{"id":357384,"url":"https://github.com/chocoteam/choco-solver","last_synced_at":"2026-06-21T22:00:45.870Z","repository":{"id":1784275,"uuid":"2708082","full_name":"chocoteam/choco-solver","owner":"chocoteam","description":"An open-source Java library for Constraint Programming","archived":false,"fork":false,"pushed_at":"2026-06-19T20:55:21.000Z","size":90115,"stargazers_count":770,"open_issues_count":81,"forks_count":157,"subscribers_count":46,"default_branch":"master","last_synced_at":"2026-06-19T21:05:25.275Z","etag":null,"topics":["constraint-optimisation-problem","constraint-programming","constraint-satisfaction-problem","constraint-solver","constraints","copr","csp","java","solver"],"latest_commit_sha":null,"homepage":"http://choco-solver.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/chocoteam.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2011-11-04T09:09:18.000Z","updated_at":"2026-06-11T22:01:06.000Z","dependencies_parsed_at":"2025-01-06T15:27:43.762Z","dependency_job_id":"6cc47a04-1180-41da-b188-15bb98f2dfa2","html_url":"https://github.com/chocoteam/choco-solver","commit_stats":{"total_commits":5302,"total_committers":42,"mean_commits":"126.23809523809524","dds":0.5360241418332705,"last_synced_commit":"aaa1ae7b9986e0371c83a4099a96eae256f20e70"},"previous_names":["chocoteam/choco3"],"tags_count":68,"template":false,"template_full_name":null,"purl":"pkg:github/chocoteam/choco-solver","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","download_url":"https://codeload.github.com/chocoteam/choco-solver/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/sbom","scorecard":{"id":278589,"data":{"date":"2025-08-11","repo":{"name":"github.com/chocoteam/choco-solver","commit":"f28bd85a132f236907135186338af88ab95d05bf"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-image.yml:1","Warn: no topLevel permission defined: .github/workflows/draft-pdf.yml:1","Warn: no topLevel permission defined: .github/workflows/maven-test.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-snapshot.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"SAST","score":10,"reason":"SAST tool detected: CodeQL","details":["Info: SAST configuration detected: CodeQL","Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 4-Clause \"Original\" or \"Old\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v5.0.0-beta.1 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563","Warn: release artifact v5.0.0-beta.1 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/publish-snapshot.yml:13"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-image.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-image.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:1","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:16: pin your Docker image by updating openjdk:10.0.1-10-jdk to openjdk:10.0.1-10-jdk@sha256:10ef69a22632121170edb5690f7df1a61d1222410624f311c44f593d0135a855","Warn: containerImage not pinned by hash: parsers/src/main/minizinc/docker/Dockerfile.dms:13","Warn: pipCommand not pinned by hash: examples/notebooks/binder/Dockerfile:30","Info:   0 out of  17 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T15:09:06.703Z","repository_id":1784275,"created_at":"2025-08-17T15:09:06.704Z","updated_at":"2025-08-17T15:09:06.704Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34627174,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-21T02:00:05.568Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"chocoteam","name":"chocoteam","uuid":"3829941","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/3829941?v=4","repositories_count":22,"last_synced_at":"2024-03-26T04:04:55.121Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/chocoteam","funding_links":[],"total_stars":722,"followers":8,"following":0,"created_at":"2022-11-03T04:35:35.212Z","updated_at":"2024-03-26T04:04:56.706Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam/repositories"},"packages":[{"id":4912384,"name":"org.choco-solver:choco-sat","ecosystem":"maven","description":"A SAT solver, used internally in choco-solver","homepage":"http://choco-solver.org/","licenses":"BSD 4-Clause License","normalized_licenses":["BSD-1-Clause"],"repository_url":"https://github.com/chocoteam/choco-solver","keywords_array":[],"namespace":"org.choco-solver","versions_count":6,"first_release_published_at":"2016-03-07T14:58:32.000Z","latest_release_published_at":"2020-12-11T14:05:41.000Z","latest_release_number":"4.10.6","last_synced_at":"2026-06-19T21:02:04.116Z","created_at":"2022-07-27T00:44:12.110Z","updated_at":"2026-06-19T21:02:04.117Z","registry_url":"https://central.sonatype.com/artifact/org.choco-solver/choco-sat/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.choco-solver/choco-sat/","metadata":{"distribution_repositories":["https://oss.sonatype.org/service/local/staging/deploy/maven2/","https://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":1784275,"uuid":"2708082","full_name":"chocoteam/choco-solver","owner":"chocoteam","description":"An open-source Java library for Constraint Programming","archived":false,"fork":false,"pushed_at":"2026-05-21T15:34:51.000Z","size":90121,"stargazers_count":768,"open_issues_count":78,"forks_count":156,"subscribers_count":46,"default_branch":"master","last_synced_at":"2026-05-26T02:48:27.880Z","etag":null,"topics":["constraint-optimisation-problem","constraint-programming","constraint-satisfaction-problem","constraint-solver","constraints","copr","csp","java","solver"],"latest_commit_sha":null,"homepage":"http://choco-solver.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/chocoteam.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2011-11-04T09:09:18.000Z","updated_at":"2026-05-22T19:23:00.000Z","dependencies_parsed_at":"2025-01-06T15:27:43.762Z","dependency_job_id":"6cc47a04-1180-41da-b188-15bb98f2dfa2","html_url":"https://github.com/chocoteam/choco-solver","commit_stats":{"total_commits":5302,"total_committers":42,"mean_commits":"126.23809523809524","dds":0.5360241418332705,"last_synced_commit":"aaa1ae7b9986e0371c83a4099a96eae256f20e70"},"previous_names":["chocoteam/choco3"],"tags_count":68,"template":false,"template_full_name":null,"purl":"pkg:github/chocoteam/choco-solver","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","download_url":"https://codeload.github.com/chocoteam/choco-solver/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/sbom","scorecard":{"id":278589,"data":{"date":"2025-08-11","repo":{"name":"github.com/chocoteam/choco-solver","commit":"f28bd85a132f236907135186338af88ab95d05bf"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-image.yml:1","Warn: no topLevel permission defined: .github/workflows/draft-pdf.yml:1","Warn: no topLevel permission defined: .github/workflows/maven-test.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-snapshot.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"SAST","score":10,"reason":"SAST tool detected: CodeQL","details":["Info: SAST configuration detected: CodeQL","Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 4-Clause \"Original\" or \"Old\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v5.0.0-beta.1 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563","Warn: release artifact v5.0.0-beta.1 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/publish-snapshot.yml:13"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-image.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-image.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:1","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:16: pin your Docker image by updating openjdk:10.0.1-10-jdk to openjdk:10.0.1-10-jdk@sha256:10ef69a22632121170edb5690f7df1a61d1222410624f311c44f593d0135a855","Warn: containerImage not pinned by hash: parsers/src/main/minizinc/docker/Dockerfile.dms:13","Warn: pipCommand not pinned by hash: examples/notebooks/binder/Dockerfile:30","Info:   0 out of  17 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T15:09:06.703Z","repository_id":1784275,"created_at":"2025-08-17T15:09:06.704Z","updated_at":"2025-08-17T15:09:06.704Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33512335,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T03:12:49.672Z","status":"ssl_error","status_checked_at":"2026-05-26T03:12:47.976Z","response_time":63,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"chocoteam","name":"chocoteam","uuid":"3829941","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/3829941?v=4","repositories_count":22,"last_synced_at":"2024-03-26T04:04:55.121Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/chocoteam","funding_links":[],"total_stars":722,"followers":8,"following":0,"created_at":"2022-11-03T04:35:35.212Z","updated_at":"2024-03-26T04:04:56.706Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-06-01T12:56:21.060Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":2,"rankings":{"downloads":null,"dependent_repos_count":16.11151600579845,"dependent_packages_count":23.154347634569643,"stargazers_count":14.134117138257743,"forks_count":17.07598849921112,"docker_downloads_count":4.7691032428060005,"average":15.049014504128593},"purl":"pkg:maven/org.choco-solver/choco-sat","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.choco-solver:choco-sat","docker_dependents_count":9,"docker_downloads_count":320,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.choco-solver:choco-sat","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.choco-solver:choco-sat/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T04:08:48.483Z","issues_count":84,"pull_requests_count":196,"avg_time_to_close_issue":11611424.293103449,"avg_time_to_close_pull_request":10269397.206666667,"issues_closed_count":58,"pull_requests_closed_count":150,"pull_request_authors_count":17,"issue_authors_count":32,"avg_comments_per_issue":1.6904761904761905,"avg_comments_per_pull_request":1.0102040816326532,"merged_pull_requests_count":81,"bot_issues_count":0,"bot_pull_requests_count":94,"past_year_issues_count":17,"past_year_pull_requests_count":78,"past_year_avg_time_to_close_issue":1080574.875,"past_year_avg_time_to_close_pull_request":1618966.810810811,"past_year_issues_closed_count":8,"past_year_pull_requests_closed_count":37,"past_year_pull_request_authors_count":8,"past_year_issue_authors_count":12,"past_year_avg_comments_per_issue":0.8235294117647058,"past_year_avg_comments_per_pull_request":0.6794871794871795,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":39,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/issues","maintainers":[{"login":"cprudhom","count":69,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"},{"login":"ArthurGodet","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"},{"login":"dimitri-justeau","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dimitri-justeau"},{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}],"active_maintainers":[{"login":"cprudhom","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"},{"login":"ArthurGodet","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"},{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-sat/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-sat/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-sat/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-sat/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-sat/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-sat/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608661,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5090074,"name":"org.choco-solver:choco-solver","ecosystem":"maven","description":"Open-source constraint solver.","homepage":"https://choco-solver.org/","licenses":"BSD-3-Clause.","normalized_licenses":["BSD-1-Clause"],"repository_url":"https://github.com/chocoteam/choco-solver","keywords_array":[],"namespace":"org.choco-solver","versions_count":42,"first_release_published_at":"2014-12-04T13:32:10.000Z","latest_release_published_at":"2026-05-21T12:18:50.000Z","latest_release_number":"6.0.1","last_synced_at":"2026-06-19T21:02:08.998Z","created_at":"2022-07-29T05:33:32.712Z","updated_at":"2026-06-19T21:02:08.999Z","registry_url":"https://central.sonatype.com/artifact/org.choco-solver/choco-solver/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.choco-solver/choco-solver/","metadata":{"distribution_repositories":["https://central.sonatype.com"]},"repo_metadata":{"id":1784275,"uuid":"2708082","full_name":"chocoteam/choco-solver","owner":"chocoteam","description":"An open-source Java library for Constraint Programming","archived":false,"fork":false,"pushed_at":"2026-05-21T15:34:51.000Z","size":90121,"stargazers_count":768,"open_issues_count":78,"forks_count":156,"subscribers_count":46,"default_branch":"master","last_synced_at":"2026-05-26T02:48:27.880Z","etag":null,"topics":["constraint-optimisation-problem","constraint-programming","constraint-satisfaction-problem","constraint-solver","constraints","copr","csp","java","solver"],"latest_commit_sha":null,"homepage":"http://choco-solver.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/chocoteam.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2011-11-04T09:09:18.000Z","updated_at":"2026-05-22T19:23:00.000Z","dependencies_parsed_at":"2025-01-06T15:27:43.762Z","dependency_job_id":"6cc47a04-1180-41da-b188-15bb98f2dfa2","html_url":"https://github.com/chocoteam/choco-solver","commit_stats":{"total_commits":5302,"total_committers":42,"mean_commits":"126.23809523809524","dds":0.5360241418332705,"last_synced_commit":"aaa1ae7b9986e0371c83a4099a96eae256f20e70"},"previous_names":["chocoteam/choco3"],"tags_count":68,"template":false,"template_full_name":null,"purl":"pkg:github/chocoteam/choco-solver","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","download_url":"https://codeload.github.com/chocoteam/choco-solver/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/sbom","scorecard":{"id":278589,"data":{"date":"2025-08-11","repo":{"name":"github.com/chocoteam/choco-solver","commit":"f28bd85a132f236907135186338af88ab95d05bf"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-image.yml:1","Warn: no topLevel permission defined: .github/workflows/draft-pdf.yml:1","Warn: no topLevel permission defined: .github/workflows/maven-test.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-snapshot.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"SAST","score":10,"reason":"SAST tool detected: CodeQL","details":["Info: SAST configuration detected: CodeQL","Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 4-Clause \"Original\" or \"Old\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v5.0.0-beta.1 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563","Warn: release artifact v5.0.0-beta.1 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/publish-snapshot.yml:13"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-image.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-image.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:1","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:16: pin your Docker image by updating openjdk:10.0.1-10-jdk to openjdk:10.0.1-10-jdk@sha256:10ef69a22632121170edb5690f7df1a61d1222410624f311c44f593d0135a855","Warn: containerImage not pinned by hash: parsers/src/main/minizinc/docker/Dockerfile.dms:13","Warn: pipCommand not pinned by hash: examples/notebooks/binder/Dockerfile:30","Info:   0 out of  17 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T15:09:06.703Z","repository_id":1784275,"created_at":"2025-08-17T15:09:06.704Z","updated_at":"2025-08-17T15:09:06.704Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33512335,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T03:12:49.672Z","status":"ssl_error","status_checked_at":"2026-05-26T03:12:47.976Z","response_time":63,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"chocoteam","name":"chocoteam","uuid":"3829941","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/3829941?v=4","repositories_count":22,"last_synced_at":"2024-03-26T04:04:55.121Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/chocoteam","funding_links":[],"total_stars":722,"followers":8,"following":0,"created_at":"2022-11-03T04:35:35.212Z","updated_at":"2024-03-26T04:04:56.706Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-06-01T12:56:20.273Z","dependent_packages_count":30,"downloads":null,"downloads_period":null,"dependent_repos_count":113,"rankings":{"downloads":null,"dependent_repos_count":1.7875877976309655,"dependent_packages_count":2.1806248548385807,"stargazers_count":14.134117138257743,"forks_count":17.07598849921112,"docker_downloads_count":4.7691032428060005,"average":7.989484306548883},"purl":"pkg:maven/org.choco-solver/choco-solver","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.choco-solver:choco-solver","docker_dependents_count":10,"docker_downloads_count":371,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.choco-solver:choco-solver","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.choco-solver:choco-solver/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T04:08:48.483Z","issues_count":84,"pull_requests_count":196,"avg_time_to_close_issue":11611424.293103449,"avg_time_to_close_pull_request":10269397.206666667,"issues_closed_count":58,"pull_requests_closed_count":150,"pull_request_authors_count":17,"issue_authors_count":32,"avg_comments_per_issue":1.6904761904761905,"avg_comments_per_pull_request":1.0102040816326532,"merged_pull_requests_count":81,"bot_issues_count":0,"bot_pull_requests_count":94,"past_year_issues_count":17,"past_year_pull_requests_count":78,"past_year_avg_time_to_close_issue":1080574.875,"past_year_avg_time_to_close_pull_request":1618966.810810811,"past_year_issues_closed_count":8,"past_year_pull_requests_closed_count":37,"past_year_pull_request_authors_count":8,"past_year_issue_authors_count":12,"past_year_avg_comments_per_issue":0.8235294117647058,"past_year_avg_comments_per_pull_request":0.6794871794871795,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":39,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/issues","maintainers":[{"login":"cprudhom","count":69,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"},{"login":"ArthurGodet","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"},{"login":"dimitri-justeau","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dimitri-justeau"},{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}],"active_maintainers":[{"login":"cprudhom","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"},{"login":"ArthurGodet","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"},{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-solver/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-solver/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-solver/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-solver/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-solver/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-solver/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608661,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4912400,"name":"org.choco-solver:choco-parsers","ecosystem":"maven","description":"Provide parsers from FlatZinc, XCSP3 and MSP to Choco-solver.","homepage":"https://choco-solver.org/","licenses":"BSD-3-Clause.","normalized_licenses":["BSD-1-Clause"],"repository_url":"https://github.com/chocoteam/choco-solver","keywords_array":[],"namespace":"org.choco-solver","versions_count":26,"first_release_published_at":"2014-12-09T14:33:24.000Z","latest_release_published_at":"2026-05-21T12:18:50.000Z","latest_release_number":"6.0.1","last_synced_at":"2026-06-19T21:02:17.769Z","created_at":"2022-07-27T00:44:15.308Z","updated_at":"2026-06-19T21:02:17.769Z","registry_url":"https://central.sonatype.com/artifact/org.choco-solver/choco-parsers/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.choco-solver/choco-parsers/","metadata":{"distribution_repositories":["https://central.sonatype.com"]},"repo_metadata":{"id":1784275,"uuid":"2708082","full_name":"chocoteam/choco-solver","owner":"chocoteam","description":"An open-source Java library for Constraint Programming","archived":false,"fork":false,"pushed_at":"2026-05-21T15:34:51.000Z","size":90121,"stargazers_count":768,"open_issues_count":78,"forks_count":156,"subscribers_count":46,"default_branch":"master","last_synced_at":"2026-05-26T02:48:27.880Z","etag":null,"topics":["constraint-optimisation-problem","constraint-programming","constraint-satisfaction-problem","constraint-solver","constraints","copr","csp","java","solver"],"latest_commit_sha":null,"homepage":"http://choco-solver.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/chocoteam.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2011-11-04T09:09:18.000Z","updated_at":"2026-05-22T19:23:00.000Z","dependencies_parsed_at":"2025-01-06T15:27:43.762Z","dependency_job_id":"6cc47a04-1180-41da-b188-15bb98f2dfa2","html_url":"https://github.com/chocoteam/choco-solver","commit_stats":{"total_commits":5302,"total_committers":42,"mean_commits":"126.23809523809524","dds":0.5360241418332705,"last_synced_commit":"aaa1ae7b9986e0371c83a4099a96eae256f20e70"},"previous_names":["chocoteam/choco3"],"tags_count":68,"template":false,"template_full_name":null,"purl":"pkg:github/chocoteam/choco-solver","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","download_url":"https://codeload.github.com/chocoteam/choco-solver/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/sbom","scorecard":{"id":278589,"data":{"date":"2025-08-11","repo":{"name":"github.com/chocoteam/choco-solver","commit":"f28bd85a132f236907135186338af88ab95d05bf"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-image.yml:1","Warn: no topLevel permission defined: .github/workflows/draft-pdf.yml:1","Warn: no topLevel permission defined: .github/workflows/maven-test.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-snapshot.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"SAST","score":10,"reason":"SAST tool detected: CodeQL","details":["Info: SAST configuration detected: CodeQL","Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 4-Clause \"Original\" or \"Old\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v5.0.0-beta.1 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563","Warn: release artifact v5.0.0-beta.1 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/publish-snapshot.yml:13"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-image.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-image.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:1","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:16: pin your Docker image by updating openjdk:10.0.1-10-jdk to openjdk:10.0.1-10-jdk@sha256:10ef69a22632121170edb5690f7df1a61d1222410624f311c44f593d0135a855","Warn: containerImage not pinned by hash: parsers/src/main/minizinc/docker/Dockerfile.dms:13","Warn: pipCommand not pinned by hash: examples/notebooks/binder/Dockerfile:30","Info:   0 out of  17 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T15:09:06.703Z","repository_id":1784275,"created_at":"2025-08-17T15:09:06.704Z","updated_at":"2025-08-17T15:09:06.704Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33512335,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T03:12:49.672Z","status":"ssl_error","status_checked_at":"2026-05-26T03:12:47.976Z","response_time":63,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"chocoteam","name":"chocoteam","uuid":"3829941","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/3829941?v=4","repositories_count":22,"last_synced_at":"2024-03-26T04:04:55.121Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/chocoteam","funding_links":[],"total_stars":722,"followers":8,"following":0,"created_at":"2022-11-03T04:35:35.212Z","updated_at":"2024-03-26T04:04:56.706Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-06-01T12:56:15.766Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":5,"rankings":{"downloads":null,"dependent_repos_count":10.913135406572108,"dependent_packages_count":23.154347634569643,"stargazers_count":14.134117138257743,"forks_count":17.07598849921112,"docker_downloads_count":4.7691032428060005,"average":14.009338384283321},"purl":"pkg:maven/org.choco-solver/choco-parsers","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.choco-solver:choco-parsers","docker_dependents_count":10,"docker_downloads_count":371,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.choco-solver:choco-parsers","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.choco-solver:choco-parsers/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T04:08:48.483Z","issues_count":84,"pull_requests_count":196,"avg_time_to_close_issue":11611424.293103449,"avg_time_to_close_pull_request":10269397.206666667,"issues_closed_count":58,"pull_requests_closed_count":150,"pull_request_authors_count":17,"issue_authors_count":32,"avg_comments_per_issue":1.6904761904761905,"avg_comments_per_pull_request":1.0102040816326532,"merged_pull_requests_count":81,"bot_issues_count":0,"bot_pull_requests_count":94,"past_year_issues_count":17,"past_year_pull_requests_count":78,"past_year_avg_time_to_close_issue":1080574.875,"past_year_avg_time_to_close_pull_request":1618966.810810811,"past_year_issues_closed_count":8,"past_year_pull_requests_closed_count":37,"past_year_pull_request_authors_count":8,"past_year_issue_authors_count":12,"past_year_avg_comments_per_issue":0.8235294117647058,"past_year_avg_comments_per_pull_request":0.6794871794871795,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":39,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/issues","maintainers":[{"login":"cprudhom","count":69,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"},{"login":"ArthurGodet","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"},{"login":"dimitri-justeau","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dimitri-justeau"},{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}],"active_maintainers":[{"login":"cprudhom","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"},{"login":"ArthurGodet","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"},{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-parsers/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-parsers/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-parsers/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-parsers/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-parsers/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco-parsers/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608661,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4912388,"name":"org.choco-solver:examples","ecosystem":"maven","description":"Choco-solver in practice","homepage":"http://choco-solver.org/","licenses":"BSD 4-Clause License","normalized_licenses":["BSD-1-Clause"],"repository_url":"https://github.com/chocoteam/choco-solver","keywords_array":[],"namespace":"org.choco-solver","versions_count":17,"first_release_published_at":"2020-07-03T13:07:02.000Z","latest_release_published_at":"2025-01-27T15:26:37.000Z","latest_release_number":"4.10.18","last_synced_at":"2026-06-19T21:02:32.591Z","created_at":"2022-07-27T00:44:12.611Z","updated_at":"2026-06-19T21:02:32.591Z","registry_url":"https://central.sonatype.com/artifact/org.choco-solver/examples/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.choco-solver/examples/","metadata":{"distribution_repositories":["https://oss.sonatype.org/service/local/staging/deploy/maven2/","https://maven.pkg.github.com/chocoteam/choco-solver","https://oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":1784275,"uuid":"2708082","full_name":"chocoteam/choco-solver","owner":"chocoteam","description":"An open-source Java library for Constraint Programming","archived":false,"fork":false,"pushed_at":"2026-05-21T15:34:51.000Z","size":90121,"stargazers_count":768,"open_issues_count":78,"forks_count":156,"subscribers_count":46,"default_branch":"master","last_synced_at":"2026-05-26T02:48:27.880Z","etag":null,"topics":["constraint-optimisation-problem","constraint-programming","constraint-satisfaction-problem","constraint-solver","constraints","copr","csp","java","solver"],"latest_commit_sha":null,"homepage":"http://choco-solver.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/chocoteam.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2011-11-04T09:09:18.000Z","updated_at":"2026-05-22T19:23:00.000Z","dependencies_parsed_at":"2025-01-06T15:27:43.762Z","dependency_job_id":"6cc47a04-1180-41da-b188-15bb98f2dfa2","html_url":"https://github.com/chocoteam/choco-solver","commit_stats":{"total_commits":5302,"total_committers":42,"mean_commits":"126.23809523809524","dds":0.5360241418332705,"last_synced_commit":"aaa1ae7b9986e0371c83a4099a96eae256f20e70"},"previous_names":["chocoteam/choco3"],"tags_count":68,"template":false,"template_full_name":null,"purl":"pkg:github/chocoteam/choco-solver","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","download_url":"https://codeload.github.com/chocoteam/choco-solver/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/sbom","scorecard":{"id":278589,"data":{"date":"2025-08-11","repo":{"name":"github.com/chocoteam/choco-solver","commit":"f28bd85a132f236907135186338af88ab95d05bf"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-image.yml:1","Warn: no topLevel permission defined: .github/workflows/draft-pdf.yml:1","Warn: no topLevel permission defined: .github/workflows/maven-test.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-snapshot.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"SAST","score":10,"reason":"SAST tool detected: CodeQL","details":["Info: SAST configuration detected: CodeQL","Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 4-Clause \"Original\" or \"Old\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v5.0.0-beta.1 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563","Warn: release artifact v5.0.0-beta.1 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/publish-snapshot.yml:13"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-image.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-image.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:1","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:16: pin your Docker image by updating openjdk:10.0.1-10-jdk to openjdk:10.0.1-10-jdk@sha256:10ef69a22632121170edb5690f7df1a61d1222410624f311c44f593d0135a855","Warn: containerImage not pinned by hash: parsers/src/main/minizinc/docker/Dockerfile.dms:13","Warn: pipCommand not pinned by hash: examples/notebooks/binder/Dockerfile:30","Info:   0 out of  17 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T15:09:06.703Z","repository_id":1784275,"created_at":"2025-08-17T15:09:06.704Z","updated_at":"2025-08-17T15:09:06.704Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33512335,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T03:12:49.672Z","status":"ssl_error","status_checked_at":"2026-05-26T03:12:47.976Z","response_time":63,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"chocoteam","name":"chocoteam","uuid":"3829941","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/3829941?v=4","repositories_count":22,"last_synced_at":"2024-03-26T04:04:55.121Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/chocoteam","funding_links":[],"total_stars":722,"followers":8,"following":0,"created_at":"2022-11-03T04:35:35.212Z","updated_at":"2024-03-26T04:04:56.706Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-06-01T12:56:18.367Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.770897237728352,"dependent_packages_count":50.147163645974324,"stargazers_count":14.134117138257743,"forks_count":17.07598849921112,"docker_downloads_count":null,"average":25.532041630292884},"purl":"pkg:maven/org.choco-solver/examples","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.choco-solver:examples","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.choco-solver:examples","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.choco-solver:examples/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T04:08:48.483Z","issues_count":84,"pull_requests_count":196,"avg_time_to_close_issue":11611424.293103449,"avg_time_to_close_pull_request":10269397.206666667,"issues_closed_count":58,"pull_requests_closed_count":150,"pull_request_authors_count":17,"issue_authors_count":32,"avg_comments_per_issue":1.6904761904761905,"avg_comments_per_pull_request":1.0102040816326532,"merged_pull_requests_count":81,"bot_issues_count":0,"bot_pull_requests_count":94,"past_year_issues_count":17,"past_year_pull_requests_count":78,"past_year_avg_time_to_close_issue":1080574.875,"past_year_avg_time_to_close_pull_request":1618966.810810811,"past_year_issues_closed_count":8,"past_year_pull_requests_closed_count":37,"past_year_pull_request_authors_count":8,"past_year_issue_authors_count":12,"past_year_avg_comments_per_issue":0.8235294117647058,"past_year_avg_comments_per_pull_request":0.6794871794871795,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":39,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/issues","maintainers":[{"login":"cprudhom","count":69,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"},{"login":"ArthurGodet","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"},{"login":"dimitri-justeau","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dimitri-justeau"},{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}],"active_maintainers":[{"login":"cprudhom","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"},{"login":"ArthurGodet","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"},{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:examples/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:examples/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:examples/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:examples/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:examples/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:examples/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608661,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4912412,"name":"org.choco-solver:choco","ecosystem":"maven","description":"A Free and Open-Source library dedicated to Constraint Programming.","homepage":"https://choco-solver.org/","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/chocoteam/choco-solver","keywords_array":[],"namespace":"org.choco-solver","versions_count":27,"first_release_published_at":"2014-12-04T13:30:45.000Z","latest_release_published_at":"2026-05-21T12:18:50.000Z","latest_release_number":"6.0.1","last_synced_at":"2026-06-19T21:02:58.335Z","created_at":"2022-07-27T00:44:21.359Z","updated_at":"2026-06-19T21:02:58.335Z","registry_url":"https://central.sonatype.com/artifact/org.choco-solver/choco/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.choco-solver/choco/","metadata":{"distribution_repositories":["https://central.sonatype.com"]},"repo_metadata":{"id":1784275,"uuid":"2708082","full_name":"chocoteam/choco-solver","owner":"chocoteam","description":"An open-source Java library for Constraint Programming","archived":false,"fork":false,"pushed_at":"2026-05-21T15:34:51.000Z","size":90121,"stargazers_count":768,"open_issues_count":78,"forks_count":156,"subscribers_count":46,"default_branch":"master","last_synced_at":"2026-05-26T02:48:27.880Z","etag":null,"topics":["constraint-optimisation-problem","constraint-programming","constraint-satisfaction-problem","constraint-solver","constraints","copr","csp","java","solver"],"latest_commit_sha":null,"homepage":"http://choco-solver.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/chocoteam.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2011-11-04T09:09:18.000Z","updated_at":"2026-05-22T19:23:00.000Z","dependencies_parsed_at":"2025-01-06T15:27:43.762Z","dependency_job_id":"6cc47a04-1180-41da-b188-15bb98f2dfa2","html_url":"https://github.com/chocoteam/choco-solver","commit_stats":{"total_commits":5302,"total_committers":42,"mean_commits":"126.23809523809524","dds":0.5360241418332705,"last_synced_commit":"aaa1ae7b9986e0371c83a4099a96eae256f20e70"},"previous_names":["chocoteam/choco3"],"tags_count":68,"template":false,"template_full_name":null,"purl":"pkg:github/chocoteam/choco-solver","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","download_url":"https://codeload.github.com/chocoteam/choco-solver/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/sbom","scorecard":{"id":278589,"data":{"date":"2025-08-11","repo":{"name":"github.com/chocoteam/choco-solver","commit":"f28bd85a132f236907135186338af88ab95d05bf"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.4,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 0/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/docker-image.yml:1","Warn: no topLevel permission defined: .github/workflows/draft-pdf.yml:1","Warn: no topLevel permission defined: .github/workflows/maven-test.yml:1","Warn: no topLevel permission defined: .github/workflows/publish-snapshot.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"SAST","score":10,"reason":"SAST tool detected: CodeQL","details":["Info: SAST configuration detected: CodeQL","Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 4-Clause \"Original\" or \"Old\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v5.0.0-beta.1 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 not signed: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563","Warn: release artifact v5.0.0-beta.1 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/200758925","Warn: release artifact v4.10.18 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/196965575","Warn: release artifact v4.10.17 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/176334467","Warn: release artifact v4.10.16 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/175197766","Warn: release artifact v4.10.15 does not have provenance: https://api.github.com/repos/chocoteam/choco-solver/releases/174136563"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/publish-snapshot.yml:13"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-image.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-image.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/docker-image.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/draft-pdf.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/draft-pdf.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/maven-test.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/maven-test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-snapshot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/chocoteam/choco-solver/publish-snapshot.yml/master?enable=pin","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:1","Warn: containerImage not pinned by hash: examples/notebooks/binder/Dockerfile:16: pin your Docker image by updating openjdk:10.0.1-10-jdk to openjdk:10.0.1-10-jdk@sha256:10ef69a22632121170edb5690f7df1a61d1222410624f311c44f593d0135a855","Warn: containerImage not pinned by hash: parsers/src/main/minizinc/docker/Dockerfile.dms:13","Warn: pipCommand not pinned by hash: examples/notebooks/binder/Dockerfile:30","Info:   0 out of  17 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   3 containerImage dependencies pinned","Info:   0 out of   1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T15:09:06.703Z","repository_id":1784275,"created_at":"2025-08-17T15:09:06.704Z","updated_at":"2025-08-17T15:09:06.704Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33512335,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T03:12:49.672Z","status":"ssl_error","status_checked_at":"2026-05-26T03:12:47.976Z","response_time":63,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"chocoteam","name":"chocoteam","uuid":"3829941","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/3829941?v=4","repositories_count":22,"last_synced_at":"2024-03-26T04:04:55.121Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/chocoteam","funding_links":[],"total_stars":722,"followers":8,"following":0,"created_at":"2022-11-03T04:35:35.212Z","updated_at":"2024-03-26T04:04:56.706Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chocoteam/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-06-01T12:56:18.386Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":11.988691881870695,"forks_count":12.005946994701075,"average":26.208610301302357},"purl":"pkg:maven/org.choco-solver/choco","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.choco-solver:choco","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.choco-solver:choco","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.choco-solver:choco/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-22T04:08:48.483Z","issues_count":84,"pull_requests_count":196,"avg_time_to_close_issue":11611424.293103449,"avg_time_to_close_pull_request":10269397.206666667,"issues_closed_count":58,"pull_requests_closed_count":150,"pull_request_authors_count":17,"issue_authors_count":32,"avg_comments_per_issue":1.6904761904761905,"avg_comments_per_pull_request":1.0102040816326532,"merged_pull_requests_count":81,"bot_issues_count":0,"bot_pull_requests_count":94,"past_year_issues_count":17,"past_year_pull_requests_count":78,"past_year_avg_time_to_close_issue":1080574.875,"past_year_avg_time_to_close_pull_request":1618966.810810811,"past_year_issues_closed_count":8,"past_year_pull_requests_closed_count":37,"past_year_pull_request_authors_count":8,"past_year_issue_authors_count":12,"past_year_avg_comments_per_issue":0.8235294117647058,"past_year_avg_comments_per_pull_request":0.6794871794871795,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":39,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/issues","maintainers":[{"login":"cprudhom","count":69,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"},{"login":"ArthurGodet","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"},{"login":"dimitri-justeau","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dimitri-justeau"},{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}],"active_maintainers":[{"login":"cprudhom","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"},{"login":"ArthurGodet","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"},{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.choco-solver:choco/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608661,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":282510,"full_name":"chocoteam/choco-solver","default_branch":"master","total_commits":5908,"total_committers":42,"total_bot_commits":46,"total_bot_committers":2,"mean_commits":140.66666666666666,"dds":0.3530805687203792,"past_year_total_commits":227,"past_year_total_committers":4,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":56.75,"past_year_dds":0.2951541850220264,"last_synced_at":"2026-06-19T21:08:14.791Z","last_synced_commit":"f210dc0aac61ceb0f8dc38d31d49cdbe785276c8","created_at":"2023-03-08T15:14:15.892Z","updated_at":"2026-06-19T21:05:32.333Z","committers":[{"name":"cprudhom","email":"cprudhom@mines-nantes.fr","login":"cprudhom","count":3822},{"name":"Jean-Guillaume Fages","email":"jg.fages@gmail.com","login":"jgFages","count":1442},{"name":"Dimitri","email":"dimitri.justeau@gmail.com","login":"dimitri-justeau","count":162},{"name":"cprudhom","email":"cprudhom@031d3fc5-a07f-0410-aa2d-fafe74bc0a1b","login":null,"count":153},{"name":"Arthur Godet","email":"arth.godet@gmail.com","login":"ArthurGodet","count":60},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":44},{"name":"JLiangWaterloo","email":"paradoxical.reasoning@gmail.com","login":"JLiangWaterloo","count":36},{"name":"jfages07","email":"jfages07@031d3fc5-a07f-0410-aa2d-fafe74bc0a1b","login":null,"count":28},{"name":"xavier lorca","email":"xavier.lorca@emn.fr","login":"xlorca","count":23},{"name":"Alexandre Lebrun","email":"alex.3385@hotmail.fr","login":"xela85","count":22},{"name":"jussien","email":"jussien@031d3fc5-a07f-0410-aa2d-fafe74bc0a1b","login":null,"count":21},{"name":"Arnaud Malapert","email":"arnaud.malapert@unice.fr","login":"arnaud-m","count":17},{"name":"Fabien Hermenier","email":"fabien.hermenier@nutanix.com","login":"fhermeni","count":9},{"name":"Choco Team","email":"choco@mines-nantes.fr","login":"chocotrust","count":8},{"name":"njussien","email":"njussien@gmail.com","login":"njussien","count":7},{"name":"Guillaume Le Louët","email":"guillaume.lelouet@gmail.com","login":"glelouet","count":7},{"name":"Mohamed Wahbi","email":"wahbi.med@gmail.com","login":"mwahbi","count":5},{"name":"Jani Simomaa","email":"jani.simomaa@gmail.com","login":"jsimomaa","count":5},{"name":"Mehmet Hakan Satman","email":"mhsatman@gmail.com","login":"jbytecode","count":4},{"name":"João Pedro Schmitt","email":"schmittjoaopedro@gmail.com","login":"schmittjoaopedro","count":4},{"name":"xlorca","email":"xlorca@031d3fc5-a07f-0410-aa2d-fafe74bc0a1b","login":null,"count":3},{"name":"dependabot-preview[bot]","email":"27856297+dependabot-preview[bot]","login":"dependabot-preview[bot]","count":2},{"name":"Albert Hendriks","email":"alberthendriks@gmail.com","login":"alberthendriks","count":2},{"name":"Arnaud Letort","email":"aletor11@portinfo51.info.emn.fr","login":null,"count":2},{"name":"Fabien Hermenier","email":"fabien.hermenier@unice.fr","login":null,"count":2},{"name":"Olivier Pirson","email":"olivier_pirson_opi@yahoo.fr","login":null,"count":2},{"name":"Rodolfo Jordao","email":"45004351+Rojods","login":"Rojods","count":1},{"name":"Titouan Lorieul","email":"titouan.lorieul@supagro.fr","login":null,"count":1},{"name":"Dmitrij Zherebjatjew","email":"dzherebjatjew@thumbtack.net","login":null,"count":1},{"name":"ZhangYang(Nesime)","email":"zy_nesime@icloud.com","login":"zy-nesime","count":1},{"name":"geokoodi","email":"geokoodi@gmail.com","login":"geokoodi","count":1},{"name":"gregy4","email":"gregor.jan@gmail.com","login":"gregy4","count":1},{"name":"Robert Hilbrich","email":"Robert.Hilbrich@dlr.de","login":"RobertHilbrich","count":1},{"name":"Paul King","email":"paulk@asert.com.au","login":"paulk-asert","count":1},{"name":"NelusBreizh","email":"67392099+NelusBreizh","login":"NelusBreizh","count":1},{"name":"Magnus Rattfeldt","email":"magnus@timoptim.com","login":"mrtimoptim","count":1},{"name":"Magnus Rattfeldt","email":"magnus.rattfeldt@tomologic.com","login":"mr-tl","count":1},{"name":"Lukas Bernwald","email":"lukas.bernwald@rwth-aachen.de","login":"bernwaldl","count":1},{"name":"Jonathan Leitschuh","email":"Jonathan.Leitschuh@gmail.com","login":"JLLeitschuh","count":1},{"name":"HelgeS","email":"HelgeS","login":"HelgeS","count":1},{"name":"Gabriel Homsi","email":"gabrielhomsi@gmail.com","login":"gabrielhomsi","count":1},{"name":"Erik Stevenson","email":"eriknstevenson@gmail.com","login":"eriknstevenson","count":1}],"past_year_committers":[{"name":"cprudhom","email":"charles.prudhomme@imt-atlantique.fr","login":"cprudhom","count":160},{"name":"Jean-Guillaume Fages","email":"jg.fages@cosling.com","login":"jgFages","count":54},{"name":"Arthur Godet","email":"arth.godet@gmail.com","login":"ArthurGodet","count":12},{"name":"NelusBreizh","email":"67392099+NelusBreizh","login":"NelusBreizh","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-21T00:00:11.101Z","repositories_count":6265409,"commits_count":874965802,"contributors_count":35085046,"owners_count":1169736,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"chocoteam/choco-solver","html_url":"https://github.com/chocoteam/choco-solver","last_synced_at":"2026-06-19T21:01:27.547Z","status":"active","issues_count":93,"pull_requests_count":219,"avg_time_to_close_issue":11269122.633333333,"avg_time_to_close_pull_request":9184033.471264368,"issues_closed_count":60,"pull_requests_closed_count":174,"pull_request_authors_count":19,"issue_authors_count":36,"avg_comments_per_issue":1.8172043010752688,"avg_comments_per_pull_request":1.0182648401826484,"merged_pull_requests_count":101,"bot_issues_count":0,"bot_pull_requests_count":94,"past_year_issues_count":11,"past_year_pull_requests_count":31,"past_year_avg_time_to_close_issue":1342374.5,"past_year_avg_time_to_close_pull_request":687306.52,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":25,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":9,"past_year_avg_comments_per_issue":2.3636363636363638,"past_year_avg_comments_per_pull_request":1.2903225806451613,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":21,"created_at":"2023-05-16T08:13:53.061Z","updated_at":"2026-06-19T21:01:27.547Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/chocoteam%2Fchoco-solver/issues","issue_labels_count":{"table":{"bug":62,"good first issue":2,"help wanted":1,"feature":1}},"pull_request_labels_count":{"table":{"dependencies":94,"feature":20,"bug":11,"java":9}},"issue_author_associations_count":{"table":{"NONE":53,"MEMBER":21,"CONTRIBUTOR":14,"COLLABORATOR":5}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":132,"MEMBER":54,"COLLABORATOR":21,"NONE":12}},"issue_authors":{"table":{"cprudhom":21,"matsc-at-sics-se":14,"Holt59":5,"IgnaceBleukx":4,"chocotrust":4,"dimitri-justeau":4,"YoanThomasPhd":3,"arnaud-m":3,"jsimomaa":3,"o-fir":2,"SYury":2,"ptal":2,"zy-nesime":2,"axkr":2,"fhermeni":1,"bourreauEric":1,"verenya":1,"io7m":1,"ArthurGodet":1,"rasros":1,"miguelneto0":1,"niemisto":1,"ib31":1,"kevin-delmas":1,"Samoy10E":1,"mapalomwanza449-hash":1,"mstrojny":1,"hugbelval":1,"FrankRaiser":1,"jpd236":1,"Youcef1810":1,"jgFages":1,"gadavidd":1,"Hedieh-Haddad":1,"oriming":1,"ThomSerg":1}},"pull_request_authors":{"table":{"dependabot[bot]":93,"cprudhom":54,"jgFages":27,"ArthurGodet":17,"fhermeni":4,"gadavidd":4,"jsimomaa":4,"dimitri-justeau":3,"paulk-asert":2,"YoanThomasPhd":2,"tlorieul":1,"zy-nesime":1,"JLLeitschuh":1,"rasros":1,"Krizhnikov":1,"glelouet":1,"NelusBreizh":1,"gjasper":1,"dependabot-preview[bot]":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-21T00:00:11.438Z","repositories_count":14828151,"issues_count":33038261,"pull_requests_count":108920394,"authors_count":11313908,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"bug":9}},"past_year_pull_request_labels_count":{"table":{"feature":6,"bug":1,"java":1}},"past_year_issue_author_associations_count":{"table":{"NONE":9,"COLLABORATOR":1,"MEMBER":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":11,"MEMBER":10,"COLLABORATOR":5,"NONE":5}},"past_year_issue_authors":{"table":{"YoanThomasPhd":3,"axkr":1,"cprudhom":1,"dimitri-justeau":1,"hugbelval":1,"jpd236":1,"kevin-delmas":1,"mapalomwanza449-hash":1,"rasros":1}},"past_year_pull_request_authors":{"table":{"jgFages":11,"cprudhom":10,"ArthurGodet":4,"gadavidd":2,"YoanThomasPhd":2,"NelusBreizh":1,"rasros":1}},"maintainers":[{"table":{"login":"cprudhom","count":75,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"}},{"table":{"login":"ArthurGodet","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"}},{"table":{"login":"dimitri-justeau","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dimitri-justeau"}},{"table":{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}}],"active_maintainers":[{"table":{"login":"cprudhom","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cprudhom"}},{"table":{"login":"ArthurGodet","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ArthurGodet"}},{"table":{"login":"dimitri-justeau","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dimitri-justeau"}},{"table":{"login":"NelusBreizh","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NelusBreizh"}}]}},"events":{"total":{"ReleaseEvent":2,"DeleteEvent":33,"PullRequestEvent":74,"ForkEvent":13,"IssuesEvent":28,"WatchEvent":50,"IssueCommentEvent":77,"PushEvent":120,"PullRequestReviewEvent":88,"PullRequestReviewCommentEvent":91,"CreateEvent":47},"last_year":{"DeleteEvent":7,"PullRequestEvent":11,"ForkEvent":4,"IssuesEvent":4,"WatchEvent":17,"IssueCommentEvent":23,"PushEvent":58,"PullRequestReviewEvent":35,"PullRequestReviewCommentEvent":39,"CreateEvent":11}},"keywords":["constraint-optimisation-problem","constraint-programming","constraint-satisfaction-problem","constraint-solver","constraints","copr","csp","java","solver"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T13:45:11.287Z","updated_at":"2023-01-13T13:45:11.287Z","repository_link":"https://github.com/chocoteam/choco-solver/blob/master/.github/workflows/codeql-analysis.yml","dependencies":[{"id":6876145636,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6876145637,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6876145638,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6876145639,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/docker-image.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T13:45:11.464Z","updated_at":"2023-01-13T13:45:11.464Z","repository_link":"https://github.com/chocoteam/choco-solver/blob/master/.github/workflows/docker-image.yml","dependencies":[{"id":6876146003,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6876146004,"package_name":"docker/build-push-action","ecosystem":"actions","requirements":"v1.1.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/draft-pdf.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T13:45:11.873Z","updated_at":"2023-01-13T13:45:11.873Z","repository_link":"https://github.com/chocoteam/choco-solver/blob/master/.github/workflows/draft-pdf.yml","dependencies":[{"id":6876147057,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6876147060,"package_name":"openjournals/openjournals-draft-action","ecosystem":"actions","requirements":"master","direct":true,"kind":"composite","optional":false},{"id":6876147061,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/maven-test.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T13:45:12.639Z","updated_at":"2023-01-13T13:45:12.639Z","repository_link":"https://github.com/chocoteam/choco-solver/blob/master/.github/workflows/maven-test.yml","dependencies":[{"id":6876148586,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6876148588,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6876148590,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/publish-snapshot.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T13:45:12.882Z","updated_at":"2023-01-13T13:45:12.882Z","repository_link":"https://github.com/chocoteam/choco-solver/blob/master/.github/workflows/publish-snapshot.yml","dependencies":[{"id":6876149299,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6876149300,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"docker","filepath":"examples/notebooks/binder/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-01-13T13:45:13.102Z","updated_at":"2023-01-13T13:45:13.102Z","repository_link":"https://github.com/chocoteam/choco-solver/blob/master/examples/notebooks/binder/Dockerfile","dependencies":[{"id":6876149477,"package_name":"gradle","ecosystem":"docker","requirements":"4.8.1-jdk10","direct":true,"kind":"build","optional":false},{"id":6876149478,"package_name":"openjdk","ecosystem":"docker","requirements":"10.0.1-10-jdk","direct":true,"kind":"build","optional":false}]},{"ecosystem":"maven","filepath":"examples/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-13T13:45:13.404Z","updated_at":"2023-01-13T13:45:13.404Z","repository_link":"https://github.com/chocoteam/choco-solver/blob/master/examples/pom.xml","dependencies":[{"id":6876152520,"package_name":"org.choco-solver:choco-solver","ecosystem":"maven","requirements":"4.10.11-SNAPSHOT","direct":true,"kind":"runtime","optional":false},{"id":6876152522,"package_name":"org.choco-solver:choco-parsers","ecosystem":"maven","requirements":"4.10.11-SNAPSHOT","direct":true,"kind":"runtime","optional":false},{"id":6876152523,"package_name":"args4j:args4j","ecosystem":"maven","requirements":"2.33","direct":true,"kind":"compile","optional":false}]},{"ecosystem":"maven","filepath":"parsers/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-13T13:45:13.730Z","updated_at":"2023-01-13T13:45:13.730Z","repository_link":"https://github.com/chocoteam/choco-solver/blob/master/parsers/pom.xml","dependencies":[{"id":6876154109,"package_name":"org.choco-solver:choco-solver","ecosystem":"maven","requirements":"4.10.11-SNAPSHOT","direct":true,"kind":"runtime","optional":false},{"id":6876154110,"package_name":"args4j:args4j","ecosystem":"maven","requirements":"2.33","direct":true,"kind":"runtime","optional":false},{"id":6876154111,"package_name":"org.xcsp:xcsp3-tools","ecosystem":"maven","requirements":"2.1","direct":true,"kind":"runtime","optional":false},{"id":6876154112,"package_name":"org.antlr:antlr4-runtime","ecosystem":"maven","requirements":"4.9.3","direct":true,"kind":"runtime","optional":false},{"id":6876154114,"package_name":"org.antlr:antlr4","ecosystem":"maven","requirements":"4.9.3","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-13T13:45:14.114Z","updated_at":"2023-01-13T13:45:14.114Z","repository_link":"https://github.com/chocoteam/choco-solver/blob/master/pom.xml","dependencies":[{"id":6876156607,"package_name":"net.sf.trove4j:trove4j","ecosystem":"maven","requirements":"3.0.3","direct":true,"kind":"runtime","optional":false},{"id":6876156608,"package_name":"org.testng:testng","ecosystem":"maven","requirements":"7.5","direct":true,"kind":"test","optional":false},{"id":6876156609,"package_name":"org.choco-solver:choco-solver","ecosystem":"maven","requirements":"4.10.11-SNAPSHOT","direct":true,"kind":"runtime","optional":false},{"id":6876156610,"package_name":"org.choco-solver:choco-parsers","ecosystem":"maven","requirements":"4.10.11-SNAPSHOT","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"solver/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-13T13:45:14.698Z","updated_at":"2023-01-13T13:45:14.698Z","repository_link":"https://github.com/chocoteam/choco-solver/blob/master/solver/pom.xml","dependencies":[{"id":6876158295,"package_name":"dk.brics.automaton:automaton","ecosystem":"maven","requirements":"1.11-8","direct":true,"kind":"runtime","optional":false},{"id":6876158296,"package_name":"org.jgrapht:jgrapht-core","ecosystem":"maven","requirements":"1.4.0","direct":true,"kind":"runtime","optional":false},{"id":6876158305,"package_name":"org.knowm.xchart:xchart","ecosystem":"maven","requirements":"3.8.3","direct":true,"kind":"runtime","optional":false}]}],"score":17.611775446204142,"created_at":"2025-04-11T10:19:42.308Z","updated_at":"2026-06-21T22:00:45.961Z","avatar_url":"https://github.com/chocoteam.png","language":"Java","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/357384","html_url":"https://summary.ecosyste.ms/projects/357384"}