{
  "kind": "sbom_heatmap",
  "analysis_version": 1,
  "generated_at": "2026-10-12T20:23:04.888325+00:00",
  "sboms": [
    {
      "artifact_path": "apache-plc4x-1.0.0-source-release.zip",
      "sbom_url": "https://downloads.apache.org/plc4x/1.0.0/apache-plc4x-1.0.0-cyclonedx.json",
      "sha256": "11005234dd39135219d5a155e86e1ffd163103407df9ea324aadf2045a00dbb8",
      "retrieved_at": "2026-10-12T20:23:04.933749+00:00",
      "components": 162,
      "files": 0,
      "packages": 160,
      "error": null
    }
  ],
  "rows": [
    {
      "key": "pkg:maven/com.fasterxml.jackson.core/jackson-core",
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.2",
      "source_purls": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.2?type=jar"
      ],
      "name": "jackson-core",
      "ecosystem": "maven",
      "version": "2.22.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "found",
      "advisories": [
        "GHSA-7hhh-6rmp-j9qf",
        "GHSA-p6pp-m3f8-5c89"
      ],
      "published_at": "2026-08-16T16:26:43Z",
      "repository_url": "https://github.com/FasterXML/jackson-core",
      "source_repo": "github.com/fasterxml/jackson-core",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-22T02:29:25.000Z",
      "latest_release_version": "2.22.3",
      "rankings_average": 2.8085276909513506,
      "archived": false,
      "dds": 0.1548655812192351,
      "active_maintainers": 2,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7102475056169733,
      "health": 0.5339799568209465,
      "health_inputs": 4,
      "risk": 0.33098957323543693
    },
    {
      "key": "pkg:maven/com.fasterxml.jackson.core/jackson-databind",
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.2",
      "source_purls": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.2?type=jar"
      ],
      "name": "jackson-databind",
      "ecosystem": "maven",
      "version": "2.22.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "found",
      "advisories": [
        "GHSA-cxp5-3px4-pw24",
        "GHSA-wv8q-qhhj-9h54"
      ],
      "published_at": "2026-08-16T16:35:01Z",
      "repository_url": "https://github.com/FasterXML/jackson-databind",
      "source_repo": "github.com/fasterxml/jackson-databind",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-22T02:29:22.000Z",
      "latest_release_version": "2.22.3",
      "rankings_average": 2.031618177446502,
      "archived": false,
      "dds": 0.148047640584954,
      "active_maintainers": 3,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7596820007448203,
      "health": 0.6156087970682614,
      "health_inputs": 4,
      "risk": 0.29201507811189137
    },
    {
      "key": "pkg:maven/org.freemarker/freemarker",
      "purl": "pkg:maven/org.freemarker/freemarker@2.3.35",
      "source_purls": [
        "pkg:maven/org.freemarker/freemarker@2.3.35?type=jar"
      ],
      "name": "freemarker",
      "ecosystem": "maven",
      "version": "2.3.35",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-23T20:32:26Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/freemarker.git",
      "source_repo": "github.com/apache/freemarker",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-08-28T02:22:18.000Z",
      "latest_release_version": "2.3.35",
      "rankings_average": 0.4114904758088216,
      "archived": false,
      "dds": 0.06647750304012967,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9253223789359946,
      "health": 0.3395073797123277,
      "health_inputs": 4,
      "risk": 0.6111686026742574
    },
    {
      "key": "pkg:maven/org.antlr/antlr4-runtime",
      "purl": "pkg:maven/org.antlr/antlr4-runtime@4.13.2",
      "source_purls": [
        "pkg:maven/org.antlr/antlr4-runtime@4.13.2?type=jar"
      ],
      "name": "antlr4-runtime",
      "ecosystem": "maven",
      "version": "4.13.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-03T18:44:36Z",
      "repository_url": "https://github.com/antlr/antlr4",
      "source_repo": "github.com/antlr/antlr4",
      "repository_source": "deps.dev",
      "latest_release_at": "2024-08-03T18:44:36.000Z",
      "latest_release_version": "4.13.2",
      "rankings_average": 0.8616654644545964,
      "archived": false,
      "dds": 0.6690026954177898,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.8653401366631538,
      "health": 0.31791999122632664,
      "health_inputs": 4,
      "risk": 0.5902312080074157
    },
    {
      "key": "pkg:maven/com.google.guava/guava",
      "purl": "pkg:maven/com.google.guava/guava@33.7.1-jre",
      "source_purls": [
        "pkg:maven/com.google.guava/guava@33.7.1-jre?type=jar"
      ],
      "name": "guava",
      "ecosystem": "maven",
      "version": "33.7.1-jre",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-18T03:33:27Z",
      "repository_url": "https://github.com/google/guava",
      "source_repo": "github.com/google/guava",
      "repository_source": "deps.dev",
      "latest_release_at": "2017-08-04T21:24:32.000Z",
      "latest_release_version": "23.0",
      "rankings_average": 0.2313456760439208,
      "archived": false,
      "dds": 0.6975382767937557,
      "active_maintainers": 2,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9549074360772664,
      "health": 0.4243845691984389,
      "health_inputs": 4,
      "risk": 0.5496594551932298
    },
    {
      "key": "pkg:maven/com.google.guava/listenablefuture",
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava",
      "source_purls": [
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"
      ],
      "name": "listenablefuture",
      "ecosystem": "maven",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2018-09-11T19:40:43Z",
      "repository_url": "https://github.com/google/guava",
      "source_repo": "github.com/google/guava",
      "repository_source": "deps.dev",
      "latest_release_at": "2018-09-11T19:40:24.000Z",
      "latest_release_version": "1.0",
      "rankings_average": 0.3375747079257977,
      "archived": false,
      "dds": 0.6975382767937557,
      "active_maintainers": 2,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.93697714857936,
      "health": 0.4243845691984389,
      "health_inputs": 4,
      "risk": 0.5393385050307266
    },
    {
      "key": "pkg:maven/net.objecthunter/exp4j",
      "purl": "pkg:maven/net.objecthunter/exp4j@0.4.8",
      "source_purls": [
        "pkg:maven/net.objecthunter/exp4j@0.4.8?type=jar"
      ],
      "name": "exp4j",
      "ecosystem": "maven",
      "version": "0.4.8",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2017-01-30T13:59:43Z",
      "repository_url": "https://github.com/fasseg/exp4j",
      "source_repo": "github.com/fasseg/exp4j",
      "repository_source": "deps.dev",
      "latest_release_at": "2017-01-30T13:59:43.000Z",
      "latest_release_version": "0.4.8",
      "rankings_average": 7.459374824805184,
      "archived": true,
      "dds": 0.5317796610169492,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5373305495883682,
      "health": 0.05,
      "health_inputs": 4,
      "risk": 0.5104640221089498
    },
    {
      "key": "pkg:maven/org.hamcrest/hamcrest-core",
      "purl": "pkg:maven/org.hamcrest/hamcrest-core@3.0",
      "source_purls": [
        "pkg:maven/org.hamcrest/hamcrest-core@3.0?type=jar"
      ],
      "name": "hamcrest-core",
      "ecosystem": "maven",
      "version": "3.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-01T09:08:16Z",
      "repository_url": "https://github.com/hamcrest/JavaHamcrest",
      "source_repo": "github.com/hamcrest/javahamcrest",
      "repository_source": "deps.dev",
      "latest_release_at": "2024-08-01T09:08:15.000Z",
      "latest_release_version": "3.0",
      "rankings_average": 3.516590526568887,
      "archived": false,
      "dds": 0.8351515151515152,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.673300535613912,
      "health": 0.27557586212880925,
      "health_inputs": 4,
      "risk": 0.48775516004031916
    },
    {
      "key": "pkg:maven/org.hamcrest/hamcrest-library",
      "purl": "pkg:maven/org.hamcrest/hamcrest-library@3.0",
      "source_purls": [
        "pkg:maven/org.hamcrest/hamcrest-library@3.0?type=jar"
      ],
      "name": "hamcrest-library",
      "ecosystem": "maven",
      "version": "3.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-01T09:08:37Z",
      "repository_url": "https://github.com/hamcrest/JavaHamcrest",
      "source_repo": "github.com/hamcrest/javahamcrest",
      "repository_source": "deps.dev",
      "latest_release_at": "2024-08-01T09:08:36.000Z",
      "latest_release_version": "3.0",
      "rankings_average": 3.5594694237396816,
      "archived": false,
      "dds": 0.8351515151515152,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.6712531651606868,
      "health": 0.27557591762094524,
      "health_inputs": 4,
      "risk": 0.4862719582155666
    },
    {
      "key": "pkg:maven/org.hamcrest/hamcrest",
      "purl": "pkg:maven/org.hamcrest/hamcrest@3.0",
      "source_purls": [
        "pkg:maven/org.hamcrest/hamcrest@3.0?type=jar"
      ],
      "name": "hamcrest",
      "ecosystem": "maven",
      "version": "3.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-08-01T09:09:02Z",
      "repository_url": "https://github.com/hamcrest/JavaHamcrest",
      "source_repo": "github.com/hamcrest/javahamcrest",
      "repository_source": "deps.dev",
      "latest_release_at": "2024-08-01T09:09:00.000Z",
      "latest_release_version": "3.0",
      "rankings_average": 3.5670834335176727,
      "archived": false,
      "dds": 0.8351515151515152,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.6708916273641692,
      "health": 0.27557598104052916,
      "health_inputs": 4,
      "risk": 0.48601000898141117
    },
    {
      "key": "pkg:maven/org.slf4j/slf4j-api",
      "purl": "pkg:maven/org.slf4j/slf4j-api@2.0.18",
      "source_purls": [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ],
      "name": "slf4j-api",
      "ecosystem": "maven",
      "version": "2.0.18",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-12T18:34:09Z",
      "repository_url": "https://github.com/qos-ch/slf4j",
      "source_repo": "github.com/qos-ch/slf4j",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-23T02:52:54.000Z",
      "latest_release_version": "2.0.20",
      "rankings_average": 2.5688896723583943,
      "archived": false,
      "dds": 0.17976965448172255,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 6,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7243290772955459,
      "health": 0.37377134223026015,
      "health_inputs": 4,
      "risk": 0.4535956258583838
    },
    {
      "key": "pkg:maven/com.google.guava/failureaccess",
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.3",
      "source_purls": [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar"
      ],
      "name": "failureaccess",
      "ecosystem": "maven",
      "version": "1.0.3",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-03-19T16:15:51Z",
      "repository_url": "https://github.com/google/guava",
      "source_repo": "github.com/google/guava",
      "repository_source": "deps.dev",
      "latest_release_at": "2025-03-19T16:15:50.000Z",
      "latest_release_version": "1.0.3",
      "rankings_average": 0.3299671395367476,
      "archived": false,
      "dds": 0.6975382767937557,
      "active_maintainers": 2,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9382130469242052,
      "health": 0.5437517609572622,
      "health_inputs": 4,
      "risk": 0.42805805050609014
    },
    {
      "key": "pkg:maven/com.google.j2objc/j2objc-annotations",
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@3.1",
      "source_purls": [
        "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar"
      ],
      "name": "j2objc-annotations",
      "ecosystem": "maven",
      "version": "3.1",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-08-14T17:49:49Z",
      "repository_url": "https://github.com/google/j2objc",
      "source_repo": "github.com/google/j2objc",
      "repository_source": "deps.dev",
      "latest_release_at": "2025-08-14T17:49:49.000Z",
      "latest_release_version": "3.1",
      "rankings_average": 1.8673527615653374,
      "archived": false,
      "dds": 0.5127977248489157,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.771752608075782,
      "health": 0.4480381449353681,
      "health_inputs": 4,
      "risk": 0.4259780012044765
    },
    {
      "key": "pkg:maven/net.java.dev.jna/jna",
      "purl": "pkg:maven/net.java.dev.jna/jna@5.19.1",
      "source_purls": [
        "pkg:maven/net.java.dev.jna/jna@5.19.1?type=jar"
      ],
      "name": "jna",
      "ecosystem": "maven",
      "version": "5.19.1",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-06-12T16:48:57Z",
      "repository_url": "https://github.com/java-native-access/jna",
      "source_repo": "github.com/java-native-access/jna",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-06-12T16:48:57.000Z",
      "latest_release_version": "5.19.1",
      "rankings_average": 1.6758836258716037,
      "archived": false,
      "dds": 0.6145235361653272,
      "active_maintainers": 1,
      "governance_files": 0,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7867272047092311,
      "health": 0.4590763857739416,
      "health_inputs": 4,
      "risk": 0.42555932298128135
    },
    {
      "key": "pkg:maven/commons-cli/commons-cli",
      "purl": "pkg:maven/commons-cli/commons-cli@1.11.0",
      "source_purls": [
        "pkg:maven/commons-cli/commons-cli@1.11.0?type=jar"
      ],
      "name": "commons-cli",
      "ecosystem": "maven",
      "version": "1.11.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-11-08T22:40:28Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-cli.git",
      "source_repo": "github.com/apache/commons-cli",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2025-11-08T22:40:25.000Z",
      "latest_release_version": "1.11.0",
      "rankings_average": 0.015962704709999734,
      "archived": false,
      "dds": 0.6930415263748597,
      "active_maintainers": 0,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9965685315340851,
      "health": 0.5961132061742869,
      "health_inputs": 4,
      "risk": 0.4025008690289007
    },
    {
      "key": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations",
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22",
      "source_purls": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.22?type=jar"
      ],
      "name": "jackson-annotations",
      "ecosystem": "maven",
      "version": "2.22",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-31T04:44:48Z",
      "repository_url": "https://github.com/FasterXML/jackson-annotations",
      "source_repo": "github.com/fasterxml/jackson-annotations",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-05-31T04:44:48.000Z",
      "latest_release_version": "2.22",
      "rankings_average": 4.647643917199174,
      "archived": false,
      "dds": 0.10285006195786861,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.6248768702649806,
      "health": 0.4116368112986878,
      "health_inputs": 4,
      "risk": 0.3676545479348002
    },
    {
      "key": "pkg:maven/com.fazecast/jSerialComm",
      "purl": "pkg:maven/com.fazecast/jSerialComm@2.11.4",
      "source_purls": [
        "pkg:maven/com.fazecast/jSerialComm@2.11.4?type=jar"
      ],
      "name": "jSerialComm",
      "ecosystem": "maven",
      "version": "2.11.4",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-11-01T20:34:40Z",
      "repository_url": "https://github.com/Fazecast/jSerialComm",
      "source_repo": "github.com/fazecast/jserialcomm",
      "repository_source": "deps.dev",
      "latest_release_at": "2025-11-01T20:34:40.000Z",
      "latest_release_version": "2.11.4",
      "rankings_average": 6.492137788486382,
      "archived": false,
      "dds": 0.518796992481203,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5636399594594412,
      "health": 0.3842672949865145,
      "health_inputs": 4,
      "risk": 0.34705155689165307
    },
    {
      "key": "pkg:maven/net.bytebuddy/byte-buddy",
      "purl": "pkg:maven/net.bytebuddy/byte-buddy@1.18.13",
      "source_purls": [
        "pkg:maven/net.bytebuddy/byte-buddy@1.18.13?type=jar"
      ],
      "name": "byte-buddy",
      "ecosystem": "maven",
      "version": "1.18.13",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T01:52:25Z",
      "repository_url": "https://github.com/raphw/byte-buddy",
      "source_repo": "github.com/raphw/byte-buddy",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-16T02:00:56.000Z",
      "latest_release_version": "1.18.14",
      "rankings_average": 2.217981959975573,
      "archived": false,
      "dds": 0.276798613117596,
      "active_maintainers": 1,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7467553797749181,
      "health": 0.563088835778963,
      "health_inputs": 4,
      "risk": 0.32626576236578214
    },
    {
      "key": "pkg:maven/commons-net/commons-net",
      "purl": "pkg:maven/commons-net/commons-net@3.13.0",
      "source_purls": [
        "pkg:maven/commons-net/commons-net@3.13.0?type=jar"
      ],
      "name": "commons-net",
      "ecosystem": "maven",
      "version": "3.13.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-03-15T16:25:20Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-net",
      "source_repo": "github.com/apache/commons-net",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-03-15T16:25:13.000Z",
      "latest_release_version": "3.13.0",
      "rankings_average": 0.049157115759664444,
      "archived": false,
      "dds": 0.5900978698906161,
      "active_maintainers": 1,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9896022011288896,
      "health": 0.6826465716067521,
      "health_inputs": 4,
      "risk": 0.31405365127375756
    },
    {
      "key": "pkg:maven/ch.qos.logback/logback-classic",
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.6.3",
      "source_purls": [
        "pkg:maven/ch.qos.logback/logback-classic@1.6.3?type=jar"
      ],
      "name": "logback-classic",
      "ecosystem": "maven",
      "version": "1.6.3",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-14T08:08:07Z",
      "repository_url": "https://github.com/qos-ch/logback",
      "source_repo": "github.com/qos-ch/logback",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-10-01T01:54:32.000Z",
      "latest_release_version": "1.6.5",
      "rankings_average": 2.737737436883866,
      "archived": false,
      "dds": 0.3090237710593122,
      "active_maintainers": 1,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7143128851888307,
      "health": 0.5745687680852951,
      "health_inputs": 4,
      "risk": 0.30389101071843144
    },
    {
      "key": "pkg:maven/ch.qos.logback/logback-core",
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.6.3",
      "source_purls": [
        "pkg:maven/ch.qos.logback/logback-core@1.6.3?type=jar"
      ],
      "name": "logback-core",
      "ecosystem": "maven",
      "version": "1.6.3",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-14T08:08:07Z",
      "repository_url": "https://github.com/qos-ch/logback",
      "source_repo": "github.com/qos-ch/logback",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-10-01T01:54:33.000Z",
      "latest_release_version": "1.6.5",
      "rankings_average": 2.7443996954396086,
      "archived": false,
      "dds": 0.3090237710593122,
      "active_maintainers": 1,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7139270135286714,
      "health": 0.5745687707277778,
      "health_inputs": 4,
      "risk": 0.3037268469761491
    },
    {
      "key": "pkg:maven/org.bouncycastle/bcprov-jdk18on",
      "purl": "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.85.2",
      "source_purls": [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.85.2?type=jar"
      ],
      "name": "bcprov-jdk18on",
      "ecosystem": "maven",
      "version": "1.85.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-07T03:37:06Z",
      "repository_url": "https://github.com/bcgit/bc-java",
      "source_repo": "github.com/bcgit/bc-java",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-12T02:10:20.000Z",
      "latest_release_version": "1.86",
      "rankings_average": 3.1826974292842927,
      "archived": false,
      "dds": 0.5124223602484472,
      "active_maintainers": 1,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.6899417141551654,
      "health": 0.6210830209127666,
      "health_inputs": 4,
      "risk": 0.2614306300739428
    },
    {
      "key": "pkg:maven/org.bouncycastle/bcpkix-jdk18on",
      "purl": "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.85",
      "source_purls": [
        "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.85?type=jar"
      ],
      "name": "bcpkix-jdk18on",
      "ecosystem": "maven",
      "version": "1.85",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-07-12T06:37:57Z",
      "repository_url": "https://github.com/bcgit/bc-java",
      "source_repo": "github.com/bcgit/bc-java",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-12T02:10:16.000Z",
      "latest_release_version": "1.86",
      "rankings_average": 3.1983564079664553,
      "archived": false,
      "dds": 0.5124223602484472,
      "active_maintainers": 1,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.6891320363082117,
      "health": 0.621083010342836,
      "health_inputs": 4,
      "risk": 0.26112383667421907
    },
    {
      "key": "pkg:maven/commons-logging/commons-logging",
      "purl": "pkg:maven/commons-logging/commons-logging@1.3.6",
      "source_purls": [
        "pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"
      ],
      "name": "commons-logging",
      "ecosystem": "maven",
      "version": "1.3.6",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-03-04T23:08:28Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-logging",
      "source_repo": "github.com/apache/commons-logging",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-06-11T20:49:26.000Z",
      "latest_release_version": "1.4.0",
      "rankings_average": 0.0072132724212551095,
      "archived": false,
      "dds": 0.7431629013079667,
      "active_maintainers": 1,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9984426449584805,
      "health": 0.7410460449396962,
      "health_inputs": 4,
      "risk": 0.2585506718128692
    },
    {
      "key": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml",
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.2",
      "source_purls": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.22.2?type=jar"
      ],
      "name": "jackson-dataformat-xml",
      "ecosystem": "maven",
      "version": "2.22.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-16T16:50:10Z",
      "repository_url": "https://github.com/FasterXML/jackson-dataformat-xml",
      "source_repo": "github.com/fasterxml/jackson-dataformat-xml",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-23T02:17:38.000Z",
      "latest_release_version": "2.22.3",
      "rankings_average": 5.78386008469401,
      "archived": false,
      "dds": 0.2647058823529411,
      "active_maintainers": 2,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5851579028148066,
      "health": 0.5616664743714116,
      "health_inputs": 4,
      "risk": 0.25649432659024507
    },
    {
      "key": "pkg:maven/org.bouncycastle/bcutil-jdk18on",
      "purl": "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.85",
      "source_purls": [
        "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.85?type=jar"
      ],
      "name": "bcutil-jdk18on",
      "ecosystem": "maven",
      "version": "1.85",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-07-12T06:36:15Z",
      "repository_url": "https://github.com/bcgit/bc-java",
      "source_repo": "github.com/bcgit/bc-java",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-12T02:10:09.000Z",
      "latest_release_version": "1.86",
      "rankings_average": 3.5062495744842748,
      "archived": false,
      "dds": 0.5124223602484472,
      "active_maintainers": 1,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.6737972015834578,
      "health": 0.6210829918454572,
      "health_inputs": 4,
      "risk": 0.2553132197269072
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-configuration2",
      "purl": "pkg:maven/org.apache.commons/commons-configuration2@2.15.1",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-configuration2@2.15.1?type=jar"
      ],
      "name": "commons-configuration2",
      "ecosystem": "maven",
      "version": "2.15.1",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-21T14:18:37Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-configuration.git",
      "source_repo": "github.com/apache/commons-configuration",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-05-21T14:18:28.000Z",
      "latest_release_version": "2.15.1",
      "rankings_average": 0.13371269803104377,
      "archived": false,
      "dds": 0.4348374086211243,
      "active_maintainers": 2,
      "governance_files": 3,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.9728072495524069,
      "health": 0.7424414971950108,
      "health_inputs": 4,
      "risk": 0.2505547787125574
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-api",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-api@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-api@1.0.0?type=jar"
      ],
      "name": "plc4j-api",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:25Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 6.956802050275806,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5506017320488605,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.2353220986046601
    },
    {
      "key": "pkg:maven/org.bouncycastle/bctls-jdk18on",
      "purl": "pkg:maven/org.bouncycastle/bctls-jdk18on@1.85",
      "source_purls": [
        "pkg:maven/org.bouncycastle/bctls-jdk18on@1.85?type=jar"
      ],
      "name": "bctls-jdk18on",
      "ecosystem": "maven",
      "version": "1.85",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-07-12T06:39:40Z",
      "repository_url": "https://github.com/bcgit/bc-java",
      "source_repo": "github.com/bcgit/bc-java",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-10-08T02:21:19.000Z",
      "latest_release_version": "1.86.2",
      "rankings_average": 4.737702094939066,
      "archived": false,
      "dds": 0.5124223602484472,
      "active_maintainers": 1,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.6214489325013628,
      "health": 0.6270208353682037,
      "health_inputs": 4,
      "risk": 0.23178750370567983
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-s7",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-s7@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-s7@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-s7",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:25Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:23:40.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 7.295658180580444,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5415651098517762,
      "health": 0.5726098925712444,
      "health_inputs": 4,
      "risk": 0.23145957047921645
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-modbus",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-modbus@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-modbus@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-modbus",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:32Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 7.585539949343771,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5341228080539088,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.22827915857828435
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-opcua",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-opcua@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-opcua@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-opcua",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:00Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 8.373588789613011,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5150947795942769,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.22014675483017476
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-simulated",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-simulated@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-simulated@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-simulated",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:31Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 8.750593158405831,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5065506715136605,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.2164950818927252
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi@1.0.0?type=pom"
      ],
      "name": "plc4j-spi",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:31Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:30.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 8.939362692588773,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5023958973987797,
      "health": 0.572609231950578,
      "health_inputs": 4,
      "risk": 0.21471936845414305
    },
    {
      "key": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml",
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.2",
      "source_purls": [
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.22.2?type=jar"
      ],
      "name": "jackson-dataformat-yaml",
      "ecosystem": "maven",
      "version": "2.22.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-16T16:48:30Z",
      "repository_url": "https://github.com/FasterXML/jackson-dataformats-text",
      "source_repo": "github.com/fasterxml/jackson-dataformats-text",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-23T02:17:37.000Z",
      "latest_release_version": "2.22.3",
      "rankings_average": 7.02973471186984,
      "archived": false,
      "dds": 0.13,
      "active_maintainers": 3,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5486246821325338,
      "health": 0.611323334474027,
      "health_inputs": 4,
      "risk": 0.21323761207652012
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-ads",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-ads@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-ads@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-ads",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:48Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:30.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 9.318844439460626,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4942771760029906,
      "health": 0.572609231950578,
      "health_inputs": 4,
      "risk": 0.2112495018812175
    },
    {
      "key": "pkg:maven/com.google.errorprone/error_prone_annotations",
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0",
      "source_purls": [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.50.0?type=jar"
      ],
      "name": "error_prone_annotations",
      "ecosystem": "maven",
      "version": "2.50.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-06-10T10:34:28Z",
      "repository_url": "https://github.com/google/error-prone",
      "source_repo": "github.com/google/error-prone",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-06-10T10:34:28.000Z",
      "latest_release_version": "2.50.0",
      "rankings_average": 2.1062579463204156,
      "archived": false,
      "dds": 0.6884406516679596,
      "active_maintainers": 3,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7544118804925941,
      "health": 0.7270396697020266,
      "health_inputs": 4,
      "risk": 0.20592451607997372
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-utils-test-utils",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-utils-test-utils@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-utils-test-utils@1.0.0?type=jar"
      ],
      "name": "plc4j-utils-test-utils",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:23Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:31.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 10.35541522172656,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.47353601421117275,
      "health": 0.5726092345930607,
      "health_inputs": 4,
      "risk": 0.20238491956146443
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-eip",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-eip@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-eip@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-eip",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:20Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:31.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 10.539098399223137,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.47005909796157663,
      "health": 0.5726092345930607,
      "health_inputs": 4,
      "risk": 0.2008989176642937
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-canopen",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-canopen@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-canopen@1.0.0?type=bundle",
        "pkg:maven/org.apache.plc4x/plc4j-driver-canopen@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-canopen",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:57Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 10.819960155772907,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.46484828900054853,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.19867186849075766
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-code-generation-protocol-base-mspec",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-code-generation-protocol-base-mspec@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-code-generation-protocol-base-mspec@1.0.0?type=jar"
      ],
      "name": "plc4x-code-generation-protocol-base-mspec",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:23Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 11.568941525092853,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.451535706731116,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.1929821936947255
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-java",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-java@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-java@1.0.0?type=jar"
      ],
      "name": "plc4x-code-generation-language-java",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:58Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:42.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 11.694330707084864,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4493848029519584,
      "health": 0.57260926366037,
      "health_inputs": 4,
      "risk": 0.19206290183347702
    },
    {
      "key": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api",
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5",
      "source_purls": [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"
      ],
      "name": "jakarta.xml.bind-api",
      "ecosystem": "maven",
      "version": "4.0.5",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-02-06T09:38:20Z",
      "repository_url": "https://github.com/jakartaee/jaxb-api",
      "source_repo": "github.com/jakartaee/jaxb-api",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-02-06T09:38:20.000Z",
      "latest_release_version": "4.0.5",
      "rankings_average": 12.299580467193335,
      "archived": false,
      "dds": 0.4971428571428571,
      "active_maintainers": 0,
      "governance_files": 3,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.4392925425312033,
      "health": 0.5675624855726958,
      "health_inputs": 4,
      "risk": 0.18996657519864435
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-ab-eth",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-ab-eth@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-ab-eth@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-ab-eth",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:04Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 12.764446037489513,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4318482293286543,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.18456794755470796
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-knxnetip",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-knxnetip@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-knxnetip@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-knxnetip",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:30Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:24:01.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 12.764446037489513,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4318482293286543,
      "health": 0.5726099480633804,
      "health_inputs": 4,
      "risk": 0.18456763716151078
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-utils-raw-sockets",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-utils-raw-sockets@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-utils-raw-sockets@1.0.0?type=jar"
      ],
      "name": "plc4j-utils-raw-sockets",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:50Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 12.801890098008789,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.431259587516725,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.18431636747704602
    },
    {
      "key": "pkg:maven/org.apache.groovy/groovy",
      "purl": "pkg:maven/org.apache.groovy/groovy@5.1.1",
      "source_purls": [
        "pkg:maven/org.apache.groovy/groovy@5.1.1?type=jar"
      ],
      "name": "groovy",
      "ecosystem": "maven",
      "version": "5.1.1",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-24T02:50:14Z",
      "repository_url": "https://github.com/apache/groovy",
      "source_repo": "github.com/apache/groovy",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-23T02:56:29.000Z",
      "latest_release_version": "6.0.0",
      "rankings_average": 1.8579386070369481,
      "archived": false,
      "dds": 0.7305844283192783,
      "active_maintainers": 1,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7724651838771619,
      "health": 0.7614756038234222,
      "health_inputs": 4,
      "risk": 0.18425179155172922
    },
    {
      "key": "pkg:maven/org.apache.plc4x.plugins/plc4x-code-generation-types-base",
      "purl": "pkg:maven/org.apache.plc4x.plugins/plc4x-code-generation-types-base@1.9.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x.plugins/plc4x-code-generation-types-base@1.9.0?type=jar"
      ],
      "name": "plc4x-code-generation-types-base",
      "ecosystem": "maven",
      "version": "1.9.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-02T02:23:02Z",
      "repository_url": "https://github.com/apache/plc4x-build-tools",
      "source_repo": "github.com/apache/plc4x-build-tools",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-08-02T02:23:02.000Z",
      "latest_release_version": "1.9.0",
      "rankings_average": 24.548977201045325,
      "archived": false,
      "dds": 0.5936599423631124,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.29783040924873383,
      "health": 0.38203369941961657,
      "health_inputs": 4,
      "risk": 0.18404915620378168
    },
    {
      "key": "pkg:maven/commons-io/commons-io",
      "purl": "pkg:maven/commons-io/commons-io@2.22.0",
      "source_purls": [
        "pkg:maven/commons-io/commons-io@2.22.0?type=jar"
      ],
      "name": "commons-io",
      "ecosystem": "maven",
      "version": "2.22.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-04-19T12:01:24Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-parent.git",
      "source_repo": "github.com/apache/commons-parent",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-04-19T12:01:24.000Z",
      "latest_release_version": "2.22.0",
      "rankings_average": 0.0016697389864016457,
      "archived": false,
      "dds": 0.7598799399699849,
      "active_maintainers": 2,
      "governance_files": 3,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.99963850423494,
      "health": 0.816374462181727,
      "health_inputs": 4,
      "risk": 0.1835591579639948
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-firmata",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-firmata@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-firmata@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-firmata",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:44Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:43.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 12.99172081009921,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.42829970000755535,
      "health": 0.5726092663028527,
      "health_inputs": 4,
      "risk": 0.18305132302849716
    },
    {
      "key": "pkg:maven/commons-codec/commons-codec",
      "purl": "pkg:maven/commons-codec/commons-codec@1.22.1",
      "source_purls": [
        "pkg:maven/commons-codec/commons-codec@1.22.1?type=jar"
      ],
      "name": "commons-codec",
      "ecosystem": "maven",
      "version": "1.22.1",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-07-27T00:12:48Z",
      "repository_url": "https://github.com/apache/commons-codec",
      "source_repo": "github.com/apache/commons-codec",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-10-12T01:54:25.000Z",
      "latest_release_version": "1.23.0",
      "rankings_average": 6.17671928411418,
      "archived": false,
      "dds": 0.3926209537069265,
      "active_maintainers": 1,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5729597207205153,
      "health": 0.6813127941082675,
      "health_inputs": 4,
      "risk": 0.1825949324849284
    },
    {
      "key": "pkg:maven/org.apache.groovy/groovy-xml",
      "purl": "pkg:maven/org.apache.groovy/groovy-xml@5.1.1",
      "source_purls": [
        "pkg:maven/org.apache.groovy/groovy-xml@5.1.1?type=jar"
      ],
      "name": "groovy-xml",
      "ecosystem": "maven",
      "version": "5.1.1",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-24T02:47:43Z",
      "repository_url": "https://github.com/apache/groovy",
      "source_repo": "github.com/apache/groovy",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-23T02:56:18.000Z",
      "latest_release_version": "6.0.0",
      "rankings_average": 2.241928540680155,
      "archived": false,
      "dds": 0.7305844283192783,
      "active_maintainers": 1,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7451489344560062,
      "health": 0.7614755747561128,
      "health_inputs": 4,
      "risk": 0.17773622131221384
    },
    {
      "key": "pkg:maven/org.apache.plc4x.plugins/plc4x-code-generation-language-base",
      "purl": "pkg:maven/org.apache.plc4x.plugins/plc4x-code-generation-language-base@1.9.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x.plugins/plc4x-code-generation-language-base@1.9.0?type=jar"
      ],
      "name": "plc4x-code-generation-language-base",
      "ecosystem": "maven",
      "version": "1.9.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-02T02:23:06Z",
      "repository_url": "https://github.com/apache/plc4x-build-tools",
      "source_repo": "github.com/apache/plc4x-build-tools",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-08-02T02:23:06.000Z",
      "latest_release_version": "1.9.0",
      "rankings_average": 25.896138095381133,
      "archived": false,
      "dds": 0.5936599423631124,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.28669626306378804,
      "health": 0.3820337099895472,
      "health_inputs": 4,
      "risk": 0.1771686260453899
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-mock",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-mock@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-mock@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-mock",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:53Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 14.372803812231577,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.40790279429600385,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.17433388962155055
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-base-freemarker",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-base-freemarker@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-base-freemarker@1.0.0?type=jar"
      ],
      "name": "plc4x-code-generation-language-base-freemarker",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:29Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 14.372803812231577,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.40790279429600385,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.17433388962155055
    },
    {
      "key": "pkg:maven/org.apache.plc4x.plugins/plc4x-code-generation-protocol-base",
      "purl": "pkg:maven/org.apache.plc4x.plugins/plc4x-code-generation-protocol-base@1.9.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x.plugins/plc4x-code-generation-protocol-base@1.9.0?type=jar"
      ],
      "name": "plc4x-code-generation-protocol-base",
      "ecosystem": "maven",
      "version": "1.9.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-02T02:23:05Z",
      "repository_url": "https://github.com/apache/plc4x-build-tools",
      "source_repo": "github.com/apache/plc4x-build-tools",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-08-02T02:23:05.000Z",
      "latest_release_version": "1.9.0",
      "rankings_average": 26.50621289037077,
      "archived": false,
      "dds": 0.5936599423631124,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.28183632684192494,
      "health": 0.38203370734706454,
      "health_inputs": 4,
      "risk": 0.17416535003342537
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-text",
      "purl": "pkg:maven/org.apache.commons/commons-text@1.15.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar"
      ],
      "name": "commons-text",
      "ecosystem": "maven",
      "version": "1.15.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-12-04T15:57:28Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-text.git",
      "source_repo": "github.com/apache/commons-text",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2025-12-04T15:57:25.000Z",
      "latest_release_version": "1.15.0",
      "rankings_average": 0.032192567657823724,
      "archived": false,
      "dds": 0.603321033210332,
      "active_maintainers": 3,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9931344704641122,
      "health": 0.8295552607116684,
      "health_inputs": 4,
      "risk": 0.16927454589651086
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-can",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-can@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-can@1.0.0?type=bundle",
        "pkg:maven/org.apache.plc4x/plc4j-driver-can@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-can",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:50Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 15.283545302376242,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.39543179921295657,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.169003901421712
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-code-generation-protocol-test",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-code-generation-protocol-test@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-code-generation-protocol-test@1.0.0?type=jar"
      ],
      "name": "plc4x-code-generation-protocol-test",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:47Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:31.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 15.291733581100292,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.395322868227325,
      "health": 0.5726092345930607,
      "health_inputs": 4,
      "risk": 0.16895734323454303
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-s7",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-s7@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-s7@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-s7",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:31Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 15.515922674168326,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3923614961071018,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.167691682211043
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-knxnetip",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-knxnetip@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-knxnetip@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-knxnetip",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:43Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 16.680765649871358,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3775942899480257,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.16138031458974922
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-utils-test-generator",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-utils-test-generator@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-utils-test-generator@1.0.0?type=jar"
      ],
      "name": "plc4j-utils-test-generator",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:16Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:30.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 16.680765649871358,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3775942899480257,
      "health": 0.572609231950578,
      "health_inputs": 4,
      "risk": 0.16138031359196284
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-simulated",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-simulated@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-simulated@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-simulated",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:30Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:31.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 16.680765649871358,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3775942899480257,
      "health": 0.5726092345930607,
      "health_inputs": 4,
      "risk": 0.16138031259417648
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-bacnetip",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-bacnetip@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-bacnetip@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-bacnetip",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:18Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:41.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 16.680765649871358,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3775942899480257,
      "health": 0.5726092610178873,
      "health_inputs": 4,
      "risk": 0.1613803026163128
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-plc4x",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-plc4x@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-plc4x@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-plc4x",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:24Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 16.6818001617799,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3775816123004432,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.16137489628017837
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-modbus",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-modbus@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-modbus@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-modbus",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:45Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 16.691158754536477,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3774669591167239,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.1613258945676263
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-plc4x",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-plc4x@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-plc4x@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-plc4x",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:33Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.137642783489675,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.34940142344087255,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.14933094364524305
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-osgi",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-osgi@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-osgi@1.0.0?type=jar"
      ],
      "name": "plc4j-osgi",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:52Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.137642783489675,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.34940142344087255,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.14933094364524305
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-cs",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-cs@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-cs@1.0.0?type=jar"
      ],
      "name": "plc4x-code-generation-language-cs",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:24Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.137642783489675,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.34940142344087255,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.14933094364524305
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-c-bus",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-c-bus@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-c-bus@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-c-bus",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:29Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.137642783489675,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.34940142344087255,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.14933094364524305
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-opcua",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-opcua@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-opcua@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-opcua",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:52Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.137642783489675,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.34940142344087255,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.14933094364524305
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-profinet",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-profinet@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-profinet@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-profinet",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:25Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.137642783489675,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.34940142344087255,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.14933094364524305
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-ads",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-ads@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-ads@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-ads",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:14Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:30.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.137642783489675,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.34940142344087255,
      "health": 0.572609231950578,
      "health_inputs": 4,
      "risk": 0.14933094272195585
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-df1",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-df1@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-df1@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-df1",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:07Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:30.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.137642783489675,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.34940142344087255,
      "health": 0.572609231950578,
      "health_inputs": 4,
      "risk": 0.14933094272195585
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-genericcan",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-genericcan@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-genericcan@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-genericcan",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:16Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:30.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.137642783489675,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.34940142344087255,
      "health": 0.572609231950578,
      "health_inputs": 4,
      "risk": 0.14933094272195585
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-canopen",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-canopen@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-canopen@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-canopen",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:03Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:30.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.1381816580037,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3493956252814229,
      "health": 0.572609231950578,
      "health_inputs": 4,
      "risk": 0.14932846464213537
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-socketcan",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-socketcan@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-socketcan@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-socketcan",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:22Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.14409092638463,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3493320531601578,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.14930129542750525
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-firmata",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-firmata@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-firmata@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-firmata",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:36Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.14419104793219,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3493309762096263,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.1493008351487876
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-ab-eth",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-ab-eth@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-ab-eth@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-ab-eth",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:23Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:32.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.14419104793219,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3493309762096263,
      "health": 0.5726092372355434,
      "health_inputs": 4,
      "risk": 0.14930083237948444
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-eip",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-eip@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-eip@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-eip",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:51Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:30.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 19.147542066778257,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3492949342934796,
      "health": 0.572609231950578,
      "health_inputs": 4,
      "risk": 0.14928543024346264
    },
    {
      "key": "pkg:maven/org.apache.commons/commons-lang3",
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.20.0",
      "source_purls": [
        "pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"
      ],
      "name": "commons-lang3",
      "ecosystem": "maven",
      "version": "3.20.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-11-12T20:08:11Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/commons-lang.git",
      "source_repo": "github.com/apache/commons-lang",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-09-30T02:08:31.000Z",
      "latest_release_version": "3.21.0",
      "rankings_average": 0.0017363928575483336,
      "archived": false,
      "dds": 0.7746743486973948,
      "active_maintainers": 2,
      "governance_files": 3,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.9996240862911424,
      "health": 0.8574219857021556,
      "health_inputs": 4,
      "risk": 0.1425244172676882
    },
    {
      "key": "pkg:maven/org.junit.jupiter/junit-jupiter-api",
      "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3",
      "source_purls": [
        "pkg:maven/org.junit.jupiter/junit-jupiter-api@6.1.3?type=jar"
      ],
      "name": "junit-jupiter-api",
      "ecosystem": "maven",
      "version": "6.1.3",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-08T02:31:39Z",
      "repository_url": "https://github.com/junit-team/junit-framework",
      "source_repo": "github.com/junit-team/junit-framework",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-08-08T02:31:39.000Z",
      "latest_release_version": "6.1.3",
      "rankings_average": 1.834756579803582,
      "archived": false,
      "dds": 0.6591469862530843,
      "active_maintainers": 4,
      "governance_files": 2,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.7742299324171662,
      "health": 0.8164433562360128,
      "health_inputs": 4,
      "risk": 0.14211504789611365
    },
    {
      "key": "pkg:maven/org.junit.platform/junit-platform-commons",
      "purl": "pkg:maven/org.junit.platform/junit-platform-commons@6.1.3",
      "source_purls": [
        "pkg:maven/org.junit.platform/junit-platform-commons@6.1.3?type=jar"
      ],
      "name": "junit-platform-commons",
      "ecosystem": "maven",
      "version": "6.1.3",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-08T02:31:41Z",
      "repository_url": "https://github.com/junit-team/junit-framework",
      "source_repo": "github.com/junit-team/junit-framework",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-08-08T02:31:41.000Z",
      "latest_release_version": "6.1.3",
      "rankings_average": 2.503045603911197,
      "archived": false,
      "dds": 0.6591469862530843,
      "active_maintainers": 4,
      "governance_files": 2,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.7283640247126613,
      "health": 0.8164433615209781,
      "health_inputs": 4,
      "risk": 0.13369605196530734
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-go",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-go@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-go@1.0.0?type=jar"
      ],
      "name": "plc4x-code-generation-language-go",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:22Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 23.429156363563557,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.30754195037679055,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.13144059119162801
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j",
      "purl": "pkg:maven/org.apache.plc4x/plc4j@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j@1.0.0?type=pom"
      ],
      "name": "plc4j",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:31Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:31.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 23.429156363563557,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.30754195037679055,
      "health": 0.5726092345930607,
      "health_inputs": 4,
      "risk": 0.13144058956627946
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-c",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-c@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-c@1.0.0?type=jar"
      ],
      "name": "plc4x-code-generation-language-c",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:32Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:24:02.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 23.429156363563557,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.30754195037679055,
      "health": 0.5726099507058631,
      "health_inputs": 4,
      "risk": 0.13144036933155154
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4net",
      "purl": "pkg:maven/org.apache.plc4x/plc4net@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4net@1.0.0?type=pom"
      ],
      "name": "plc4net",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:32Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 24.848616481040445,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.2953039760042572,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.1262101938928432
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-mqtt",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-mqtt@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-mqtt@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-mqtt",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:30Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:31.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 24.848616481040445,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.2953039760042572,
      "health": 0.5726092345930607,
      "health_inputs": 4,
      "risk": 0.12621019233217193
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-plc4x-api",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-plc4x-api@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-plc4x-api@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-plc4x-api",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:32Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:31.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 24.848616481040445,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.2953039760042572,
      "health": 0.5726092345930607,
      "health_inputs": 4,
      "risk": 0.12621019233217193
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-tools",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-tools@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-tools@1.0.0?type=pom"
      ],
      "name": "plc4j-tools",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:33Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 25.15810498732953,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.29272506043309654,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.1251079891793355
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports@1.0.0?type=pom"
      ],
      "name": "plc4j-transports",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:31Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 25.15810498732953,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.29272506043309654,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.1251079891793355
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-utils",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-utils@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-utils@1.0.0?type=pom"
      ],
      "name": "plc4j-utils",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:49Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 25.15810498732953,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.29272506043309654,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.1251079891793355
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols@1.0.0?type=pom"
      ],
      "name": "plc4x-protocols",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:47Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 25.15810498732953,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.29272506043309654,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.1251079891793355
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-drivers",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-drivers@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-drivers@1.0.0?type=pom"
      ],
      "name": "plc4j-drivers",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:30Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:30.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 25.15810498732953,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.29272506043309654,
      "health": 0.572609231950578,
      "health_inputs": 4,
      "risk": 0.1251079884058146
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-code-generation",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-code-generation@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-code-generation@1.0.0?type=pom"
      ],
      "name": "plc4x-code-generation",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:50Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:20:00.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 25.15810498732953,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.29272506043309654,
      "health": 0.572609311225058,
      "health_inputs": 4,
      "risk": 0.12510796520018766
    },
    {
      "key": "pkg:maven/org.apache.maven/maven-artifact",
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.9.16",
      "source_purls": [
        "pkg:maven/org.apache.maven/maven-artifact@3.9.16?type=jar"
      ],
      "name": "maven-artifact",
      "ecosystem": "maven",
      "version": "3.9.16",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-05-13T21:37:33Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/maven.git",
      "source_repo": "github.com/apache/maven",
      "repository_source": "gitbox_mirror",
      "latest_release_at": "2026-10-02T02:17:43.000Z",
      "latest_release_version": "3.10.0",
      "rankings_average": 1.6578504448184659,
      "archived": false,
      "dds": 0.8029802658074909,
      "active_maintainers": 10,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.7881923800075883,
      "health": 0.864956544634677,
      "health_inputs": 4,
      "risk": 0.10644022248884248
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4c",
      "purl": "pkg:maven/org.apache.plc4x/plc4c@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4c@1.0.0?type=pom"
      ],
      "name": "plc4c",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:31Z",
      "repository_url": "https://gitbox.apache.org/repos/asf/plc4x.git",
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-08T02:19:29.000Z",
      "latest_release_version": "1.0.0",
      "rankings_average": 40.41990116431883,
      "archived": false,
      "dds": 0.6555076923076923,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.19313884519516145,
      "health": 0.5726092293080953,
      "health_inputs": 4,
      "risk": 0.08254575989850452
    },
    {
      "key": "pkg:maven/com.fasterxml.woodstox/woodstox-core",
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.2",
      "source_purls": [
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.2?type=jar"
      ],
      "name": "woodstox-core",
      "ecosystem": "maven",
      "version": "7.2.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-08-04T01:02:20Z",
      "repository_url": "https://github.com/FasterXML/woodstox",
      "source_repo": "github.com/fasterxml/woodstox",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-09-30T02:09:23.000Z",
      "latest_release_version": "7.3.0",
      "rankings_average": 8.890936589176793,
      "archived": false,
      "dds": null,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5034541712588237,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/com.palantir.javapoet/javapoet",
      "purl": "pkg:maven/com.palantir.javapoet/javapoet@0.17.0",
      "source_purls": [
        "pkg:maven/com.palantir.javapoet/javapoet@0.17.0?type=jar"
      ],
      "name": "javapoet",
      "ecosystem": "maven",
      "version": "0.17.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-06-26T15:41:16Z",
      "repository_url": "https://github.com/palantir/javapoet",
      "source_repo": "github.com/palantir/javapoet",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-09-16T02:32:49.000Z",
      "latest_release_version": "0.20.0",
      "rankings_average": 42.58059071729957,
      "archived": false,
      "dds": null,
      "active_maintainers": 1,
      "governance_files": 0,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.18212062492621905,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/jakarta.activation/jakarta.activation-api",
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4",
      "source_purls": [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ],
      "name": "jakarta.activation-api",
      "ecosystem": "maven",
      "version": "2.1.4",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-09-11T11:54:14Z",
      "repository_url": "https://github.com/jakartaee/jaf-api",
      "source_repo": "github.com/jakartaee/jaf-api",
      "repository_source": "deps.dev",
      "latest_release_at": "2025-09-11T11:54:14.000Z",
      "latest_release_version": "2.1.4",
      "rankings_average": 13.436794842274924,
      "archived": false,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": 2,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.42151453353097434,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/net.lingala.zip4j/zip4j",
      "purl": "pkg:maven/net.lingala.zip4j/zip4j@2.11.6",
      "source_purls": [
        "pkg:maven/net.lingala.zip4j/zip4j@2.11.6?type=jar"
      ],
      "name": "zip4j",
      "ecosystem": "maven",
      "version": "2.11.6",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-02-11T18:54:59Z",
      "repository_url": "https://github.com/srikanth-lingala/zip4j",
      "source_repo": "github.com/srikanth-lingala/zip4j",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-02-11T18:54:59.000Z",
      "latest_release_version": "2.11.6",
      "rankings_average": 4.395038492726927,
      "archived": false,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.6347918266872508,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-all",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-all@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-all@1.0.0?type=pom"
      ],
      "name": "plc4j-driver-all",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:33Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-iec-60870",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-iec-60870@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-iec-60870@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-iec-60870",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:29Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-slmp",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-slmp@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-slmp@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-slmp",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:55Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-driver-umas",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-driver-umas@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-driver-umas@1.0.0?type=jar"
      ],
      "name": "plc4j-driver-umas",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:12Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi-buffers",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi-buffers@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi-buffers@1.0.0?type=pom"
      ],
      "name": "plc4j-spi-buffers",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:31Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-api",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-api@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-api@1.0.0?type=jar"
      ],
      "name": "plc4j-spi-buffers-api",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:26Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-ascii-box",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-ascii-box@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-ascii-box@1.0.0?type=jar"
      ],
      "name": "plc4j-spi-buffers-ascii-box",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:52Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-byte",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-byte@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-byte@1.0.0?type=jar"
      ],
      "name": "plc4j-spi-buffers-byte",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:38Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-xml",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-xml@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi-buffers-xml@1.0.0?type=jar"
      ],
      "name": "plc4j-spi-buffers-xml",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:31Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi-config",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi-config@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi-config@1.0.0?type=jar"
      ],
      "name": "plc4j-spi-config",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:17Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi-drivers",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi-drivers@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi-drivers@1.0.0?type=jar"
      ],
      "name": "plc4j-spi-drivers",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:53Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi-fields",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi-fields@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi-fields@1.0.0?type=jar"
      ],
      "name": "plc4j-spi-fields",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:35Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi-utils",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi-utils@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi-utils@1.0.0?type=jar"
      ],
      "name": "plc4j-spi-utils",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:17Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-spi-values",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-spi-values@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-spi-values@1.0.0?type=jar"
      ],
      "name": "plc4j-spi-values",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:30Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-tools-capture-replay",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-tools-capture-replay@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-tools-capture-replay@1.0.0?type=jar"
      ],
      "name": "plc4j-tools-capture-replay",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:29Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-tools-connection-cache",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-tools-connection-cache@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-tools-connection-cache@1.0.0?type=jar"
      ],
      "name": "plc4j-tools-connection-cache",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:41Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-tools-event-pump",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-tools-event-pump@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-tools-event-pump@1.0.0?type=jar"
      ],
      "name": "plc4j-tools-event-pump",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:54Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-tools-opm",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-tools-opm@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-tools-opm@1.0.0?type=jar"
      ],
      "name": "plc4j-tools-opm",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:29Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-api",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-api@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-api@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-api",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:38Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-can",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-can@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-can@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-can",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:00Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-can-socketcan",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-can-socketcan@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-can-socketcan@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-can-socketcan",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:29Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-can-virtualcan",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-can-virtualcan@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-can-virtualcan@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-can-virtualcan",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:53Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-cotp",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-cotp@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-cotp@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-cotp",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:24Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-pcap-replay",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-pcap-replay@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-pcap-replay@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-pcap-replay",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:29Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-raw-socket",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-raw-socket@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-raw-socket@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-raw-socket",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:30Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-serial",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-serial@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-serial@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-serial",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:31Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-tcp",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-tcp@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-tcp@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-tcp",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:30Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-test",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-test@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-test@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-test",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:49Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-tls",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-tls@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-tls@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-tls",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:30Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-transports-udp",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-transports-udp@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-transports-udp@1.0.0?type=jar"
      ],
      "name": "plc4j-transports-udp",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:20Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-utils-audit-log",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-utils-audit-log@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-utils-audit-log@1.0.0?type=pom"
      ],
      "name": "plc4j-utils-audit-log",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:50Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-utils-audit-log-api",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-utils-audit-log-api@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-utils-audit-log-api@1.0.0?type=jar"
      ],
      "name": "plc4j-utils-audit-log-api",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:41Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-utils-audit-log-impl",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-utils-audit-log-impl@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-utils-audit-log-impl@1.0.0?type=jar"
      ],
      "name": "plc4j-utils-audit-log-impl",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:29Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4j-utils-subscription-emulation",
      "purl": "pkg:maven/org.apache.plc4x/plc4j-utils-subscription-emulation@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4j-utils-subscription-emulation@1.0.0?type=jar"
      ],
      "name": "plc4j-utils-subscription-emulation",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:51Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4py",
      "purl": "pkg:maven/org.apache.plc4x/plc4py@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4py@1.0.0?type=pom"
      ],
      "name": "plc4py",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:33Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-code-generation-language@1.0.0?type=pom"
      ],
      "name": "plc4x-code-generation-language",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:51Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-python",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-python@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-code-generation-language-python@1.0.0?type=jar"
      ],
      "name": "plc4x-code-generation-language-python",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:53Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-cotp",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-cotp@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-cotp@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-cotp",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:23:42Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-iec-60870",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-iec-60870@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-iec-60870@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-iec-60870",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:35Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-open-protocol",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-open-protocol@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-open-protocol@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-open-protocol",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:49Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-slmp",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-slmp@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-slmp@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-slmp",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-08T02:19:30Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-protocols-umas",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-protocols-umas@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-protocols-umas@1.0.0?type=jar"
      ],
      "name": "plc4x-protocols-umas",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:27:51Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apache.plc4x/plc4x-website",
      "purl": "pkg:maven/org.apache.plc4x/plc4x-website@1.0.0",
      "source_purls": [
        "pkg:maven/org.apache.plc4x/plc4x-website@1.0.0?type=jar"
      ],
      "name": "plc4x-website",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-09-03T22:28:31Z",
      "repository_url": null,
      "source_repo": "github.com/apache/plc4x",
      "repository_source": "deps.dev",
      "latest_release_at": null,
      "latest_release_version": null,
      "rankings_average": null,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": null,
      "health": null,
      "health_inputs": 0,
      "risk": null
    },
    {
      "key": "pkg:maven/org.apiguardian/apiguardian-api",
      "purl": "pkg:maven/org.apiguardian/apiguardian-api@1.1.2",
      "source_purls": [
        "pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"
      ],
      "name": "apiguardian-api",
      "ecosystem": "maven",
      "version": "1.1.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2021-06-27T12:53:36Z",
      "repository_url": "https://github.com/apiguardian-team/apiguardian",
      "source_repo": "github.com/apiguardian-team/apiguardian",
      "repository_source": "deps.dev",
      "latest_release_at": "2021-06-27T12:53:35.000Z",
      "latest_release_version": "1.1.2",
      "rankings_average": 12.315935320075925,
      "archived": false,
      "dds": null,
      "active_maintainers": 1,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4390262501391524,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.codehaus.woodstox/stax2-api",
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0",
      "source_purls": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
      ],
      "name": "stax2-api",
      "ecosystem": "maven",
      "version": "4.3.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-03-31T20:24:13Z",
      "repository_url": "https://github.com/FasterXML/stax2-api",
      "source_repo": "github.com/fasterxml/stax2-api",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-10-10T02:28:26.000Z",
      "latest_release_version": "4.3.2",
      "rankings_average": 13.357684259008943,
      "archived": false,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 5,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.4227051541572602,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.dom4j/dom4j",
      "purl": "pkg:maven/org.dom4j/dom4j@2.2.0",
      "source_purls": [
        "pkg:maven/org.dom4j/dom4j@2.2.0?type=jar"
      ],
      "name": "dom4j",
      "ecosystem": "maven",
      "version": "2.2.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-06-30T10:26:51Z",
      "repository_url": "https://github.com/dom4j/dom4j",
      "source_repo": "github.com/dom4j/dom4j",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2025-06-30T10:26:51.000Z",
      "latest_release_version": "2.2.0",
      "rankings_average": 5.149395829370602,
      "archived": false,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.6064341480926074,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.jspecify/jspecify",
      "purl": "pkg:maven/org.jspecify/jspecify@1.0.0",
      "source_purls": [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ],
      "name": "jspecify",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2024-07-16T21:00:10Z",
      "repository_url": "https://github.com/jspecify/jspecify",
      "source_repo": "github.com/jspecify/jspecify",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-07-30T00:26:23.000Z",
      "latest_release_version": "1.0.1",
      "rankings_average": 14.978148496339609,
      "archived": false,
      "dds": null,
      "active_maintainers": 3,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3995341920748844,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.opentest4j/opentest4j",
      "purl": "pkg:maven/org.opentest4j/opentest4j@1.3.0",
      "source_purls": [
        "pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"
      ],
      "name": "opentest4j",
      "ecosystem": "maven",
      "version": "1.3.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2023-07-06T12:25:33Z",
      "repository_url": "https://github.com/ota4j-team/opentest4j",
      "source_repo": "github.com/ota4j-team/opentest4j",
      "repository_source": "deps.dev",
      "latest_release_at": "2023-07-06T12:25:33.000Z",
      "latest_release_version": "1.3.0",
      "rankings_average": 9.483745925469123,
      "archived": false,
      "dds": null,
      "active_maintainers": 1,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.49084188764096204,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.osgi/org.osgi.namespace.extender",
      "purl": "pkg:maven/org.osgi/org.osgi.namespace.extender@1.0.1",
      "source_purls": [
        "pkg:maven/org.osgi/org.osgi.namespace.extender@1.0.1?type=jar"
      ],
      "name": "org.osgi.namespace.extender",
      "ecosystem": "maven",
      "version": "1.0.1",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2019-07-25T10:44:03Z",
      "repository_url": "https://osgi.org/git/build.git",
      "source_repo": null,
      "repository_source": null,
      "latest_release_at": "2015-08-18T13:18:23.000Z",
      "latest_release_version": "1.0.1",
      "rankings_average": 4.5359015173509265,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.6292069898463857,
      "health": null,
      "health_inputs": 1,
      "risk": null
    },
    {
      "key": "pkg:maven/org.osgi/org.osgi.service.component.annotations",
      "purl": "pkg:maven/org.osgi/org.osgi.service.component.annotations@1.5.1",
      "source_purls": [
        "pkg:maven/org.osgi/org.osgi.service.component.annotations@1.5.1?type=jar"
      ],
      "name": "org.osgi.service.component.annotations",
      "ecosystem": "maven",
      "version": "1.5.1",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2022-12-20T14:55:43Z",
      "repository_url": "https://github.com/osgi/osgi",
      "source_repo": "github.com/osgi/osgi",
      "repository_source": "deps.dev",
      "latest_release_at": "2022-12-20T14:55:37.000Z",
      "latest_release_version": "1.5.1",
      "rankings_average": 12.263213940725235,
      "archived": false,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.43988584380567575,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.osgi/org.osgi.util.function",
      "purl": "pkg:maven/org.osgi/org.osgi.util.function@1.0.0",
      "source_purls": [
        "pkg:maven/org.osgi/org.osgi.util.function@1.0.0?type=jar"
      ],
      "name": "org.osgi.util.function",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2019-07-25T10:44:04Z",
      "repository_url": "https://github.com/osgi/osgi",
      "source_repo": "github.com/osgi/osgi",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2021-10-13T14:54:46.000Z",
      "latest_release_version": "1.2.0",
      "rankings_average": 12.17519252070576,
      "archived": false,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.44132862890812463,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.osgi/org.osgi.util.promise",
      "purl": "pkg:maven/org.osgi/org.osgi.util.promise@1.0.0",
      "source_purls": [
        "pkg:maven/org.osgi/org.osgi.util.promise@1.0.0?type=jar"
      ],
      "name": "org.osgi.util.promise",
      "ecosystem": "maven",
      "version": "1.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2019-07-25T10:44:14Z",
      "repository_url": "https://github.com/osgi/osgi",
      "source_repo": "github.com/osgi/osgi",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2022-12-20T14:57:12.000Z",
      "latest_release_version": "1.3.0",
      "rankings_average": 12.134210932071536,
      "archived": false,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.44200366203984043,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.osgi/osgi.annotation",
      "purl": "pkg:maven/org.osgi/osgi.annotation@8.1.0",
      "source_purls": [
        "pkg:maven/org.osgi/osgi.annotation@8.1.0?type=jar"
      ],
      "name": "osgi.annotation",
      "ecosystem": "maven",
      "version": "8.1.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2022-02-08T22:52:11Z",
      "repository_url": "https://github.com/osgi/osgi",
      "source_repo": "github.com/osgi/osgi",
      "repository_source": "deps.dev",
      "latest_release_at": "2022-02-08T22:52:06.000Z",
      "latest_release_version": "8.1.0",
      "rankings_average": 11.917198251083077,
      "archived": false,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": 1,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.44561369267164264,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.osgi/osgi.core",
      "purl": "pkg:maven/org.osgi/osgi.core@8.0.0",
      "source_purls": [
        "pkg:maven/org.osgi/osgi.core@8.0.0?type=jar"
      ],
      "name": "osgi.core",
      "ecosystem": "maven",
      "version": "8.0.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2020-12-08T00:57:02Z",
      "repository_url": "https://osgi.org/gitweb/build.git",
      "source_repo": null,
      "repository_source": null,
      "latest_release_at": "2020-12-07T23:04:08.000Z",
      "latest_release_version": "8.0.0",
      "rankings_average": 0.2339638267745986,
      "archived": null,
      "dds": null,
      "active_maintainers": null,
      "governance_files": null,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.9544472109689335,
      "health": null,
      "health_inputs": 1,
      "risk": null
    },
    {
      "key": "pkg:maven/org.pcap4j/pcap4j-core",
      "purl": "pkg:maven/org.pcap4j/pcap4j-core@1.8.2",
      "source_purls": [
        "pkg:maven/org.pcap4j/pcap4j-core@1.8.2?type=jar"
      ],
      "name": "pcap4j-core",
      "ecosystem": "maven",
      "version": "1.8.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2019-08-17T05:18:07Z",
      "repository_url": "https://github.com/kaitoy/pcap4j",
      "source_repo": "github.com/kaitoy/pcap4j",
      "repository_source": "deps.dev",
      "latest_release_at": "2019-08-17T05:18:08.000Z",
      "latest_release_version": "1.8.2",
      "rankings_average": 5.994253621519887,
      "archived": false,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5785399549992626,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.pcap4j/pcap4j-packetfactory-static",
      "purl": "pkg:maven/org.pcap4j/pcap4j-packetfactory-static@1.8.2",
      "source_purls": [
        "pkg:maven/org.pcap4j/pcap4j-packetfactory-static@1.8.2?type=jar"
      ],
      "name": "pcap4j-packetfactory-static",
      "ecosystem": "maven",
      "version": "1.8.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2019-08-17T05:18:14Z",
      "repository_url": "https://github.com/kaitoy/pcap4j",
      "source_repo": "github.com/kaitoy/pcap4j",
      "repository_source": "deps.dev",
      "latest_release_at": "2019-08-17T05:18:15.000Z",
      "latest_release_version": "1.8.2",
      "rankings_average": 6.128762926848802,
      "archived": false,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": 0,
      "maintained": 0,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5744124753276287,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.xmlunit/xmlunit-core",
      "purl": "pkg:maven/org.xmlunit/xmlunit-core@2.13.0",
      "source_purls": [
        "pkg:maven/org.xmlunit/xmlunit-core@2.13.0?type=jar"
      ],
      "name": "xmlunit-core",
      "ecosystem": "maven",
      "version": "2.13.0",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-07-31T14:29:52Z",
      "repository_url": "https://github.com/xmlunit/xmlunit",
      "source_repo": "github.com/xmlunit/xmlunit",
      "repository_source": "ecosyste.ms",
      "latest_release_at": "2026-09-19T03:12:25.000Z",
      "latest_release_version": "2.14.0",
      "rankings_average": 8.383602566053451,
      "archived": false,
      "dds": null,
      "active_maintainers": 1,
      "governance_files": 2,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.5148634255621527,
      "health": null,
      "health_inputs": 3,
      "risk": null
    },
    {
      "key": "pkg:maven/org.yaml/snakeyaml",
      "purl": "pkg:maven/org.yaml/snakeyaml@2.5",
      "source_purls": [
        "pkg:maven/org.yaml/snakeyaml@2.5?type=jar"
      ],
      "name": "snakeyaml",
      "ecosystem": "maven",
      "version": "2.5",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2025-08-31T12:20:24Z",
      "repository_url": "https://codeberg.org/snakeyaml/snakeyaml",
      "source_repo": "bitbucket.org/snakeyaml/snakeyaml",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-08-31T02:05:09.000Z",
      "latest_release_version": "2.7",
      "rankings_average": 0.0187678662071545,
      "archived": null,
      "dds": null,
      "active_maintainers": 0,
      "governance_files": null,
      "maintained": null,
      "scorecard_date": null,
      "criticality": 0.9959710861866854,
      "health": null,
      "health_inputs": 2,
      "risk": null
    },
    {
      "key": "pkg:maven/tel.schich/javacan-core",
      "purl": "pkg:maven/tel.schich/javacan-core@3.5.2",
      "source_purls": [
        "pkg:maven/tel.schich/javacan-core@3.5.2?type=jar"
      ],
      "name": "javacan-core",
      "ecosystem": "maven",
      "version": "3.5.2",
      "artifacts": [
        "apache-plc4x-1.0.0-source-release.zip"
      ],
      "advisory_status": "none",
      "advisories": [],
      "published_at": "2026-01-20T22:29:05Z",
      "repository_url": "https://github.com/pschichtel/JavaCAN",
      "source_repo": "github.com/pschichtel/javacan",
      "repository_source": "deps.dev",
      "latest_release_at": "2026-01-20T22:29:05.000Z",
      "latest_release_version": "3.5.2",
      "rankings_average": 23.39736787307486,
      "archived": false,
      "dds": null,
      "active_maintainers": 1,
      "governance_files": 0,
      "maintained": 10,
      "scorecard_date": "2026-08-24T00:00:00Z",
      "criticality": 0.3078240880668428,
      "health": null,
      "health_inputs": 3,
      "risk": null
    }
  ],
  "sources": {
    "Alpha-Omega heuristic": "https://github.com/alpha-omega-security/heatmap/tree/4ed37981",
    "ecosyste.ms packages": "https://packages.ecosyste.ms/api/v1",
    "ecosyste.ms repositories": "https://repos.ecosyste.ms/api/v1",
    "ecosyste.ms issues": "https://issues.ecosyste.ms/api/v1",
    "deps.dev and OpenSSF Scorecard": "https://api.deps.dev/v3alpha",
    "ecosyste.ms data licence": "https://creativecommons.org/licenses/by-sa/4.0/",
    "deps.dev terms": "https://docs.deps.dev/api/v3alpha/#terms"
  },
  "attribution": "Alpha-Omega maintenance heuristic, with missing inputs left unknown. Includes ecosyste.ms data under CC BY-SA 4.0 and deps.dev and OpenSSF Scorecard observations. ATR selected, normalised and combined records and calculated maintenance indicators. gitbox_mirror identifies an inferred Apache GitHub mirror, not verified repository identity."
}