.apache.nifi/nifi-property-utils", "purl": "pkg:maven/org.apache.nifi/nifi-property-utils@1.28.1", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-property-utils@1.28.1?type=jar" ], "name": "nifi-property-utils", "ecosystem": "maven", "version": "1.28.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-15T09:50:16Z", "repository_url": "https://git-wip-us.apache.org/repos/asf?p=nifi.git", "source_repo": null, "repository_source": null, "latest_release_at": "2026-04-07T15:46:33.000Z", "latest_release_version": "2.9.0", "rankings_average": 2.6592183990896565, "archived": false, "dds": 0.8619301600080507, "active_maintainers": 2, "governance_files": 1, "maintained": null, "scorecard_date": null, "criticality": 0.718913175135381, "health": 0.6725155290096574, "health_inputs": 4, "risk": 0.23543290084719778 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-api", "purl": "pkg:maven/org.apache.plc4x/plc4j-api@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-api@0.13.1?type=jar" ], "name": "plc4j-api", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:53:08Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:29.000Z", "latest_release_version": "1.0.0", "rankings_average": 6.956802050275806, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5506017320488605, "health": 0.5726084365222475, "health_inputs": 4, "risk": 0.23532253511392107 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-utils-pcap-shared", "purl": "pkg:maven/org.apache.plc4x/plc4j-utils-pcap-shared@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-utils-pcap-shared@0.13.1?type=jar" ], "name": "plc4j-utils-pcap-shared", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:53:04Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:53:04.000Z", "latest_release_version": "0.13.1", "rankings_average": 11.346552021049513, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4554038564447175, "health": 0.4860079772587602, "health_inputs": 4, "risk": 0.23407394933818151 }, { "key": "pkg:maven/org.apache.nifi/nifi-deprecation-log", "purl": "pkg:maven/org.apache.nifi/nifi-deprecation-log@1.28.1", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-deprecation-log@1.28.1?type=jar" ], "name": "nifi-deprecation-log", "ecosystem": "maven", "version": "1.28.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-15T09:42:10Z", "repository_url": "https://git-wip-us.apache.org/repos/asf?p=nifi.git", "source_repo": null, "repository_source": null, "latest_release_at": "2026-04-07T15:36:07.000Z", "latest_release_version": "2.9.0", "rankings_average": 2.808122112145235, "archived": false, "dds": 0.8619301600080507, "active_maintainers": 2, "governance_files": 1, "maintained": null, "scorecard_date": null, "criticality": 0.7102705814938967, "health": 0.6725138748155088, "health_inputs": 4, "risk": 0.23260376056597157 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-scraper", "purl": "pkg:maven/org.apache.plc4x/plc4j-scraper@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-scraper@0.13.1?type=jar" ], "name": "plc4j-scraper", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:51:55Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:51:55.000Z", "latest_release_version": "0.13.1", "rankings_average": 11.571043858683138, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.45149946711749056, "health": 0.4860077949274564, "health_inputs": 4, "risk": 0.23206720669279737 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-s7", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-s7@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-s7@0.13.1?type=jar" ], "name": "plc4j-driver-s7", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:53:09Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:23:40.000Z", "latest_release_version": "1.0.0", "rankings_average": 7.295658180580444, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5415651098517762, "health": 0.5726090997853964, "health_inputs": 4, "risk": 0.2314599998243713 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-transport-raw-socket", "purl": "pkg:maven/org.apache.plc4x/plc4j-transport-raw-socket@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-transport-raw-socket@0.13.1?type=jar" ], "name": "plc4j-transport-raw-socket", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:51:50Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:51:50.000Z", "latest_release_version": "0.13.1", "rankings_average": 11.683503773581128, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4495696863371944, "health": 0.486007781715043, "health_inputs": 4, "risk": 0.23107532035412687 }, { "key": "pkg:maven/org.apache.nifi/nifi-record-serialization-service-api", "purl": "pkg:maven/org.apache.nifi/nifi-record-serialization-service-api@1.28.1", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-record-serialization-service-api@1.28.1?type=jar" ], "name": "nifi-record-serialization-service-api", "ecosystem": "maven", "version": "1.28.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-15T09:34:23Z", "repository_url": "https://gitbox.apache.org/repos/asf/nifi.git", "source_repo": "github.com/apache/nifi", "repository_source": "gitbox_mirror", "latest_release_at": "2026-09-15T02:39:45.000Z", "latest_release_version": "2.12.0", "rankings_average": 1.6199807646068767, "archived": false, "dds": 0.8619301600080507, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7913018798797963, "health": 0.7091487735555732, "health_inputs": 4, "risk": 0.23015112225081927 }, { "key": "pkg:maven/org.apache.nifi/nifi-record-serialization-service-api", "purl": "pkg:maven/org.apache.nifi/nifi-record-serialization-service-api@2.4.0", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-record-serialization-service-api@2.4.0?type=jar" ], "name": "nifi-record-serialization-service-api", "ecosystem": "maven", "version": "2.4.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-28T18:33:08Z", "repository_url": "https://gitbox.apache.org/repos/asf/nifi.git", "source_repo": "github.com/apache/nifi", "repository_source": "gitbox_mirror", "latest_release_at": "2026-09-15T02:39:45.000Z", "latest_release_version": "2.12.0", "rankings_average": 1.6199807646068767, "archived": false, "dds": 0.8619301600080507, "active_maintainers": 2, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7913018798797963, "health": 0.7091487735555732, "health_inputs": 4, "risk": 0.23015112225081927 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-transport-udp", "purl": "pkg:maven/org.apache.plc4x/plc4j-transport-udp@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-transport-udp@0.13.1?type=jar" ], "name": "plc4j-transport-udp", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:17Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:52:17.000Z", "latest_release_version": "0.13.1", "rankings_average": 11.835294376784663, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4469919604008481, "health": 0.48600785306207495, "health_inputs": 4, "risk": 0.2297503573904239 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-modbus", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-modbus@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-modbus@0.13.1?type=jar" ], "name": "plc4j-driver-modbus", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:51:44Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:29.000Z", "latest_release_version": "1.0.0", "rankings_average": 7.585539949343771, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5341228080539088, "health": 0.5726084365222475, "health_inputs": 4, "risk": 0.22827958202328757 }, { "key": "pkg:maven/io.netty/netty-transport", "purl": "pkg:maven/io.netty/netty-transport@4.1.115.Final", "source_purls": [ "pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar" ], "name": "netty-transport", "ecosystem": "maven", "version": "4.1.115.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-12T12:38:37Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:24.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.28320109000561033, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9459693833209591, "health": 0.7607619162315389, "health_inputs": 4, "risk": 0.22631190256933914 }, { "key": "pkg:maven/io.netty/netty-transport", "purl": "pkg:maven/io.netty/netty-transport@4.1.119.Final", "source_purls": [ "pkg:maven/io.netty/netty-transport@4.1.119.Final?type=jar" ], "name": "netty-transport", "ecosystem": "maven", "version": "4.1.119.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-26T09:08:43Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:24.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.28320109000561033, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9459693833209591, "health": 0.7607619162315389, "health_inputs": 4, "risk": 0.22631190256933914 }, { "key": "pkg:maven/io.netty/netty-transport", "purl": "pkg:maven/io.netty/netty-transport@4.1.123.Final", "source_purls": [ "pkg:maven/io.netty/netty-transport@4.1.123.Final?type=jar" ], "name": "netty-transport", "ecosystem": "maven", "version": "4.1.123.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-15T09:24:00Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:24.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.28320109000561033, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9459693833209591, "health": 0.7607619162315389, "health_inputs": 4, "risk": 0.22631190256933914 }, { "key": "pkg:maven/io.netty/netty-transport", "purl": "pkg:maven/io.netty/netty-transport@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-transport@4.2.0.Final?type=jar" ], "name": "netty-transport", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-03T15:24:25Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:24.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.28320109000561033, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9459693833209591, "health": 0.7607619162315389, "health_inputs": 4, "risk": 0.22631190256933914 }, { "key": "pkg:maven/io.netty/netty-buffer", "purl": "pkg:maven/io.netty/netty-buffer@4.1.115.Final", "source_purls": [ "pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar" ], "name": "netty-buffer", "ecosystem": "maven", "version": "4.1.115.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-12T12:38:06Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:01.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.28340145868397854, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9459355520617626, "health": 0.7607618554544375, "health_inputs": 4, "risk": 0.2263038663349384 }, { "key": "pkg:maven/io.netty/netty-buffer", "purl": "pkg:maven/io.netty/netty-buffer@4.1.119.Final", "source_purls": [ "pkg:maven/io.netty/netty-buffer@4.1.119.Final?type=jar" ], "name": "netty-buffer", "ecosystem": "maven", "version": "4.1.119.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-26T09:07:59Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:01.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.28340145868397854, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9459355520617626, "health": 0.7607618554544375, "health_inputs": 4, "risk": 0.2263038663349384 }, { "key": "pkg:maven/io.netty/netty-buffer", "purl": "pkg:maven/io.netty/netty-buffer@4.1.123.Final", "source_purls": [ "pkg:maven/io.netty/netty-buffer@4.1.123.Final?type=jar" ], "name": "netty-buffer", "ecosystem": "maven", "version": "4.1.123.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-15T09:23:59Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:01.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.28340145868397854, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9459355520617626, "health": 0.7607618554544375, "health_inputs": 4, "risk": 0.2263038663349384 }, { "key": "pkg:maven/io.netty/netty-buffer", "purl": "pkg:maven/io.netty/netty-buffer@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-buffer@4.2.0.Final?type=jar" ], "name": "netty-buffer", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-03T15:23:01Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:01.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.28340145868397854, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9459355520617626, "health": 0.7607618554544375, "health_inputs": 4, "risk": 0.2263038663349384 }, { "key": "pkg:maven/io.netty/netty-common", "purl": "pkg:maven/io.netty/netty-common@4.1.119.Final", "source_purls": [ "pkg:maven/io.netty/netty-common@4.1.119.Final?type=jar" ], "name": "netty-common", "ecosystem": "maven", "version": "4.1.119.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-26T09:08:53Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:11.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.28668750500921697, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9453814717599126, "health": 0.7607618818792642, "health_inputs": 4, "risk": 0.22617128421005303 }, { "key": "pkg:maven/io.netty/netty-common", "purl": "pkg:maven/io.netty/netty-common@4.1.123.Final", "source_purls": [ "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar" ], "name": "netty-common", "ecosystem": "maven", "version": "4.1.123.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-15T09:24:00Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:11.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.28668750500921697, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9453814717599126, "health": 0.7607618818792642, "health_inputs": 4, "risk": 0.22617128421005303 }, { "key": "pkg:maven/io.netty/netty-common", "purl": "pkg:maven/io.netty/netty-common@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-common@4.2.0.Final?type=jar" ], "name": "netty-common", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-03T15:26:13Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:11.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.28668750500921697, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9453814717599126, "health": 0.7607618818792642, "health_inputs": 4, "risk": 0.22617128421005303 }, { "key": "pkg:maven/io.netty/netty-codec", "purl": "pkg:maven/io.netty/netty-codec@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-codec@4.2.0.Final?type=jar" ], "name": "netty-codec", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-03T15:22:46Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:12.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.29041436242686547, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.944754773564519, "health": 0.7607618845217469, "health_inputs": 4, "risk": 0.2260213516166593 }, { "key": "pkg:maven/io.netty/netty-resolver", "purl": "pkg:maven/io.netty/netty-resolver@4.1.115.Final", "source_purls": [ "pkg:maven/io.netty/netty-resolver@4.1.115.Final?type=jar" ], "name": "netty-resolver", "ecosystem": "maven", "version": "4.1.115.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-12T12:39:00Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:12.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.3215516550452833, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9395884589638471, "health": 0.7607618845217469, "health_inputs": 4, "risk": 0.22478537224762676 }, { "key": "pkg:maven/io.netty/netty-resolver", "purl": "pkg:maven/io.netty/netty-resolver@4.1.119.Final", "source_purls": [ "pkg:maven/io.netty/netty-resolver@4.1.119.Final?type=jar" ], "name": "netty-resolver", "ecosystem": "maven", "version": "4.1.119.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-26T09:09:42Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:12.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.3215516550452833, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9395884589638471, "health": 0.7607618845217469, "health_inputs": 4, "risk": 0.22478537224762676 }, { "key": "pkg:maven/io.netty/netty-resolver", "purl": "pkg:maven/io.netty/netty-resolver@4.1.123.Final", "source_purls": [ "pkg:maven/io.netty/netty-resolver@4.1.123.Final?type=jar" ], "name": "netty-resolver", "ecosystem": "maven", "version": "4.1.123.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-15T09:23:59Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:12.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.3215516550452833, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9395884589638471, "health": 0.7607618845217469, "health_inputs": 4, "risk": 0.22478537224762676 }, { "key": "pkg:maven/io.netty/netty-resolver", "purl": "pkg:maven/io.netty/netty-resolver@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-resolver@4.2.0.Final?type=jar" ], "name": "netty-resolver", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-03T15:23:35Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:12.000Z", "latest_release_version": "4.1.139.Final", "rankings_average": 0.3215516550452833, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9395884589638471, "health": 0.7607618845217469, "health_inputs": 4, "risk": 0.22478537224762676 }, { "key": "pkg:maven/io.netty/netty-transport-native-unix-common", "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.115.Final", "source_purls": [ "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.115.Final?type=jar" ], "name": "netty-transport-native-unix-common", "ecosystem": "maven", "version": "4.1.115.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-12T12:38:55Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:13.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.35409152841227864, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9343179079221875, "health": 0.7607618871642295, "health_inputs": 4, "risk": 0.2235244530799693 }, { "key": "pkg:maven/io.netty/netty-transport-native-unix-common", "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.119.Final", "source_purls": [ "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.119.Final?type=jar" ], "name": "netty-transport-native-unix-common", "ecosystem": "maven", "version": "4.1.119.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-26T09:08:14Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:13.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.35409152841227864, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9343179079221875, "health": 0.7607618871642295, "health_inputs": 4, "risk": 0.2235244530799693 }, { "key": "pkg:maven/io.netty/netty-transport-native-unix-common", "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.123.Final", "source_purls": [ "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.123.Final?type=jar" ], "name": "netty-transport-native-unix-common", "ecosystem": "maven", "version": "4.1.123.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-15T09:24:00Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:13.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.35409152841227864, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9343179079221875, "health": 0.7607618871642295, "health_inputs": 4, "risk": 0.2235244530799693 }, { "key": "pkg:maven/io.netty/netty-transport-native-unix-common", "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-transport-native-unix-common@4.2.0.Final?type=jar" ], "name": "netty-transport-native-unix-common", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-03T15:26:39Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:13.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 0.35409152841227864, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9343179079221875, "health": 0.7607618871642295, "health_inputs": 4, "risk": 0.2235244530799693 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-connection-cache", "purl": "pkg:maven/org.apache.plc4x/plc4j-connection-cache@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-connection-cache@0.13.1?type=jar" ], "name": "plc4j-connection-cache", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:03Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:52:03.000Z", "latest_release_version": "0.13.1", "rankings_average": 12.606078567223475, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4343556930237884, "health": 0.4860078160673177, "health_inputs": 4, "risk": 0.22325543126089076 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-opcua", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-opcua@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-opcua@0.13.1?type=jar" ], "name": "plc4j-driver-opcua", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:18Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:29.000Z", "latest_release_version": "1.0.0", "rankings_average": 8.373588789613011, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5150947795942769, "health": 0.5726084365222475, "health_inputs": 4, "risk": 0.22014716319002633 }, { "key": "pkg:maven/org.glassfish.jaxb/jaxb-runtime", "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6", "source_purls": [ "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar" ], "name": "jaxb-runtime", "ecosystem": "maven", "version": "2.3.6", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2022-01-28T12:57:17Z", "repository_url": "https://github.com/eclipse-ee4j/jaxb-ri", "source_repo": "github.com/eclipse-ee4j/jaxb-ri", "repository_source": "deps.dev", "latest_release_at": "2026-05-28T05:20:19.000Z", "latest_release_version": "4.0.9", "rankings_average": 8.651913322265989, "archived": false, "dds": 0.3976261127596439, "active_maintainers": 1, "governance_files": 2, "maintained": 7, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5087547206704852, "health": 0.5679840641703275, "health_inputs": 4, "risk": 0.21979014675822328 }, { "key": "pkg:maven/org.glassfish.jaxb/jaxb-runtime", "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9", "source_purls": [ "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9?type=jar" ], "name": "jaxb-runtime", "ecosystem": "maven", "version": "2.3.9", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-10-13T13:27:03Z", "repository_url": "https://github.com/eclipse-ee4j/jaxb-ri", "source_repo": "github.com/eclipse-ee4j/jaxb-ri", "repository_source": "deps.dev", "latest_release_at": "2026-05-28T05:20:19.000Z", "latest_release_version": "4.0.9", "rankings_average": 8.651913322265989, "archived": false, "dds": 0.3976261127596439, "active_maintainers": 1, "governance_files": 2, "maintained": 7, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5087547206704852, "health": 0.5679840641703275, "health_inputs": 4, "risk": 0.21979014675822328 }, { "key": "pkg:maven/org.glassfish.jaxb/txw2", "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.6", "source_purls": [ "pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar" ], "name": "txw2", "ecosystem": "maven", "version": "2.3.6", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2022-01-28T12:57:14Z", "repository_url": "https://github.com/eclipse-ee4j/jaxb-ri", "source_repo": "github.com/eclipse-ee4j/jaxb-ri", "repository_source": "deps.dev", "latest_release_at": "2026-05-28T05:20:19.000Z", "latest_release_version": "4.0.9", "rankings_average": 8.823205470948103, "archived": false, "dds": 0.3976261127596439, "active_maintainers": 1, "governance_files": 2, "maintained": 7, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5049430489478737, "health": 0.5679840641703275, "health_inputs": 4, "risk": 0.21814344383190376 }, { "key": "pkg:maven/org.glassfish.jaxb/txw2", "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.9", "source_purls": [ "pkg:maven/org.glassfish.jaxb/txw2@2.3.9?type=jar" ], "name": "txw2", "ecosystem": "maven", "version": "2.3.9", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-10-13T13:27:05Z", "repository_url": "https://github.com/eclipse-ee4j/jaxb-ri", "source_repo": "github.com/eclipse-ee4j/jaxb-ri", "repository_source": "deps.dev", "latest_release_at": "2026-05-28T05:20:19.000Z", "latest_release_version": "4.0.9", "rankings_average": 8.823205470948103, "archived": false, "dds": 0.3976261127596439, "active_maintainers": 1, "governance_files": 2, "maintained": 7, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5049430489478737, "health": 0.5679840641703275, "health_inputs": 4, "risk": 0.21814344383190376 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-simulated", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-simulated@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-simulated@0.13.1?type=jar" ], "name": "plc4j-driver-simulated", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:53:29Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:29.000Z", "latest_release_version": "1.0.0", "rankings_average": 8.750593158405831, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5065506715136605, "health": 0.5726084365222475, "health_inputs": 4, "risk": 0.2164954834789288 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-spi", "purl": "pkg:maven/org.apache.plc4x/plc4j-spi@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-spi@0.13.1?type=jar" ], "name": "plc4j-spi", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:53:28Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:30.000Z", "latest_release_version": "1.0.0", "rankings_average": 8.939362692588773, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5023958973987797, "health": 0.5726084391647301, "health_inputs": 4, "risk": 0.21471976674650053 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-transport-pcap-replay", "purl": "pkg:maven/org.apache.plc4x/plc4j-transport-pcap-replay@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-transport-pcap-replay@0.13.1?type=jar" ], "name": "plc4j-transport-pcap-replay", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:53:27Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:53:27.000Z", "latest_release_version": "0.13.1", "rankings_average": 13.772321123327453, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.41653631241544575, "health": 0.48600803803586157, "health_inputs": 4, "risk": 0.21409631644772228 }, { "key": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml", "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.4", "source_purls": [ "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.4?type=jar" ], "name": "jackson-dataformat-yaml", "ecosystem": "maven", "version": "2.15.4", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-02-15T18:02:30Z", "repository_url": "https://github.com/FasterXML/jackson-dataformats-text", "source_repo": "github.com/fasterxml/jackson-dataformats-text", "repository_source": "deps.dev", "latest_release_at": "2026-09-23T02:17:37.000Z", "latest_release_version": "2.22.3", "rankings_average": 7.02973471186984, "archived": false, "dds": 0.13, "active_maintainers": 3, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5486246821325338, "health": 0.6113225416881791, "health_inputs": 4, "risk": 0.21323804701840388 }, { "key": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml", "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.19.2", "source_purls": [ "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.19.2?type=jar" ], "name": "jackson-dataformat-yaml", "ecosystem": "maven", "version": "2.19.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-18T18:00:45Z", "repository_url": "https://github.com/FasterXML/jackson-dataformats-text", "source_repo": "github.com/fasterxml/jackson-dataformats-text", "repository_source": "deps.dev", "latest_release_at": "2026-09-23T02:17:37.000Z", "latest_release_version": "2.22.3", "rankings_average": 7.02973471186984, "archived": false, "dds": 0.13, "active_maintainers": 3, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5486246821325338, "health": 0.6113225416881791, "health_inputs": 4, "risk": 0.21323804701840388 }, { "key": "pkg:maven/org.json/json", "purl": "pkg:maven/org.json/json@20250517", "source_purls": [ "pkg:maven/org.json/json@20250517?type=jar" ], "name": "json", "ecosystem": "maven", "version": "20250517", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-05-17T12:51:20Z", "repository_url": "https://github.com/douglascrockford/JSON-java", "source_repo": "github.com/douglascrockford/json-java", "repository_source": "deps.dev", "latest_release_at": "2026-08-15T02:21:20.000Z", "latest_release_version": "20260814", "rankings_average": 1.5428788971707943, "archived": false, "dds": 0.659375, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7977741079853583, "health": 0.7347627713727723, "health_inputs": 4, "risk": 0.21159939347259507 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-ads", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-ads@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-ads@0.13.1?type=jar" ], "name": "plc4j-driver-ads", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:03Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:30.000Z", "latest_release_version": "1.0.0", "rankings_average": 9.318844439460626, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4942771760029906, "health": 0.5726084391647301, "health_inputs": 4, "risk": 0.21124989373716754 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-transport-can", "purl": "pkg:maven/org.apache.plc4x/plc4j-transport-can@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-transport-can@0.13.1?type=jar" ], "name": "plc4j-transport-can", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:44Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:52:43.000Z", "latest_release_version": "0.13.1", "rankings_average": 14.372803812231577, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.40790279429600385, "health": 0.4860079217666243, "health_inputs": 4, "risk": 0.2096588049574042 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-transport-pcap-shared", "purl": "pkg:maven/org.apache.plc4x/plc4j-transport-pcap-shared@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-transport-pcap-shared@0.13.1?type=jar" ], "name": "plc4j-transport-pcap-shared", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:00Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:52:00.000Z", "latest_release_version": "0.13.1", "rankings_average": 14.648259568120613, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.404054630629757, "health": 0.48600780813986966, "health_inputs": 4, "risk": 0.20768092522862416 }, { "key": "pkg:maven/com.google.errorprone/error_prone_annotations", "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0", "source_purls": [ "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" ], "name": "error_prone_annotations", "ecosystem": "maven", "version": "2.41.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-24T15:38:10Z", "repository_url": "https://github.com/google/error-prone", "source_repo": "github.com/google/error-prone", "repository_source": "deps.dev", "latest_release_at": "2026-06-10T10:34:28.000Z", "latest_release_version": "2.50.0", "rankings_average": 2.1062579463204156, "archived": false, "dds": 0.6884406516679596, "active_maintainers": 3, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7544118804925941, "health": 0.7270388769161786, "health_inputs": 4, "risk": 0.20592511416703613 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-eip", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-eip@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-eip@0.13.1?type=jar" ], "name": "plc4j-driver-eip", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:53:01Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:31.000Z", "latest_release_version": "1.0.0", "rankings_average": 10.539098399223137, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.47005909796157663, "health": 0.5726084418072128, "health_inputs": 4, "risk": 0.20089929032049422 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-canopen", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-canopen@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-canopen@0.13.1?type=jar" ], "name": "plc4j-driver-canopen", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:16Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:29.000Z", "latest_release_version": "1.0.0", "rankings_average": 10.819960155772907, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.46484828900054853, "health": 0.5726084365222475, "health_inputs": 4, "risk": 0.1986722370159026 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-bacnet", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-bacnet@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-bacnet@0.13.1?type=jar" ], "name": "plc4j-driver-bacnet", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:49Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:52:48.000Z", "latest_release_version": "0.13.1", "rankings_average": 16.680765649871358, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.3775942899480257, "health": 0.4860079349790376, "health_inputs": 4, "risk": 0.19408046883050975 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-c-bus", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-c-bus@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-c-bus@0.13.1?type=jar" ], "name": "plc4j-driver-c-bus", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:53:12Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:53:14.000Z", "latest_release_version": "0.13.1", "rankings_average": 16.680765649871358, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.3775942899480257, "health": 0.4860080036835869, "health_inputs": 4, "risk": 0.19408044288806425 }, { "key": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api", "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3", "source_purls": [ "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar" ], "name": "jakarta.xml.bind-api", "ecosystem": "maven", "version": "2.3.3", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2020-01-27T09:35:28Z", "repository_url": "https://github.com/jakartaee/jaxb-api", "source_repo": "github.com/eclipse-ee4j/jaxb-api", "repository_source": "deps.dev", "latest_release_at": "2026-02-06T09:38:20.000Z", "latest_release_version": "4.0.5", "rankings_average": 12.299580467193335, "archived": false, "dds": 0.4971428571428571, "active_maintainers": 0, "governance_files": 3, "maintained": 6, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4392925425312033, "health": 0.5675616927868479, "health_inputs": 4, "risk": 0.1899669234635552 }, { "key": "pkg:maven/org.apache.calcite/calcite-linq4j", "purl": "pkg:maven/org.apache.calcite/calcite-linq4j@1.40.0", "source_purls": [ "pkg:maven/org.apache.calcite/calcite-linq4j@1.40.0?type=jar" ], "name": "calcite-linq4j", "ecosystem": "maven", "version": "1.40.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-05-23T16:25:55Z", "repository_url": "https://gitbox.apache.org/repos/asf/calcite.git", "source_repo": "github.com/apache/calcite", "repository_source": "deps.dev", "latest_release_at": "2026-05-28T11:27:48.000Z", "latest_release_version": "1.42.0", "rankings_average": 2.0758247129430054, "archived": false, "dds": 0.7882707299787385, "active_maintainers": 9, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.7565452385196781, "health": 0.749036815908722, "health_inputs": 4, "risk": 0.18986500196799386 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-ab-eth", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-ab-eth@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-ab-eth@0.13.1?type=jar" ], "name": "plc4j-driver-ab-eth", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:34Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:29.000Z", "latest_release_version": "1.0.0", "rankings_average": 12.764446037489513, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4318482293286543, "health": 0.5726084365222475, "health_inputs": 4, "risk": 0.18456828991787258 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-knxnetip", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-knxnetip@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-knxnetip@0.13.1?type=jar" ], "name": "plc4j-driver-knxnetip", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:51:42Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:24:01.000Z", "latest_release_version": "1.0.0", "rankings_average": 12.764446037489513, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4318482293286543, "health": 0.5726091552775324, "health_inputs": 4, "risk": 0.18456797952467546 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-utils-raw-sockets", "purl": "pkg:maven/org.apache.plc4x/plc4j-utils-raw-sockets@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-utils-raw-sockets@0.13.1?type=jar" ], "name": "plc4j-utils-raw-sockets", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:06Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:29.000Z", "latest_release_version": "1.0.0", "rankings_average": 12.801890098008789, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.431259587516725, "health": 0.5726084365222475, "health_inputs": 4, "risk": 0.18431670937354375 }, { "key": "pkg:maven/commons-io/commons-io", "purl": "pkg:maven/commons-io/commons-io@2.15.0", "source_purls": [ "pkg:maven/commons-io/commons-io@2.15.0?type=jar" ], "name": "commons-io", "ecosystem": "maven", "version": "2.15.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-10-21T18:59:29Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-parent.git", "source_repo": "github.com/apache/commons-parent", "repository_source": "gitbox_mirror", "latest_release_at": "2026-04-19T12:01:24.000Z", "latest_release_version": "2.22.0", "rankings_average": 0.0016697389864016457, "archived": false, "dds": 0.7598799399699849, "active_maintainers": 2, "governance_files": 3, "maintained": null, "scorecard_date": null, "criticality": 0.99963850423494, "health": 0.8163736693958792, "health_inputs": 4, "risk": 0.18355995046325393 }, { "key": "pkg:maven/commons-io/commons-io", "purl": "pkg:maven/commons-io/commons-io@2.17.0", "source_purls": [ "pkg:maven/commons-io/commons-io@2.17.0?type=jar" ], "name": "commons-io", "ecosystem": "maven", "version": "2.17.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-09-15T15:31:11Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-parent.git", "source_repo": "github.com/apache/commons-parent", "repository_source": "gitbox_mirror", "latest_release_at": "2026-04-19T12:01:24.000Z", "latest_release_version": "2.22.0", "rankings_average": 0.0016697389864016457, "archived": false, "dds": 0.7598799399699849, "active_maintainers": 2, "governance_files": 3, "maintained": null, "scorecard_date": null, "criticality": 0.99963850423494, "health": 0.8163736693958792, "health_inputs": 4, "risk": 0.18355995046325393 }, { "key": "pkg:maven/commons-io/commons-io", "purl": "pkg:maven/commons-io/commons-io@2.19.0", "source_purls": [ "pkg:maven/commons-io/commons-io@2.19.0?type=jar" ], "name": "commons-io", "ecosystem": "maven", "version": "2.19.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-08T22:05:44Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-parent.git", "source_repo": "github.com/apache/commons-parent", "repository_source": "gitbox_mirror", "latest_release_at": "2026-04-19T12:01:24.000Z", "latest_release_version": "2.22.0", "rankings_average": 0.0016697389864016457, "archived": false, "dds": 0.7598799399699849, "active_maintainers": 2, "governance_files": 3, "maintained": null, "scorecard_date": null, "criticality": 0.99963850423494, "health": 0.8163736693958792, "health_inputs": 4, "risk": 0.18355995046325393 }, { "key": "pkg:maven/commons-io/commons-io", "purl": "pkg:maven/commons-io/commons-io@2.20.0", "source_purls": [ "pkg:maven/commons-io/commons-io@2.20.0?type=jar" ], "name": "commons-io", "ecosystem": "maven", "version": "2.20.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-14T21:29:54Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-parent.git", "source_repo": "github.com/apache/commons-parent", "repository_source": "gitbox_mirror", "latest_release_at": "2026-04-19T12:01:24.000Z", "latest_release_version": "2.22.0", "rankings_average": 0.0016697389864016457, "archived": false, "dds": 0.7598799399699849, "active_maintainers": 2, "governance_files": 3, "maintained": null, "scorecard_date": null, "criticality": 0.99963850423494, "health": 0.8163736693958792, "health_inputs": 4, "risk": 0.18355995046325393 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-firmata", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-firmata@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-firmata@0.13.1?type=jar" ], "name": "plc4j-driver-firmata", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:51:56Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:43.000Z", "latest_release_version": "1.0.0", "rankings_average": 12.99172081009921, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.42829970000755535, "health": 0.5726084735170047, "health_inputs": 4, "risk": 0.18305166257843802 }, { "key": "pkg:maven/commons-codec/commons-codec", "purl": "pkg:maven/commons-codec/commons-codec@1.16.0", "source_purls": [ "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar" ], "name": "commons-codec", "ecosystem": "maven", "version": "1.16.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-06-18T00:15:26Z", "repository_url": "https://github.com/apache/commons-codec", "source_repo": "github.com/apache/commons-codec", "repository_source": "deps.dev", "latest_release_at": "2026-10-12T01:54:25.000Z", "latest_release_version": "1.23.0", "rankings_average": 6.17671928411418, "archived": false, "dds": 0.3926209537069265, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5729597207205153, "health": 0.6813120013224196, "health_inputs": 4, "risk": 0.18259538671928638 }, { "key": "pkg:maven/commons-codec/commons-codec", "purl": "pkg:maven/commons-codec/commons-codec@1.17.1", "source_purls": [ "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar" ], "name": "commons-codec", "ecosystem": "maven", "version": "1.17.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-07-12T16:21:02Z", "repository_url": "https://github.com/apache/commons-codec", "source_repo": "github.com/apache/commons-codec", "repository_source": "deps.dev", "latest_release_at": "2026-10-12T01:54:25.000Z", "latest_release_version": "1.23.0", "rankings_average": 6.17671928411418, "archived": false, "dds": 0.3926209537069265, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5729597207205153, "health": 0.6813120013224196, "health_inputs": 4, "risk": 0.18259538671928638 }, { "key": "pkg:maven/commons-codec/commons-codec", "purl": "pkg:maven/commons-codec/commons-codec@1.18.0", "source_purls": [ "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar" ], "name": "commons-codec", "ecosystem": "maven", "version": "1.18.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-01-24T14:05:44Z", "repository_url": "https://github.com/apache/commons-codec", "source_repo": "github.com/apache/commons-codec", "repository_source": "deps.dev", "latest_release_at": "2026-10-12T01:54:25.000Z", "latest_release_version": "1.23.0", "rankings_average": 6.17671928411418, "archived": false, "dds": 0.3926209537069265, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5729597207205153, "health": 0.6813120013224196, "health_inputs": 4, "risk": 0.18259538671928638 }, { "key": "pkg:maven/commons-codec/commons-codec", "purl": "pkg:maven/commons-codec/commons-codec@1.19.0", "source_purls": [ "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar" ], "name": "commons-codec", "ecosystem": "maven", "version": "1.19.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-19T17:19:54Z", "repository_url": "https://github.com/apache/commons-codec", "source_repo": "github.com/apache/commons-codec", "repository_source": "deps.dev", "latest_release_at": "2026-10-12T01:54:25.000Z", "latest_release_version": "1.23.0", "rankings_average": 6.17671928411418, "archived": false, "dds": 0.3926209537069265, "active_maintainers": 1, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5729597207205153, "health": 0.6813120013224196, "health_inputs": 4, "risk": 0.18259538671928638 }, { "key": "pkg:maven/org.apache.calcite.avatica/avatica-core", "purl": "pkg:maven/org.apache.calcite.avatica/avatica-core@1.26.0", "source_purls": [ "pkg:maven/org.apache.calcite.avatica/avatica-core@1.26.0?type=jar" ], "name": "avatica-core", "ecosystem": "maven", "version": "1.26.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-18T23:00:40Z", "repository_url": "https://gitbox.apache.org/repos/asf/calcite-avatica.git", "source_repo": "github.com/apache/calcite-avatica", "repository_source": "deps.dev", "latest_release_at": "2026-09-21T01:57:24.000Z", "latest_release_version": "1.29.0", "rankings_average": 7.6543239560791845, "archived": false, "dds": 0.6579512893982808, "active_maintainers": 3, "governance_files": 0, "maintained": 5, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5323937766118612, "health": 0.6595172043683768, "health_inputs": 4, "risk": 0.1812709214376844 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-utils-pcap-replay", "purl": "pkg:maven/org.apache.plc4x/plc4j-utils-pcap-replay@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-utils-pcap-replay@0.13.1?type=jar" ], "name": "plc4j-utils-pcap-replay", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:51:41Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-24T18:51:41.000Z", "latest_release_version": "0.13.1", "rankings_average": 19.147306535521054, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.3492974673563617, "health": 0.486007757932699, "health_inputs": 4, "risk": 0.17953618839492622 }, { "key": "pkg:maven/org.locationtech.proj4j/proj4j", "purl": "pkg:maven/org.locationtech.proj4j/proj4j@1.2.2", "source_purls": [ "pkg:maven/org.locationtech.proj4j/proj4j@1.2.2?type=jar" ], "name": "proj4j", "ecosystem": "maven", "version": "1.2.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2022-12-13T04:48:44Z", "repository_url": "https://github.com/locationtech/proj4j", "source_repo": "github.com/locationtech/proj4j", "repository_source": "deps.dev", "latest_release_at": "2026-06-02T15:44:48.000Z", "latest_release_version": "1.4.3", "rankings_average": 10.795590399807756, "archived": false, "dds": 0.6, "active_maintainers": 1, "governance_files": 2, "maintained": 5, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.46529548736731263, "health": 0.6198180996748187, "health_inputs": 4, "risk": 0.1768969226000363 }, { "key": "pkg:maven/org.apache.calcite.avatica/avatica-metrics", "purl": "pkg:maven/org.apache.calcite.avatica/avatica-metrics@1.26.0", "source_purls": [ "pkg:maven/org.apache.calcite.avatica/avatica-metrics@1.26.0?type=jar" ], "name": "avatica-metrics", "ecosystem": "maven", "version": "1.26.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-18T23:00:40Z", "repository_url": "https://gitbox.apache.org/repos/asf/calcite-avatica.git", "source_repo": "github.com/apache/calcite-avatica", "repository_source": "deps.dev", "latest_release_at": "2026-09-21T01:57:27.000Z", "latest_release_version": "1.29.0", "rankings_average": 8.618337741444257, "archived": false, "dds": 0.6579512893982808, "active_maintainers": 3, "governance_files": 0, "maintained": 5, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5095097842976728, "health": 0.6595172122958247, "health_inputs": 4, "risk": 0.17347931172022465 }, { "key": "pkg:maven/org.apache.commons/commons-text", "purl": "pkg:maven/org.apache.commons/commons-text@1.11.0", "source_purls": [ "pkg:maven/org.apache.commons/commons-text@1.11.0?type=jar" ], "name": "commons-text", "ecosystem": "maven", "version": "1.11.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-10-24T13:39:29Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-text.git", "source_repo": "github.com/apache/commons-text", "repository_source": "gitbox_mirror", "latest_release_at": "2025-12-04T15:57:25.000Z", "latest_release_version": "1.15.0", "rankings_average": 0.032192567657823724, "archived": false, "dds": 0.603321033210332, "active_maintainers": 3, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9931344704641122, "health": 0.8295544679258204, "health_inputs": 4, "risk": 0.16927533323946417 }, { "key": "pkg:maven/org.apache.commons/commons-text", "purl": "pkg:maven/org.apache.commons/commons-text@1.12.0", "source_purls": [ "pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar" ], "name": "commons-text", "ecosystem": "maven", "version": "1.12.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-04-13T13:34:59Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-text.git", "source_repo": "github.com/apache/commons-text", "repository_source": "gitbox_mirror", "latest_release_at": "2025-12-04T15:57:25.000Z", "latest_release_version": "1.15.0", "rankings_average": 0.032192567657823724, "archived": false, "dds": 0.603321033210332, "active_maintainers": 3, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9931344704641122, "health": 0.8295544679258204, "health_inputs": 4, "risk": 0.16927533323946417 }, { "key": "pkg:maven/org.apache.commons/commons-text", "purl": "pkg:maven/org.apache.commons/commons-text@1.13.1", "source_purls": [ "pkg:maven/org.apache.commons/commons-text@1.13.1?type=jar" ], "name": "commons-text", "ecosystem": "maven", "version": "1.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-07T19:43:09Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-text.git", "source_repo": "github.com/apache/commons-text", "repository_source": "gitbox_mirror", "latest_release_at": "2025-12-04T15:57:25.000Z", "latest_release_version": "1.15.0", "rankings_average": 0.032192567657823724, "archived": false, "dds": 0.603321033210332, "active_maintainers": 3, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9931344704641122, "health": 0.8295544679258204, "health_inputs": 4, "risk": 0.16927533323946417 }, { "key": "pkg:maven/org.apache.commons/commons-text", "purl": "pkg:maven/org.apache.commons/commons-text@1.14.0", "source_purls": [ "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar" ], "name": "commons-text", "ecosystem": "maven", "version": "1.14.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-20T14:11:49Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-text.git", "source_repo": "github.com/apache/commons-text", "repository_source": "gitbox_mirror", "latest_release_at": "2025-12-04T15:57:25.000Z", "latest_release_version": "1.15.0", "rankings_average": 0.032192567657823724, "archived": false, "dds": 0.603321033210332, "active_maintainers": 3, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9931344704641122, "health": 0.8295544679258204, "health_inputs": 4, "risk": 0.16927533323946417 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-can", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-can@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-can@0.13.1?type=jar" ], "name": "plc4j-driver-can", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:04Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:29.000Z", "latest_release_version": "1.0.0", "rankings_average": 15.283545302376242, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.39543179921295657, "health": 0.5726084365222475, "health_inputs": 4, "risk": 0.16900421491444623 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-plc4x-server", "purl": "pkg:maven/org.apache.plc4x/plc4j-plc4x-server@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-plc4x-server@0.13.1?type=jar" ], "name": "plc4j-plc4x-server", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:55:54Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-29T14:55:54.000Z", "latest_release_version": "0.13.1", "rankings_average": 24.848616481040445, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.2953039760042572, "health": 0.4871119272418484, "health_inputs": 4, "risk": 0.15145788713064293 }, { "key": "pkg:maven/org.apache.plc4x/plc4x-opcua-server", "purl": "pkg:maven/org.apache.plc4x/plc4x-opcua-server@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4x-opcua-server@0.13.1?type=jar" ], "name": "plc4x-opcua-server", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:56:18Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2025-08-29T14:56:18.000Z", "latest_release_version": "0.13.1", "rankings_average": 25.15810498732953, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.29272506043309654, "health": 0.4871119906614323, "health_inputs": 4, "risk": 0.15013517352904282 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-plc4x", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-plc4x@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-plc4x@0.13.1?type=jar" ], "name": "plc4j-driver-plc4x", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:51:47Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:29.000Z", "latest_release_version": "1.0.0", "rankings_average": 19.137642783489675, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.34940142344087255, "health": 0.5726084365222475, "health_inputs": 4, "risk": 0.14933122064574678 }, { "key": "pkg:maven/org.apache.commons/commons-lang3", "purl": "pkg:maven/org.apache.commons/commons-lang3@3.18.0", "source_purls": [ "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ], "name": "commons-lang3", "ecosystem": "maven", "version": "3.18.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-06T17:43:11Z", "repository_url": "https://gitbox.apache.org/repos/asf/commons-lang.git", "source_repo": "github.com/apache/commons-lang", "repository_source": "gitbox_mirror", "latest_release_at": "2026-09-30T02:08:31.000Z", "latest_release_version": "3.21.0", "rankings_average": 0.0017363928575483336, "archived": false, "dds": 0.7746743486973948, "active_maintainers": 2, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9996240862911424, "health": 0.8574211929163076, "health_inputs": 4, "risk": 0.1425252097555171 }, { "key": "pkg:maven/org.apache.plc4x/plc4j-tools", "purl": "pkg:maven/org.apache.plc4x/plc4j-tools@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-tools@0.13.1?type=pom" ], "name": "plc4j-tools", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:51:49Z", "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git", "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": "2026-09-08T02:19:29.000Z", "latest_release_version": "1.0.0", "rankings_average": 25.15810498732953, "archived": false, "dds": 0.6555076923076923, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.29272506043309654, "health": 0.5726084365222475, "health_inputs": 4, "risk": 0.12510822124762072 }, { "key": "pkg:maven/io.netty/netty-codec-protobuf", "purl": "pkg:maven/io.netty/netty-codec-protobuf@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-codec-protobuf@4.2.0.Final?type=jar" ], "name": "netty-codec-protobuf", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-03T15:24:39Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:55:59.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 42.620789029116565, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.18192085438876016, "health": 0.7607618501694723, "health_inputs": 4, "risk": 0.043522408619555815 }, { "key": "pkg:maven/io.netty/netty-codec-marshalling", "purl": "pkg:maven/io.netty/netty-codec-marshalling@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-codec-marshalling@4.2.0.Final?type=jar" ], "name": "netty-codec-marshalling", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-03T15:23:57Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:00.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 42.620789029116565, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.18192085438876016, "health": 0.760761852811955, "health_inputs": 4, "risk": 0.04352240813883311 }, { "key": "pkg:maven/io.netty/netty-codec-base", "purl": "pkg:maven/io.netty/netty-codec-base@4.2.0.Final", "source_purls": [ "pkg:maven/io.netty/netty-codec-base@4.2.0.Final?type=jar" ], "name": "netty-codec-base", "ecosystem": "maven", "version": "4.2.0.Final", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-03T15:24:22Z", "repository_url": "https://github.com/netty/netty", "source_repo": "github.com/netty/netty", "repository_source": "deps.dev", "latest_release_at": "2026-10-07T01:56:02.000Z", "latest_release_version": "4.2.19.Final", "rankings_average": 42.65347322360897, "archived": false, "dds": 0.714985565567317, "active_maintainers": 5, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.18175856184426553, "health": 0.7607618580969202, "health_inputs": 4, "risk": 0.0434835806105981 }, { "key": "pkg:maven/com.google.protobuf/protobuf-java", "purl": "pkg:maven/com.google.protobuf/protobuf-java@4.31.1", "source_purls": [ "pkg:maven/com.google.protobuf/protobuf-java@4.31.1?type=jar" ], "name": "protobuf-java", "ecosystem": "maven", "version": "4.31.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-05-28T19:05:59Z", "repository_url": "https://github.com/protocolbuffers/protobuf", "source_repo": "github.com/protocolbuffers/protobuf", "repository_source": "deps.dev", "latest_release_at": "2026-09-18T02:31:23.000Z", "latest_release_version": "4.36.2", "rankings_average": 0.18630279714675002, "archived": false, "dds": 0.8605168789415111, "active_maintainers": 16, "governance_files": 3, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.9629822066545373, "health": 0.9594790582694895, "health_inputs": 4, "risk": 0.03902094588336689 }, { "key": "pkg:maven/com.fasterxml.woodstox/woodstox-core", "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1", "source_purls": [ "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar" ], "name": "woodstox-core", "ecosystem": "maven", "version": "7.1.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-05-29T01:22:49Z", "repository_url": "https://github.com/FasterXML/woodstox", "source_repo": "github.com/fasterxml/woodstox", "repository_source": "deps.dev", "latest_release_at": "2026-09-30T02:09:23.000Z", "latest_release_version": "7.3.0", "rankings_average": 8.890936589176793, "archived": false, "dds": null, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5034541712588237, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/com.github.jinahya/bit-io", "purl": "pkg:maven/com.github.jinahya/bit-io@1.4.3", "source_purls": [ "pkg:maven/com.github.jinahya/bit-io@1.4.3?type=jar" ], "name": "bit-io", "ecosystem": "maven", "version": "1.4.3", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2019-10-14T05:42:42Z", "repository_url": "https://github.com/jinahya/bit-io", "source_repo": "github.com/jinahya/bit-io", "repository_source": "ecosyste.ms", "latest_release_at": "2020-05-11T08:25:59.000Z", "latest_release_version": "2.0.5", "rankings_average": 20.174994243610406, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.3385176058676047, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/com.github.luben/zstd-jni", "purl": "pkg:maven/com.github.luben/zstd-jni@1.5.6-4", "source_purls": [ "pkg:maven/com.github.luben/zstd-jni@1.5.6-4?type=jar" ], "name": "zstd-jni", "ecosystem": "maven", "version": "1.5.6-4", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-07-20T18:10:25Z", "repository_url": "https://github.com/luben/zstd-jni", "source_repo": "github.com/luben/zstd-jni", "repository_source": "ecosyste.ms", "latest_release_at": "2017-05-11T01:53:27.000Z", "latest_release_version": "1.2.0", "rankings_average": 6.319741027716125, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5686840806526785, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/com.github.purejavacomm/purejavacomm", "purl": "pkg:maven/com.github.purejavacomm/purejavacomm@1.0.2.RELEASE", "source_purls": [ "pkg:maven/com.github.purejavacomm/purejavacomm@1.0.2.RELEASE?type=jar" ], "name": "purejavacomm", "ecosystem": "maven", "version": "1.0.2.RELEASE", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2017-02-25T08:27:08Z", "repository_url": "https://github.com/nyholku/purejavacomm", "source_repo": "github.com/nyholku/purejavacomm", "repository_source": "deps.dev", "latest_release_at": "2017-02-25T08:27:09.000Z", "latest_release_version": "1.0.2.RELEASE", "rankings_average": 11.393854592321118, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4545752937148847, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/com.google.code.findbugs/jsr305", "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "source_purls": [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ], "name": "jsr305", "ecosystem": "maven", "version": "3.0.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2017-03-31T04:55:47Z", "repository_url": "https://code.google.com/p/jsr-305/", "source_repo": null, "repository_source": null, "latest_release_at": "2017-03-31T04:55:48.000Z", "latest_release_version": "3.0.2", "rankings_average": 0.011012201519283366, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.9976269289851839, "health": null, "health_inputs": 1, "risk": null }, { "key": "pkg:maven/com.google.uzaygezen/uzaygezen-core", "purl": "pkg:maven/com.google.uzaygezen/uzaygezen-core@0.2", "source_purls": [ "pkg:maven/com.google.uzaygezen/uzaygezen-core@0.2?type=jar" ], "name": "uzaygezen-core", "ecosystem": "maven", "version": "0.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2014-06-16T22:54:33Z", "repository_url": "https://uzaygezen.googlecode.com/svn/tags/uzaygezen-core-0.2", "source_repo": null, "repository_source": null, "latest_release_at": "2014-06-16T22:54:33.000Z", "latest_release_version": "0.2", "rankings_average": 2.708473071776339, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.7160160355144891, "health": null, "health_inputs": 1, "risk": null }, { "key": "pkg:maven/com.googlecode.json-simple/json-simple", "purl": "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1", "source_purls": [ "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1?type=jar" ], "name": "json-simple", "ecosystem": "maven", "version": "1.1.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2012-03-21T05:11:33Z", "repository_url": "http://json-simple.googlecode.com/svn/trunk/", "source_repo": null, "repository_source": null, "latest_release_at": "2012-03-21T05:11:34.000Z", "latest_release_version": "1.1.1", "rankings_average": 0.03650718964717503, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.9922306277365988, "health": null, "health_inputs": 1, "risk": null }, { "key": "pkg:maven/com.sun.activation/jakarta.activation", "purl": "pkg:maven/com.sun.activation/jakarta.activation@1.2.2", "source_purls": [ "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar" ], "name": "jakarta.activation", "ecosystem": "maven", "version": "1.2.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2020-02-20T18:37:34Z", "repository_url": "https://github.com/eclipse-ee4j/jaf", "source_repo": "github.com/eclipse-ee4j/jaf", "repository_source": "deps.dev", "latest_release_at": "2021-02-12T08:23:51.000Z", "latest_release_version": "2.0.1", "rankings_average": 13.59078029096953, "archived": false, "dds": null, "active_maintainers": 2, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.41921563423069663, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/com.sun.istack/istack-commons-runtime", "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12", "source_purls": [ "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar" ], "name": "istack-commons-runtime", "ecosystem": "maven", "version": "3.0.12", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2021-03-18T15:26:41Z", "repository_url": "https://github.com/eclipse-ee4j/jaxb-istack-commons", "source_repo": "github.com/eclipse-ee4j/jaxb-istack-commons", "repository_source": "deps.dev", "latest_release_at": "2023-04-14T11:32:35.000Z", "latest_release_version": "4.2.0", "rankings_average": 16.57143429206419, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.37893831343683904, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/com.yahoo.datasketches/sketches-core", "purl": "pkg:maven/com.yahoo.datasketches/sketches-core@0.9.0", "source_purls": [ "pkg:maven/com.yahoo.datasketches/sketches-core@0.9.0?type=jar" ], "name": "sketches-core", "ecosystem": "maven", "version": "0.9.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2017-03-24T22:54:19Z", "repository_url": "https://github.com/DataSketches/sketches-core", "source_repo": "github.com/datasketches/sketches-core", "repository_source": "deps.dev", "latest_release_at": "2019-05-14T19:15:54.000Z", "latest_release_version": "0.13.4", "rankings_average": 0.9066014800566374, "archived": false, "dds": null, "active_maintainers": 6, "governance_files": 0, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.8601721612679916, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/io.vavr/vavr-match", "purl": "pkg:maven/io.vavr/vavr-match@0.10.7", "source_purls": [ "pkg:maven/io.vavr/vavr-match@0.10.7?type=jar" ], "name": "vavr-match", "ecosystem": "maven", "version": "0.10.7", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-07-20T10:15:28Z", "repository_url": "https://github.com/vavr-io/vavr-match", "source_repo": "github.com/vavr-io/vavr-match", "repository_source": "ecosyste.ms", "latest_release_at": "2026-02-08T09:46:24.000Z", "latest_release_version": "1.0.0", "rankings_average": 3.264036011646115, "archived": false, "dds": null, "active_maintainers": 1, "governance_files": 0, "maintained": null, "scorecard_date": null, "criticality": 0.6857685239109517, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/jakarta.activation/jakarta.activation-api", "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2", "source_purls": [ "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar" ], "name": "jakarta.activation-api", "ecosystem": "maven", "version": "1.2.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2020-02-20T18:37:46Z", "repository_url": "https://github.com/jakartaee/jaf-api", "source_repo": "github.com/eclipse-ee4j/jaf", "repository_source": "deps.dev", "latest_release_at": "2025-09-11T11:54:14.000Z", "latest_release_version": "2.1.4", "rankings_average": 13.436794842274924, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 2, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.42151453353097434, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/jakarta.transaction/jakarta.transaction-api", "purl": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3", "source_purls": [ "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar" ], "name": "jakarta.transaction-api", "ecosystem": "maven", "version": "1.3.3", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2019-08-02T22:16:43Z", "repository_url": "https://github.com/eclipse-ee4j/jta-api", "source_repo": "github.com/eclipse-ee4j/jta-api", "repository_source": "deps.dev", "latest_release_at": "2022-03-31T10:37:39.000Z", "latest_release_version": "2.0.1", "rankings_average": 13.480159802949746, "archived": false, "dds": null, "active_maintainers": 3, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4208646527737211, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/net.hydromatic/aggdesigner-algorithm", "purl": "pkg:maven/net.hydromatic/aggdesigner-algorithm@6.0", "source_purls": [ "pkg:maven/net.hydromatic/aggdesigner-algorithm@6.0?type=jar" ], "name": "aggdesigner-algorithm", "ecosystem": "maven", "version": "6.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2016-10-27T23:05:14Z", "repository_url": "https://github.com/julianhyde/aggdesigner", "source_repo": "github.com/julianhyde/aggdesigner", "repository_source": "deps.dev", "latest_release_at": "2025-07-24T05:47:31.000Z", "latest_release_version": "6.1", "rankings_average": 24.56014175735066, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.29773574411996984, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/net.lingala.zip4j/zip4j", "purl": "pkg:maven/net.lingala.zip4j/zip4j@2.11.5", "source_purls": [ "pkg:maven/net.lingala.zip4j/zip4j@2.11.5?type=jar" ], "name": "zip4j", "ecosystem": "maven", "version": "2.11.5", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-02-22T15:32:31Z", "repository_url": "https://github.com/srikanth-lingala/zip4j", "source_repo": "github.com/srikanth-lingala/zip4j", "repository_source": "ecosyste.ms", "latest_release_at": "2026-02-11T18:54:59.000Z", "latest_release_version": "2.11.6", "rankings_average": 4.395038492726927, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.6347918266872508, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.apache.kafka/connect-api", "purl": "pkg:maven/org.apache.kafka/connect-api@3.9.0", "source_purls": [ "pkg:maven/org.apache.kafka/connect-api@3.9.0?type=jar" ], "name": "connect-api", "ecosystem": "maven", "version": "3.9.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-10-30T16:24:58Z", "repository_url": "", "source_repo": null, "repository_source": null, "latest_release_at": "2026-06-24T02:12:11.000Z", "latest_release_version": "4.3.1", "rankings_average": 1.3540247388528226, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.8144953062564667, "health": null, "health_inputs": 1, "risk": null }, { "key": "pkg:maven/org.apache.nifi/nifi-api", "purl": "pkg:maven/org.apache.nifi/nifi-api@1.28.1", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-api@1.28.1?type=jar" ], "name": "nifi-api", "ecosystem": "maven", "version": "1.28.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-15T09:40:54Z", "repository_url": "https://github.com/apache/nifi-api", "source_repo": "github.com/apache/nifi-api", "repository_source": "ecosyste.ms", "latest_release_at": "2026-09-25T02:18:55.000Z", "latest_release_version": "2.13.0", "rankings_average": 0.48502578076995007, "archived": false, "dds": null, "active_maintainers": 1, "governance_files": 1, "maintained": null, "scorecard_date": null, "criticality": 0.9143181350413665, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.apache.nifi/nifi-api", "purl": "pkg:maven/org.apache.nifi/nifi-api@2.1.0", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-api@2.1.0?type=jar" ], "name": "nifi-api", "ecosystem": "maven", "version": "2.1.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-03-28T15:35:58Z", "repository_url": "https://github.com/apache/nifi-api", "source_repo": "github.com/apache/nifi-api", "repository_source": "deps.dev", "latest_release_at": "2026-09-25T02:18:55.000Z", "latest_release_version": "2.13.0", "rankings_average": 0.48502578076995007, "archived": false, "dds": null, "active_maintainers": 1, "governance_files": 1, "maintained": null, "scorecard_date": null, "criticality": 0.9143181350413665, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.apache.nifi/nifi-standard-services-api-nar", "purl": "pkg:maven/org.apache.nifi/nifi-standard-services-api-nar@1.28.1", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-standard-services-api-nar@1.28.1?type=nar" ], "name": "nifi-standard-services-api-nar", "ecosystem": "maven", "version": "1.28.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2024-11-15T09:29:59Z", "repository_url": "", "source_repo": null, "repository_source": null, "latest_release_at": "2026-06-16T00:46:22.000Z", "latest_release_version": "2.10.0", "rankings_average": 2.35568189831277, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.7376764065568826, "health": null, "health_inputs": 1, "risk": null }, { "key": "pkg:maven/org.apache.nifi/nifi-standard-services-api-nar", "purl": "pkg:maven/org.apache.nifi/nifi-standard-services-api-nar@2.4.0", "source_purls": [ "pkg:maven/org.apache.nifi/nifi-standard-services-api-nar@2.4.0?type=nar" ], "name": "nifi-standard-services-api-nar", "ecosystem": "maven", "version": "2.4.0", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-04-28T19:03:59Z", "repository_url": "", "source_repo": null, "repository_source": null, "latest_release_at": "2026-06-16T00:46:22.000Z", "latest_release_version": "2.10.0", "rankings_average": 2.35568189831277, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.7376764065568826, "health": null, "health_inputs": 1, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-apache-calcite", "purl": "pkg:maven/org.apache.plc4x/plc4j-apache-calcite@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-apache-calcite@0.13.1?type=jar" ], "name": "plc4j-apache-calcite", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:54:51Z", "repository_url": "https://github.com/apache/plc4x-extras", "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": "2025-08-29T14:54:50.000Z", "latest_release_version": "0.13.1", "rankings_average": 25.15810498732953, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": null, "scorecard_date": null, "criticality": 0.29272506043309654, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-apache-kafka", "purl": "pkg:maven/org.apache.plc4x/plc4j-apache-kafka@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-apache-kafka@0.13.1?type=jar" ], "name": "plc4j-apache-kafka", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:55:46Z", "repository_url": "https://github.com/apache/plc4x-extras", "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": "2025-08-29T14:55:46.000Z", "latest_release_version": "0.13.1", "rankings_average": 22.27203825444089, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": null, "scorecard_date": null, "criticality": 0.3180562558434533, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-apache-nifi", "purl": "pkg:maven/org.apache.plc4x/plc4j-apache-nifi@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-apache-nifi@0.13.1?type=pom" ], "name": "plc4j-apache-nifi", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:54:55Z", "repository_url": "https://github.com/apache/plc4x-extras", "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": "2025-08-29T14:54:55.000Z", "latest_release_version": "0.13.1", "rankings_average": 25.15810498732953, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": null, "scorecard_date": null, "criticality": 0.29272506043309654, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-apache-nifi-1", "purl": "pkg:maven/org.apache.plc4x/plc4j-apache-nifi-1@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-apache-nifi-1@0.13.1?type=pom" ], "name": "plc4j-apache-nifi-1", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:54:56Z", "repository_url": null, "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": null, "latest_release_version": null, "rankings_average": null, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": null, "health": null, "health_inputs": 0, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-apache-nifi-2", "purl": "pkg:maven/org.apache.plc4x/plc4j-apache-nifi-2@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-apache-nifi-2@0.13.1?type=pom" ], "name": "plc4j-apache-nifi-2", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:55:18Z", "repository_url": null, "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": null, "latest_release_version": null, "rankings_average": null, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": null, "health": null, "health_inputs": 0, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-all", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-all@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-all@0.13.1?type=pom" ], "name": "plc4j-driver-all", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:51:45Z", "repository_url": null, "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": null, "latest_release_version": null, "rankings_average": null, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": null, "health": null, "health_inputs": 0, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-iec-60870", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-iec-60870@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-iec-60870@0.13.1?type=jar" ], "name": "plc4j-driver-iec-60870", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:53:11Z", "repository_url": null, "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": null, "latest_release_version": null, "rankings_average": null, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": null, "health": null, "health_inputs": 0, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-open-protocol", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-open-protocol@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-open-protocol@0.13.1?type=jar" ], "name": "plc4j-driver-open-protocol", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:09Z", "repository_url": null, "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": null, "latest_release_version": null, "rankings_average": null, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": null, "health": null, "health_inputs": 0, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-driver-profinet-ng", "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-profinet-ng@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-driver-profinet-ng@0.13.1?type=jar" ], "name": "plc4j-driver-profinet-ng", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-24T18:52:28Z", "repository_url": null, "source_repo": "github.com/apache/plc4x", "repository_source": "deps.dev", "latest_release_at": null, "latest_release_version": null, "rankings_average": null, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": null, "health": null, "health_inputs": 0, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-extras", "purl": "pkg:maven/org.apache.plc4x/plc4j-extras@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-extras@0.13.1?type=pom" ], "name": "plc4j-extras", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:53:29Z", "repository_url": null, "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": null, "latest_release_version": null, "rankings_average": null, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": null, "health": null, "health_inputs": 0, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-integrations", "purl": "pkg:maven/org.apache.plc4x/plc4j-integrations@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-integrations@0.13.1?type=pom" ], "name": "plc4j-integrations", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:54:48Z", "repository_url": "https://github.com/apache/plc4x-extras", "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": "2025-08-29T14:54:48.000Z", "latest_release_version": "0.13.1", "rankings_average": 25.15810498732953, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": null, "scorecard_date": null, "criticality": 0.29272506043309654, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-nifi-2-plc4x-nar", "purl": "pkg:maven/org.apache.plc4x/plc4j-nifi-2-plc4x-nar@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-nifi-2-plc4x-nar@0.13.1?type=nar" ], "name": "plc4j-nifi-2-plc4x-nar", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:55:24Z", "repository_url": null, "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": null, "latest_release_version": null, "rankings_average": null, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": null, "health": null, "health_inputs": 0, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-nifi-2-plc4x-processors", "purl": "pkg:maven/org.apache.plc4x/plc4j-nifi-2-plc4x-processors@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-nifi-2-plc4x-processors@0.13.1?type=jar" ], "name": "plc4j-nifi-2-plc4x-processors", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:55:20Z", "repository_url": null, "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": null, "latest_release_version": null, "rankings_average": null, "archived": null, "dds": null, "active_maintainers": null, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": null, "health": null, "health_inputs": 0, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-nifi-plc4x-nar", "purl": "pkg:maven/org.apache.plc4x/plc4j-nifi-plc4x-nar@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-nifi-plc4x-nar@0.13.1?type=nar" ], "name": "plc4j-nifi-plc4x-nar", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:55:01Z", "repository_url": "https://github.com/apache/plc4x-extras", "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": "2025-08-29T14:55:01.000Z", "latest_release_version": "0.13.1", "rankings_average": 25.15810498732953, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": null, "scorecard_date": null, "criticality": 0.29272506043309654, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.apache.plc4x/plc4j-nifi-plc4x-processors", "purl": "pkg:maven/org.apache.plc4x/plc4j-nifi-plc4x-processors@0.13.1", "source_purls": [ "pkg:maven/org.apache.plc4x/plc4j-nifi-plc4x-processors@0.13.1?type=jar" ], "name": "plc4j-nifi-plc4x-processors", "ecosystem": "maven", "version": "0.13.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-08-29T14:54:58Z", "repository_url": "https://github.com/apache/plc4x-extras", "source_repo": "github.com/apache/plc4x-extras", "repository_source": "deps.dev", "latest_release_at": "2025-08-29T14:54:58.000Z", "latest_release_version": "0.13.1", "rankings_average": 17.982094298289528, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": null, "scorecard_date": null, "criticality": 0.36220600984765416, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.apiguardian/apiguardian-api", "purl": "pkg:maven/org.apiguardian/apiguardian-api@1.1.2", "source_purls": [ "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar" ], "name": "apiguardian-api", "ecosystem": "maven", "version": "1.1.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2021-06-27T12:53:36Z", "repository_url": "https://github.com/apiguardian-team/apiguardian", "source_repo": "github.com/apiguardian-team/apiguardian", "repository_source": "deps.dev", "latest_release_at": "2021-06-27T12:53:35.000Z", "latest_release_version": "1.1.2", "rankings_average": 12.315935320075925, "archived": false, "dds": null, "active_maintainers": 1, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4390262501391524, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.checkerframework/checker-qual", "purl": "pkg:maven/org.checkerframework/checker-qual@3.49.5", "source_purls": [ "pkg:maven/org.checkerframework/checker-qual@3.49.5?type=jar" ], "name": "checker-qual", "ecosystem": "maven", "version": "3.49.5", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-06-30T15:07:45Z", "repository_url": "https://github.com/typetools/checker-framework", "source_repo": "github.com/typetools/checker-framework", "repository_source": "deps.dev", "latest_release_at": "2026-10-09T02:09:49.000Z", "latest_release_version": "4.3.1", "rankings_average": 5.400143358841596, "archived": false, "dds": null, "active_maintainers": 3, "governance_files": 1, "maintained": 10, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5977742329458646, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.codehaus.woodstox/stax2-api", "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2", "source_purls": [ "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar" ], "name": "stax2-api", "ecosystem": "maven", "version": "4.2.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-10-10T21:22:18Z", "repository_url": "https://github.com/FasterXML/stax2-api", "source_repo": "github.com/fasterxml/stax2-api", "repository_source": "deps.dev", "latest_release_at": "2026-10-10T02:28:26.000Z", "latest_release_version": "4.3.2", "rankings_average": 13.357684259008943, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": 5, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.4227051541572602, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.ow2.asm/asm", "purl": "pkg:maven/org.ow2.asm/asm@9.3", "source_purls": [ "pkg:maven/org.ow2.asm/asm@9.3?type=jar" ], "name": "asm", "ecosystem": "maven", "version": "9.3", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2022-04-04T17:17:14Z", "repository_url": "https://gitlab.ow2.org/asm/asm/", "source_repo": null, "repository_source": null, "latest_release_at": "2026-10-10T02:29:52.000Z", "latest_release_version": "9.11", "rankings_average": 0.6659586973364323, "archived": null, "dds": null, "active_maintainers": 0, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.8894068421268606, "health": null, "health_inputs": 2, "risk": null }, { "key": "pkg:maven/org.pcap4j/pcap4j-core", "purl": "pkg:maven/org.pcap4j/pcap4j-core@1.8.2", "source_purls": [ "pkg:maven/org.pcap4j/pcap4j-core@1.8.2?type=jar" ], "name": "pcap4j-core", "ecosystem": "maven", "version": "1.8.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2019-08-17T05:18:07Z", "repository_url": "https://github.com/kaitoy/pcap4j", "source_repo": "github.com/kaitoy/pcap4j", "repository_source": "deps.dev", "latest_release_at": "2019-08-17T05:18:08.000Z", "latest_release_version": "1.8.2", "rankings_average": 5.994253621519887, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5785399549992626, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.pcap4j/pcap4j-packetfactory-static", "purl": "pkg:maven/org.pcap4j/pcap4j-packetfactory-static@1.8.2", "source_purls": [ "pkg:maven/org.pcap4j/pcap4j-packetfactory-static@1.8.2?type=jar" ], "name": "pcap4j-packetfactory-static", "ecosystem": "maven", "version": "1.8.2", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2019-08-17T05:18:14Z", "repository_url": "https://github.com/kaitoy/pcap4j", "source_repo": "github.com/kaitoy/pcap4j", "repository_source": "deps.dev", "latest_release_at": "2019-08-17T05:18:15.000Z", "latest_release_version": "1.8.2", "rankings_average": 6.128762926848802, "archived": false, "dds": null, "active_maintainers": 0, "governance_files": 0, "maintained": 0, "scorecard_date": "2026-08-24T00:00:00Z", "criticality": 0.5744124753276287, "health": null, "health_inputs": 3, "risk": null }, { "key": "pkg:maven/org.yaml/snakeyaml", "purl": "pkg:maven/org.yaml/snakeyaml@2.1", "source_purls": [ "pkg:maven/org.yaml/snakeyaml@2.1?type=jar" ], "name": "snakeyaml", "ecosystem": "maven", "version": "2.1", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2023-08-04T10:59:18Z", "repository_url": "https://codeberg.org/snakeyaml/snakeyaml", "source_repo": "bitbucket.org/snakeyaml/snakeyaml", "repository_source": "deps.dev", "latest_release_at": "2026-08-31T02:05:09.000Z", "latest_release_version": "2.7", "rankings_average": 0.0187678662071545, "archived": null, "dds": null, "active_maintainers": 0, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.9959710861866854, "health": null, "health_inputs": 2, "risk": null }, { "key": "pkg:maven/org.yaml/snakeyaml", "purl": "pkg:maven/org.yaml/snakeyaml@2.4", "source_purls": [ "pkg:maven/org.yaml/snakeyaml@2.4?type=jar" ], "name": "snakeyaml", "ecosystem": "maven", "version": "2.4", "artifacts": [ "apache-plc4x-extras-0.13.1-source-release.zip" ], "advisory_status": "none", "advisories": [], "published_at": "2025-02-15T10:54:48Z", "repository_url": "https://codeberg.org/snakeyaml/snakeyaml", "source_repo": "bitbucket.org/snakeyaml/snakeyaml", "repository_source": "deps.dev", "latest_release_at": "2026-08-31T02:05:09.000Z", "latest_release_version": "2.7", "rankings_average": 0.0187678662071545, "archived": null, "dds": null, "active_maintainers": 0, "governance_files": null, "maintained": null, "scorecard_date": null, "criticality": 0.9959710861866854, "health": null, "health_inputs": 2, "risk": null } ], "sources": { "Alpha-Omega heuristic": "https://github.com/alpha-omega-security/heatmap/tree/4ed37981", "ecosyste.ms packages": "https://packages.ecosyste.ms/api/v1", "ecosyste.ms repositories": "https://repos.ecosyste.ms/api/v1", "ecosyste.ms issues": "https://issues.ecosyste.ms/api/v1", "deps.dev and OpenSSF Scorecard": "https://api.deps.dev/v3alpha", "ecosyste.ms data licence": "https://creativecommons.org/licenses/by-sa/4.0/", "deps.dev terms": "https://docs.deps.dev/api/v3alpha/#terms" }, "attribution": "Alpha-Omega maintenance heuristic, with missing inputs left unknown. Includes ecosyste.ms data under CC BY-SA 4.0 and deps.dev and OpenSSF Scorecard observations. ATR selected, normalised and combined records and calculated maintenance indicators. gitbox_mirror identifies an inferred Apache GitHub mirror, not verified repository identity." }