{"id":360308,"url":"https://github.com/googleapis/google-auth-library-java","last_synced_at":"2026-06-21T16:01:07.686Z","repository":{"id":27205911,"uuid":"30676648","full_name":"googleapis/google-auth-library-java","owner":"googleapis","description":"Open source Auth client library for Java","archived":false,"fork":false,"pushed_at":"2026-03-26T19:02:58.000Z","size":5852,"stargazers_count":472,"open_issues_count":65,"forks_count":273,"subscribers_count":79,"default_branch":"main","last_synced_at":"2026-03-26T19:13:31.832Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://developers.google.com/identity","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/googleapis.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-02-12T00:06:15.000Z","updated_at":"2026-03-26T19:02:35.000Z","dependencies_parsed_at":"2023-01-17T00:01:25.481Z","dependency_job_id":"c8d63db3-d290-4667-8a40-af6ae56c0aa6","html_url":"https://github.com/googleapis/google-auth-library-java","commit_stats":null,"previous_names":["google/google-auth-library-java"],"tags_count":106,"template":false,"template_full_name":null,"purl":"pkg:github/googleapis/google-auth-library-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","download_url":"https://codeload.github.com/googleapis/google-auth-library-java/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/sbom","scorecard":{"id":252128,"data":{"date":"2025-08-11","repo":{"name":"github.com/googleapis/google-auth-library-java","commit":"1669dc8b7d23fd7085ea7085b2bb5507a6932920"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"24 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yaml:1","Warn: no topLevel permission defined: .github/workflows/downstream.yaml:1","Warn: no topLevel permission defined: .github/workflows/renovate_config_check.yaml:1","Warn: no topLevel permission defined: .github/workflows/sonar.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:23","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:24","Info:   0 out of  25 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":4,"reason":"SAST tool is not run on all commits -- score normalized to 4","details":["Warn: 14 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T08:44:30.178Z","repository_id":27205911,"created_at":"2025-08-17T08:44:30.178Z","updated_at":"2025-08-17T08:44:30.178Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31061202,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-27T19:32:53.857Z","status":"ssl_error","status_checked_at":"2026-03-27T19:32:45.136Z","response_time":164,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"googleapis","name":"Google APIs","uuid":"16785467","kind":"organization","description":"Clients for Google APIs and tools that help produce them.","email":null,"website":"https://googleapis.github.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16785467?v=4","repositories_count":781,"last_synced_at":"2023-04-09T04:55:29.167Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/googleapis","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:18.651Z","updated_at":"2023-04-09T04:55:29.452Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis/repositories"},"packages":[{"id":13476784,"name":"google-auth-java","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/googleapis/google-auth-library-java","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-10T05:20:38.440Z","latest_release_published_at":"2026-02-10T05:20:38.440Z","latest_release_number":"0.18.0-2","last_synced_at":"2026-03-10T06:03:03.041Z","created_at":"2026-02-10T05:20:33.058Z","updated_at":"2026-03-10T06:03:03.042Z","registry_url":"https://launchpad.net/ubuntu/+source/google-auth-java","install_command":"apt-get install google-auth-java","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"libgoogle-auth-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), default-jdk, libgoogle-auto-value-java (\u003e= 1.6.6~), libgoogle-http-client-java (\u003e= 1.32.1~), libgrpc-java, libguava-java (\u003e= 28.1~), maven-debian-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/google-auth-java?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/google-auth-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/google-auth-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/google-auth-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/google-auth-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/google-auth-java/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/google-auth-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/google-auth-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/google-auth-java/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":387},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-03-18T07:57:22.743Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":4625568,"name":"com.google.auth:google-auth-library-bom","ecosystem":"maven","description":"BOM for Google Auth Library for Java","homepage":"https://github.com/googleapis/google-auth-library-java","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":[],"namespace":"com.google.auth","versions_count":87,"first_release_published_at":"2019-06-04T21:16:25.000Z","latest_release_published_at":"2026-02-18T19:47:06.000Z","latest_release_number":"1.43.0","last_synced_at":"2026-03-19T03:34:31.354Z","created_at":"2022-07-23T06:43:32.114Z","updated_at":"2026-03-19T03:34:31.354Z","registry_url":"https://central.sonatype.com/artifact/com.google.auth/google-auth-library-bom/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.auth/google-auth-library-bom/","metadata":{"distribution_repositories":["https://google.oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":27205911,"uuid":"30676648","full_name":"googleapis/google-auth-library-java","owner":"googleapis","description":"Open source Auth client library for Java","archived":false,"fork":false,"pushed_at":"2025-12-05T20:15:33.000Z","size":5064,"stargazers_count":451,"open_issues_count":77,"forks_count":261,"subscribers_count":76,"default_branch":"main","last_synced_at":"2025-12-06T03:29:59.139Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://developers.google.com/identity","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/googleapis.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-02-12T00:06:15.000Z","updated_at":"2025-12-04T20:46:18.000Z","dependencies_parsed_at":"2023-01-17T00:01:25.481Z","dependency_job_id":"b02936c0-f143-41ac-b34c-c618143bcb8d","html_url":"https://github.com/googleapis/google-auth-library-java","commit_stats":null,"previous_names":["google/google-auth-library-java"],"tags_count":100,"template":false,"template_full_name":null,"purl":"pkg:github/googleapis/google-auth-library-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","download_url":"https://codeload.github.com/googleapis/google-auth-library-java/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/sbom","scorecard":{"id":252128,"data":{"date":"2025-08-11","repo":{"name":"github.com/googleapis/google-auth-library-java","commit":"1669dc8b7d23fd7085ea7085b2bb5507a6932920"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"24 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yaml:1","Warn: no topLevel permission defined: .github/workflows/downstream.yaml:1","Warn: no topLevel permission defined: .github/workflows/renovate_config_check.yaml:1","Warn: no topLevel permission defined: .github/workflows/sonar.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:23","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:24","Info:   0 out of  25 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":4,"reason":"SAST tool is not run on all commits -- score normalized to 4","details":["Warn: 14 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T08:44:30.178Z","repository_id":27205911,"created_at":"2025-08-17T08:44:30.178Z","updated_at":"2025-08-17T08:44:30.178Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":27621537,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-12-09T02:00:09.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"googleapis","name":"Google APIs","uuid":"16785467","kind":"organization","description":"Clients for Google APIs and tools that help produce them.","email":null,"website":"https://googleapis.github.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16785467?v=4","repositories_count":781,"last_synced_at":"2023-04-09T04:55:29.167Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/googleapis","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:18.651Z","updated_at":"2023-04-09T04:55:29.452Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-02-18T20:18:27.411Z","dependent_packages_count":82,"downloads":null,"downloads_period":null,"dependent_repos_count":68,"rankings":{"downloads":null,"dependent_repos_count":2.515592307461282,"dependent_packages_count":0.887585219593749,"stargazers_count":17.568300813903434,"forks_count":11.927816020150326,"docker_downloads_count":null,"average":8.224823590277198},"purl":"pkg:maven/com.google.auth/google-auth-library-bom","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-bom","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-bom","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.auth:google-auth-library-bom/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-12-06T21:00:50.941Z","issues_count":116,"pull_requests_count":828,"avg_time_to_close_issue":16924833.766666666,"avg_time_to_close_pull_request":2373937.480882353,"issues_closed_count":60,"pull_requests_closed_count":680,"pull_request_authors_count":51,"issue_authors_count":77,"avg_comments_per_issue":1.5775862068965516,"avg_comments_per_pull_request":2.1533816425120773,"merged_pull_requests_count":561,"bot_issues_count":12,"bot_pull_requests_count":153,"past_year_issues_count":25,"past_year_pull_requests_count":367,"past_year_avg_time_to_close_issue":4078863.714285714,"past_year_avg_time_to_close_pull_request":460615.2404181185,"past_year_issues_closed_count":7,"past_year_pull_requests_closed_count":287,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":14,"past_year_avg_comments_per_issue":0.52,"past_year_avg_comments_per_pull_request":2.1634877384196183,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":51,"past_year_merged_pull_requests_count":241,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/issues","maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"TimurSadykov","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/TimurSadykov"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"lsirac","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsirac"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"},{"login":"arithmetic1728","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arithmetic1728"}],"active_maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-bom/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-bom/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-bom/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-bom/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-bom/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":594698,"maintainers_count":0,"namespaces_count":79057,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39453},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-03-27T08:27:49.844Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13686362,"name":"google-auth-java","ecosystem":"debian","description":null,"homepage":"https://github.com/googleapis/google-auth-library-java","licenses":"bsd-3-clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T18:09:08.644Z","latest_release_published_at":"2026-02-12T18:09:08.644Z","latest_release_number":"0.18.0-2","last_synced_at":"2026-03-13T10:31:32.208Z","created_at":"2026-02-12T18:09:08.499Z","updated_at":"2026-03-13T10:31:32.472Z","registry_url":"https://tracker.debian.org/pkg/google-auth-java","install_command":"apt-get install google-auth-java","documentation_url":"https://packages.debian.org/bookworm/google-auth-java","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"libgoogle-auth-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), default-jdk, libgoogle-auto-value-java (\u003e= 1.6.6~), libgoogle-http-client-java (\u003e= 1.32.1~), libgrpc-java, libguava-java (\u003e= 28.1~), maven-debian-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":27205911,"uuid":"30676648","full_name":"googleapis/google-auth-library-java","owner":"googleapis","description":"Open source Auth client library for Java","archived":false,"fork":false,"pushed_at":"2026-02-04T02:39:19.000Z","size":5691,"stargazers_count":460,"open_issues_count":71,"forks_count":266,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-02-04T14:15:49.898Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://developers.google.com/identity","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/googleapis.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-02-12T00:06:15.000Z","updated_at":"2026-02-04T12:41:50.000Z","dependencies_parsed_at":"2023-01-17T00:01:25.481Z","dependency_job_id":"c8d63db3-d290-4667-8a40-af6ae56c0aa6","html_url":"https://github.com/googleapis/google-auth-library-java","commit_stats":null,"previous_names":["google/google-auth-library-java"],"tags_count":105,"template":false,"template_full_name":null,"purl":"pkg:github/googleapis/google-auth-library-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","download_url":"https://codeload.github.com/googleapis/google-auth-library-java/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/sbom","scorecard":{"id":252128,"data":{"date":"2025-08-11","repo":{"name":"github.com/googleapis/google-auth-library-java","commit":"1669dc8b7d23fd7085ea7085b2bb5507a6932920"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"24 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yaml:1","Warn: no topLevel permission defined: .github/workflows/downstream.yaml:1","Warn: no topLevel permission defined: .github/workflows/renovate_config_check.yaml:1","Warn: no topLevel permission defined: .github/workflows/sonar.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:23","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:24","Info:   0 out of  25 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":4,"reason":"SAST tool is not run on all commits -- score normalized to 4","details":["Warn: 14 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T08:44:30.178Z","repository_id":27205911,"created_at":"2025-08-17T08:44:30.178Z","updated_at":"2025-08-17T08:44:30.178Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29375746,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-12T08:51:36.827Z","status":"ssl_error","status_checked_at":"2026-02-12T08:51:26.849Z","response_time":55,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-02-12T18:09:09.649Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":1.6666666666666667,"forks_count":0.9294871794871795,"docker_downloads_count":null,"average":0.6490384615384616},"purl":"pkg:deb/debian/google-auth-java?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/google-auth-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/google-auth-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/google-auth-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-02-12T00:01:34.882Z","issues_count":117,"pull_requests_count":835,"avg_time_to_close_issue":16647381.180327868,"avg_time_to_close_pull_request":2643801.3448275863,"issues_closed_count":61,"pull_requests_closed_count":696,"pull_request_authors_count":53,"issue_authors_count":78,"avg_comments_per_issue":1.564102564102564,"avg_comments_per_pull_request":2.178443113772455,"merged_pull_requests_count":562,"bot_issues_count":12,"bot_pull_requests_count":154,"past_year_issues_count":18,"past_year_pull_requests_count":228,"past_year_avg_time_to_close_issue":686281.5,"past_year_avg_time_to_close_pull_request":1454821.6101694915,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":177,"past_year_pull_request_authors_count":20,"past_year_issue_authors_count":10,"past_year_avg_comments_per_issue":0.1111111111111111,"past_year_avg_comments_per_pull_request":2.6447368421052633,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":36,"past_year_merged_pull_requests_count":134,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/issues","maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"TimurSadykov","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/TimurSadykov"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"lsirac","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsirac"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"},{"login":"arithmetic1728","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arithmetic1728"}],"active_maintainers":[{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"meltsufin","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/google-auth-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/google-auth-java/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/google-auth-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/google-auth-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/google-auth-java/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"debian","metadata":{"codename":"bookworm","funded_packages_count":341},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-03-18T07:57:29.534Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":4626451,"name":"com.google.auth:google-auth-library-oauth2-http","ecosystem":"maven","description":"Client libraries providing authentication and authorization to enable calling Google APIs.","homepage":"https://github.com/googleapis/google-auth-library-java","licenses":"BSD New license","normalized_licenses":["DSDP"],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":[],"namespace":"com.google.auth","versions_count":106,"first_release_published_at":"2015-03-02T19:07:37.000Z","latest_release_published_at":"2026-02-18T19:47:06.000Z","latest_release_number":"1.43.0","last_synced_at":"2026-03-19T21:46:44.322Z","created_at":"2022-07-23T09:39:02.438Z","updated_at":"2026-03-19T21:46:44.322Z","registry_url":"https://central.sonatype.com/artifact/com.google.auth/google-auth-library-oauth2-http/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.auth/google-auth-library-oauth2-http/","metadata":{"distribution_repositories":["https://google.oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":27205911,"uuid":"30676648","full_name":"googleapis/google-auth-library-java","owner":"googleapis","description":"Open source Auth client library for Java","archived":false,"fork":false,"pushed_at":"2025-12-05T20:15:33.000Z","size":5064,"stargazers_count":451,"open_issues_count":77,"forks_count":261,"subscribers_count":76,"default_branch":"main","last_synced_at":"2025-12-06T03:29:59.139Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://developers.google.com/identity","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/googleapis.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-02-12T00:06:15.000Z","updated_at":"2025-12-04T20:46:18.000Z","dependencies_parsed_at":"2023-01-17T00:01:25.481Z","dependency_job_id":"b02936c0-f143-41ac-b34c-c618143bcb8d","html_url":"https://github.com/googleapis/google-auth-library-java","commit_stats":null,"previous_names":["google/google-auth-library-java"],"tags_count":100,"template":false,"template_full_name":null,"purl":"pkg:github/googleapis/google-auth-library-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","download_url":"https://codeload.github.com/googleapis/google-auth-library-java/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/sbom","scorecard":{"id":252128,"data":{"date":"2025-08-11","repo":{"name":"github.com/googleapis/google-auth-library-java","commit":"1669dc8b7d23fd7085ea7085b2bb5507a6932920"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"24 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yaml:1","Warn: no topLevel permission defined: .github/workflows/downstream.yaml:1","Warn: no topLevel permission defined: .github/workflows/renovate_config_check.yaml:1","Warn: no topLevel permission defined: .github/workflows/sonar.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:23","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:24","Info:   0 out of  25 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":4,"reason":"SAST tool is not run on all commits -- score normalized to 4","details":["Warn: 14 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T08:44:30.178Z","repository_id":27205911,"created_at":"2025-08-17T08:44:30.178Z","updated_at":"2025-08-17T08:44:30.178Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":27621537,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-12-09T02:00:09.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"googleapis","name":"Google APIs","uuid":"16785467","kind":"organization","description":"Clients for Google APIs and tools that help produce them.","email":null,"website":"https://googleapis.github.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16785467?v=4","repositories_count":781,"last_synced_at":"2023-04-09T04:55:29.167Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/googleapis","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:18.651Z","updated_at":"2023-04-09T04:55:29.452Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-02-18T20:18:27.391Z","dependent_packages_count":517,"downloads":null,"downloads_period":null,"dependent_repos_count":1947,"rankings":{"downloads":null,"dependent_repos_count":0.24927619802741435,"dependent_packages_count":0.16197947325636808,"stargazers_count":17.568300813903434,"forks_count":11.927816020150326,"docker_downloads_count":0.03203549532882434,"average":5.9878816001332735},"purl":"pkg:maven/com.google.auth/google-auth-library-oauth2-http","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-oauth2-http","docker_dependents_count":2556,"docker_downloads_count":3017442725,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-oauth2-http","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.auth:google-auth-library-oauth2-http/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-12-06T21:00:50.941Z","issues_count":116,"pull_requests_count":828,"avg_time_to_close_issue":16924833.766666666,"avg_time_to_close_pull_request":2373937.480882353,"issues_closed_count":60,"pull_requests_closed_count":680,"pull_request_authors_count":51,"issue_authors_count":77,"avg_comments_per_issue":1.5775862068965516,"avg_comments_per_pull_request":2.1533816425120773,"merged_pull_requests_count":561,"bot_issues_count":12,"bot_pull_requests_count":153,"past_year_issues_count":25,"past_year_pull_requests_count":367,"past_year_avg_time_to_close_issue":4078863.714285714,"past_year_avg_time_to_close_pull_request":460615.2404181185,"past_year_issues_closed_count":7,"past_year_pull_requests_closed_count":287,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":14,"past_year_avg_comments_per_issue":0.52,"past_year_avg_comments_per_pull_request":2.1634877384196183,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":51,"past_year_merged_pull_requests_count":241,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/issues","maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"TimurSadykov","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/TimurSadykov"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"lsirac","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsirac"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"},{"login":"arithmetic1728","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arithmetic1728"}],"active_maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-oauth2-http/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-oauth2-http/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-oauth2-http/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-oauth2-http/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-oauth2-http/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":594698,"maintainers_count":0,"namespaces_count":79057,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39453},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-03-27T08:27:49.844Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13506682,"name":"google-auth-java","ecosystem":"debian","description":null,"homepage":"https://github.com/googleapis/google-auth-library-java","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-10T19:12:53.728Z","latest_release_published_at":"2026-02-10T19:12:53.728Z","latest_release_number":"0.18.0-1","last_synced_at":"2026-03-13T16:31:01.397Z","created_at":"2026-02-10T19:12:53.525Z","updated_at":"2026-03-13T16:31:01.397Z","registry_url":"https://tracker.debian.org/pkg/google-auth-java","install_command":"apt-get install google-auth-java","documentation_url":"https://packages.debian.org/bullseye/google-auth-java","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"libgoogle-auth-java","standards_version":"4.5.1","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), default-jdk, libgoogle-auto-value-java (\u003e= 1.6.6~), libgoogle-http-client-java (\u003e= 1.32.1~), libgrpc-java, libguava-java (\u003e= 28.1~), maven-debian-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-11T14:15:08.217Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/google-auth-java?arch=source\u0026distro=debian-11\u0026repository_url=https://packages.debian.org/bullseye","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/google-auth-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/google-auth-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/google-auth-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/google-auth-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/google-auth-java/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/google-auth-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/google-auth-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/google-auth-java/codemeta","maintainers":[],"registry":{"name":"debian-11","url":"https://packages.debian.org/bullseye","ecosystem":"debian","default":false,"packages_count":31268,"maintainers_count":0,"namespaces_count":3,"keywords_count":0,"github":"debian","metadata":{"codename":"bullseye","funded_packages_count":61},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.702Z","updated_at":"2026-03-18T07:57:25.994Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/namespaces"}},{"id":13546994,"name":"google-auth-java","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/googleapis/google-auth-library-java","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T02:18:54.601Z","latest_release_published_at":"2026-02-11T02:18:54.601Z","latest_release_number":"0.18.0-1","last_synced_at":"2026-03-11T21:29:11.701Z","created_at":"2026-02-11T02:18:54.432Z","updated_at":"2026-03-11T21:29:11.701Z","registry_url":"https://launchpad.net/ubuntu/+source/google-auth-java","install_command":"apt-get install google-auth-java","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"libgoogle-auth-java","standards_version":"4.5.1","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), default-jdk, libgoogle-auto-value-java (\u003e= 1.6.6~), libgoogle-http-client-java (\u003e= 1.32.1~), libgrpc-java, libguava-java (\u003e= 28.1~), maven-debian-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-11T14:42:19.515Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/google-auth-java?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/google-auth-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/google-auth-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/google-auth-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/google-auth-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/google-auth-java/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/google-auth-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/google-auth-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/google-auth-java/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":73},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-03-18T07:57:23.625Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":4625502,"name":"com.google.auth:google-auth-library-parent","ecosystem":"maven","description":"Client libraries providing authentication and authorization to enable calling Google APIs.","homepage":"https://github.com/googleapis/google-auth-library-java","licenses":"BSD New license","normalized_licenses":["DSDP"],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":[],"namespace":"com.google.auth","versions_count":106,"first_release_published_at":"2015-03-02T19:07:58.000Z","latest_release_published_at":"2026-02-18T19:47:06.000Z","latest_release_number":"1.43.0","last_synced_at":"2026-03-25T05:54:39.071Z","created_at":"2022-07-23T06:37:15.087Z","updated_at":"2026-03-25T05:54:39.071Z","registry_url":"https://central.sonatype.com/artifact/com.google.auth/google-auth-library-parent/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.auth/google-auth-library-parent/","metadata":{"distribution_repositories":["https://google.oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":27205911,"uuid":"30676648","full_name":"googleapis/google-auth-library-java","owner":"googleapis","description":"Open source Auth client library for Java","archived":false,"fork":false,"pushed_at":"2025-12-05T20:15:33.000Z","size":5064,"stargazers_count":451,"open_issues_count":77,"forks_count":261,"subscribers_count":76,"default_branch":"main","last_synced_at":"2025-12-06T03:29:59.139Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://developers.google.com/identity","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/googleapis.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-02-12T00:06:15.000Z","updated_at":"2025-12-04T20:46:18.000Z","dependencies_parsed_at":"2023-01-17T00:01:25.481Z","dependency_job_id":"b02936c0-f143-41ac-b34c-c618143bcb8d","html_url":"https://github.com/googleapis/google-auth-library-java","commit_stats":null,"previous_names":["google/google-auth-library-java"],"tags_count":100,"template":false,"template_full_name":null,"purl":"pkg:github/googleapis/google-auth-library-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","download_url":"https://codeload.github.com/googleapis/google-auth-library-java/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/sbom","scorecard":{"id":252128,"data":{"date":"2025-08-11","repo":{"name":"github.com/googleapis/google-auth-library-java","commit":"1669dc8b7d23fd7085ea7085b2bb5507a6932920"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"24 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yaml:1","Warn: no topLevel permission defined: .github/workflows/downstream.yaml:1","Warn: no topLevel permission defined: .github/workflows/renovate_config_check.yaml:1","Warn: no topLevel permission defined: .github/workflows/sonar.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:23","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:24","Info:   0 out of  25 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":4,"reason":"SAST tool is not run on all commits -- score normalized to 4","details":["Warn: 14 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T08:44:30.178Z","repository_id":27205911,"created_at":"2025-08-17T08:44:30.178Z","updated_at":"2025-08-17T08:44:30.178Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":27621537,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-12-09T02:00:09.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"googleapis","name":"Google APIs","uuid":"16785467","kind":"organization","description":"Clients for Google APIs and tools that help produce them.","email":null,"website":"https://googleapis.github.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16785467?v=4","repositories_count":781,"last_synced_at":"2023-04-09T04:55:29.167Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/googleapis","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:18.651Z","updated_at":"2023-04-09T04:55:29.452Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-12-09T16:24:01.346Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":3,"rankings":{"downloads":null,"dependent_repos_count":13.781497462183022,"dependent_packages_count":50.15146812962388,"stargazers_count":17.568300813903434,"forks_count":11.927816020150326,"docker_downloads_count":null,"average":23.357270606465164},"purl":"pkg:maven/com.google.auth/google-auth-library-parent","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-parent","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-parent","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.auth:google-auth-library-parent/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-12-06T21:00:50.941Z","issues_count":116,"pull_requests_count":828,"avg_time_to_close_issue":16924833.766666666,"avg_time_to_close_pull_request":2373937.480882353,"issues_closed_count":60,"pull_requests_closed_count":680,"pull_request_authors_count":51,"issue_authors_count":77,"avg_comments_per_issue":1.5775862068965516,"avg_comments_per_pull_request":2.1533816425120773,"merged_pull_requests_count":561,"bot_issues_count":12,"bot_pull_requests_count":153,"past_year_issues_count":25,"past_year_pull_requests_count":367,"past_year_avg_time_to_close_issue":4078863.714285714,"past_year_avg_time_to_close_pull_request":460615.2404181185,"past_year_issues_closed_count":7,"past_year_pull_requests_closed_count":287,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":14,"past_year_avg_comments_per_issue":0.52,"past_year_avg_comments_per_pull_request":2.1634877384196183,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":51,"past_year_merged_pull_requests_count":241,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/issues","maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"TimurSadykov","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/TimurSadykov"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"lsirac","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsirac"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"},{"login":"arithmetic1728","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arithmetic1728"}],"active_maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-parent/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-parent/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-parent/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-parent/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-parent/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":594698,"maintainers_count":0,"namespaces_count":79057,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39453},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-03-27T08:27:49.844Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4616167,"name":"com.google.auth:google-auth-library-appengine","ecosystem":"maven","description":"Client libraries providing authentication and authorization to enable calling Google APIs.","homepage":"https://github.com/googleapis/google-auth-library-java","licenses":"BSD New license","normalized_licenses":["DSDP"],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":[],"namespace":"com.google.auth","versions_count":105,"first_release_published_at":"2015-08-13T18:38:11.000Z","latest_release_published_at":"2026-02-18T19:47:06.000Z","latest_release_number":"1.43.0","last_synced_at":"2026-03-20T09:22:02.957Z","created_at":"2022-07-22T21:07:14.622Z","updated_at":"2026-03-20T09:22:02.957Z","registry_url":"https://central.sonatype.com/artifact/com.google.auth/google-auth-library-appengine/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.auth/google-auth-library-appengine/","metadata":{"distribution_repositories":["https://google.oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":27205911,"uuid":"30676648","full_name":"googleapis/google-auth-library-java","owner":"googleapis","description":"Open source Auth client library for Java","archived":false,"fork":false,"pushed_at":"2025-12-05T20:15:33.000Z","size":5064,"stargazers_count":451,"open_issues_count":77,"forks_count":261,"subscribers_count":76,"default_branch":"main","last_synced_at":"2025-12-06T03:29:59.139Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://developers.google.com/identity","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/googleapis.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-02-12T00:06:15.000Z","updated_at":"2025-12-04T20:46:18.000Z","dependencies_parsed_at":"2023-01-17T00:01:25.481Z","dependency_job_id":"b02936c0-f143-41ac-b34c-c618143bcb8d","html_url":"https://github.com/googleapis/google-auth-library-java","commit_stats":null,"previous_names":["google/google-auth-library-java"],"tags_count":100,"template":false,"template_full_name":null,"purl":"pkg:github/googleapis/google-auth-library-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","download_url":"https://codeload.github.com/googleapis/google-auth-library-java/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/sbom","scorecard":{"id":252128,"data":{"date":"2025-08-11","repo":{"name":"github.com/googleapis/google-auth-library-java","commit":"1669dc8b7d23fd7085ea7085b2bb5507a6932920"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"24 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yaml:1","Warn: no topLevel permission defined: .github/workflows/downstream.yaml:1","Warn: no topLevel permission defined: .github/workflows/renovate_config_check.yaml:1","Warn: no topLevel permission defined: .github/workflows/sonar.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:23","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:24","Info:   0 out of  25 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":4,"reason":"SAST tool is not run on all commits -- score normalized to 4","details":["Warn: 14 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T08:44:30.178Z","repository_id":27205911,"created_at":"2025-08-17T08:44:30.178Z","updated_at":"2025-08-17T08:44:30.178Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":27621537,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-12-09T02:00:09.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"googleapis","name":"Google APIs","uuid":"16785467","kind":"organization","description":"Clients for Google APIs and tools that help produce them.","email":null,"website":"https://googleapis.github.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16785467?v=4","repositories_count":781,"last_synced_at":"2023-04-09T04:55:29.167Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/googleapis","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:18.651Z","updated_at":"2023-04-09T04:55:29.452Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-02-18T20:18:27.858Z","dependent_packages_count":31,"downloads":null,"downloads_period":null,"dependent_repos_count":85,"rankings":{"downloads":null,"dependent_repos_count":2.1609987085665088,"dependent_packages_count":2.1127451471132956,"stargazers_count":17.568300813903434,"forks_count":11.927816020150326,"docker_downloads_count":1.508271164450211,"average":7.055626370836755},"purl":"pkg:maven/com.google.auth/google-auth-library-appengine","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-appengine","docker_dependents_count":23,"docker_downloads_count":3493446,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-appengine","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.auth:google-auth-library-appengine/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-12-06T21:00:50.941Z","issues_count":116,"pull_requests_count":828,"avg_time_to_close_issue":16924833.766666666,"avg_time_to_close_pull_request":2373937.480882353,"issues_closed_count":60,"pull_requests_closed_count":680,"pull_request_authors_count":51,"issue_authors_count":77,"avg_comments_per_issue":1.5775862068965516,"avg_comments_per_pull_request":2.1533816425120773,"merged_pull_requests_count":561,"bot_issues_count":12,"bot_pull_requests_count":153,"past_year_issues_count":25,"past_year_pull_requests_count":367,"past_year_avg_time_to_close_issue":4078863.714285714,"past_year_avg_time_to_close_pull_request":460615.2404181185,"past_year_issues_closed_count":7,"past_year_pull_requests_closed_count":287,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":14,"past_year_avg_comments_per_issue":0.52,"past_year_avg_comments_per_pull_request":2.1634877384196183,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":51,"past_year_merged_pull_requests_count":241,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/issues","maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"TimurSadykov","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/TimurSadykov"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"lsirac","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsirac"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"},{"login":"arithmetic1728","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arithmetic1728"}],"active_maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-appengine/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-appengine/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-appengine/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-appengine/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-appengine/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":594698,"maintainers_count":0,"namespaces_count":79057,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39453},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-03-27T08:27:49.844Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13647206,"name":"google-auth-java","ecosystem":"debian","description":null,"homepage":"https://github.com/googleapis/google-auth-library-java","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:46:32.573Z","latest_release_published_at":"2026-02-12T03:46:32.573Z","latest_release_number":"0.18.0-2","last_synced_at":"2026-03-13T21:22:26.716Z","created_at":"2026-02-12T03:46:32.352Z","updated_at":"2026-03-13T21:22:26.717Z","registry_url":"https://tracker.debian.org/pkg/google-auth-java","install_command":"apt-get install google-auth-java","documentation_url":"https://packages.debian.org/trixie/google-auth-java","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"libgoogle-auth-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), default-jdk, libgoogle-auto-value-java (\u003e= 1.6.6~), libgoogle-http-client-java (\u003e= 1.32.1~), libgrpc-java, libguava-java (\u003e= 28.1~), maven-debian-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-12T03:46:33.231Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/google-auth-java?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/google-auth-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/google-auth-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/google-auth-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/google-auth-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/google-auth-java/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/google-auth-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/google-auth-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/google-auth-java/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":246},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-03-18T07:56:27.898Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13449560,"name":"google-auth-java","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/googleapis/google-auth-library-java","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T17:04:20.242Z","latest_release_published_at":"2026-02-08T17:04:20.242Z","latest_release_number":"0.18.0-2","last_synced_at":"2026-03-08T17:41:02.469Z","created_at":"2026-02-08T17:04:13.028Z","updated_at":"2026-03-08T18:05:14.266Z","registry_url":"https://launchpad.net/ubuntu/+source/google-auth-java","install_command":"apt-get install google-auth-java","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"libgoogle-auth-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), default-jdk, libgoogle-auto-value-java (\u003e= 1.6.6~), libgoogle-http-client-java (\u003e= 1.32.1~), libgrpc-java, libguava-java (\u003e= 28.1~), maven-debian-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/google-auth-java?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/google-auth-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/google-auth-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/google-auth-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/google-auth-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/google-auth-java/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/google-auth-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/google-auth-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/google-auth-java/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":145},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-03-16T07:39:49.052Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13389187,"name":"google-auth-java","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/googleapis/google-auth-library-java","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-05T17:29:57.530Z","latest_release_published_at":"2026-02-05T17:29:57.530Z","latest_release_number":"0.18.0-2","last_synced_at":"2026-03-05T18:51:17.015Z","created_at":"2026-02-05T17:29:57.274Z","updated_at":"2026-03-05T19:01:25.010Z","registry_url":"https://launchpad.net/ubuntu/+source/google-auth-java","install_command":"apt-get install google-auth-java","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"libgoogle-auth-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), default-jdk, libgoogle-auto-value-java (\u003e= 1.6.6~), libgoogle-http-client-java (\u003e= 1.32.1~), libgrpc-java, libguava-java (\u003e= 28.1~), maven-debian-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/google-auth-java?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/google-auth-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/google-auth-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/google-auth-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/google-auth-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/google-auth-java/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/google-auth-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/google-auth-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/google-auth-java/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":137},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-03-18T07:57:17.389Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":4613310,"name":"com.google.auth:google-auth-library-credentials","ecosystem":"maven","description":"Client libraries providing authentication and authorization to enable calling Google APIs.","homepage":"https://github.com/googleapis/google-auth-library-java","licenses":"BSD New license","normalized_licenses":["DSDP"],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":[],"namespace":"com.google.auth","versions_count":106,"first_release_published_at":"2015-03-02T19:07:42.000Z","latest_release_published_at":"2026-02-18T19:47:06.000Z","latest_release_number":"1.43.0","last_synced_at":"2026-03-19T00:07:34.553Z","created_at":"2022-07-22T19:49:16.708Z","updated_at":"2026-03-19T00:07:34.553Z","registry_url":"https://central.sonatype.com/artifact/com.google.auth/google-auth-library-credentials/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.auth/google-auth-library-credentials/","metadata":{"distribution_repositories":["https://google.oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":27205911,"uuid":"30676648","full_name":"googleapis/google-auth-library-java","owner":"googleapis","description":"Open source Auth client library for Java","archived":false,"fork":false,"pushed_at":"2025-12-05T20:15:33.000Z","size":5064,"stargazers_count":451,"open_issues_count":77,"forks_count":261,"subscribers_count":76,"default_branch":"main","last_synced_at":"2025-12-06T03:29:59.139Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://developers.google.com/identity","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/googleapis.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-02-12T00:06:15.000Z","updated_at":"2025-12-04T20:46:18.000Z","dependencies_parsed_at":"2023-01-17T00:01:25.481Z","dependency_job_id":"b02936c0-f143-41ac-b34c-c618143bcb8d","html_url":"https://github.com/googleapis/google-auth-library-java","commit_stats":null,"previous_names":["google/google-auth-library-java"],"tags_count":100,"template":false,"template_full_name":null,"purl":"pkg:github/googleapis/google-auth-library-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","download_url":"https://codeload.github.com/googleapis/google-auth-library-java/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/sbom","scorecard":{"id":252128,"data":{"date":"2025-08-11","repo":{"name":"github.com/googleapis/google-auth-library-java","commit":"1669dc8b7d23fd7085ea7085b2bb5507a6932920"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"24 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yaml:1","Warn: no topLevel permission defined: .github/workflows/downstream.yaml:1","Warn: no topLevel permission defined: .github/workflows/renovate_config_check.yaml:1","Warn: no topLevel permission defined: .github/workflows/sonar.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:23","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:24","Info:   0 out of  25 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":4,"reason":"SAST tool is not run on all commits -- score normalized to 4","details":["Warn: 14 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T08:44:30.178Z","repository_id":27205911,"created_at":"2025-08-17T08:44:30.178Z","updated_at":"2025-08-17T08:44:30.178Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":27621537,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-12-09T02:00:09.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"googleapis","name":"Google APIs","uuid":"16785467","kind":"organization","description":"Clients for Google APIs and tools that help produce them.","email":null,"website":"https://googleapis.github.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16785467?v=4","repositories_count":781,"last_synced_at":"2023-04-09T04:55:29.167Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/googleapis","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:18.651Z","updated_at":"2023-04-09T04:55:29.452Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-02-18T20:18:27.427Z","dependent_packages_count":345,"downloads":null,"downloads_period":null,"dependent_repos_count":790,"rankings":{"downloads":null,"dependent_repos_count":0.4545035899776953,"dependent_packages_count":0.24907597618160923,"stargazers_count":17.568300813903434,"forks_count":11.927816020150326,"docker_downloads_count":0.03223571717462949,"average":6.046386423477538},"purl":"pkg:maven/com.google.auth/google-auth-library-credentials","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-credentials","docker_dependents_count":2603,"docker_downloads_count":3013407755,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-credentials","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.auth:google-auth-library-credentials/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-12-06T21:00:50.941Z","issues_count":116,"pull_requests_count":828,"avg_time_to_close_issue":16924833.766666666,"avg_time_to_close_pull_request":2373937.480882353,"issues_closed_count":60,"pull_requests_closed_count":680,"pull_request_authors_count":51,"issue_authors_count":77,"avg_comments_per_issue":1.5775862068965516,"avg_comments_per_pull_request":2.1533816425120773,"merged_pull_requests_count":561,"bot_issues_count":12,"bot_pull_requests_count":153,"past_year_issues_count":25,"past_year_pull_requests_count":367,"past_year_avg_time_to_close_issue":4078863.714285714,"past_year_avg_time_to_close_pull_request":460615.2404181185,"past_year_issues_closed_count":7,"past_year_pull_requests_closed_count":287,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":14,"past_year_avg_comments_per_issue":0.52,"past_year_avg_comments_per_pull_request":2.1634877384196183,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":51,"past_year_merged_pull_requests_count":241,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/issues","maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"TimurSadykov","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/TimurSadykov"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"lsirac","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsirac"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"},{"login":"arithmetic1728","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arithmetic1728"}],"active_maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-credentials/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-credentials/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-credentials/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-credentials/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-credentials/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":594698,"maintainers_count":0,"namespaces_count":79057,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39453},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-03-27T08:27:49.844Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":11702648,"name":"com.google.auth:google-auth-library-cab-token-generator","ecosystem":"maven","description":"Client libraries providing authentication and authorization to enable calling Google APIs.","homepage":"https://github.com/googleapis/google-auth-library-java","licenses":"BSD New license","normalized_licenses":["DSDP"],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":[],"namespace":"com.google.auth","versions_count":20,"first_release_published_at":"2025-02-04T21:06:31.000Z","latest_release_published_at":"2026-02-18T19:47:06.000Z","latest_release_number":"1.43.0","last_synced_at":"2026-03-24T03:51:56.286Z","created_at":"2025-05-29T00:45:25.604Z","updated_at":"2026-03-24T03:51:56.286Z","registry_url":"https://central.sonatype.com/artifact/com.google.auth/google-auth-library-cab-token-generator/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.auth/google-auth-library-cab-token-generator/","metadata":{"distribution_repositories":["https://google.oss.sonatype.org/content/repositories/snapshots"]},"repo_metadata":{"id":27205911,"uuid":"30676648","full_name":"googleapis/google-auth-library-java","owner":"googleapis","description":"Open source Auth client library for Java","archived":false,"fork":false,"pushed_at":"2025-12-05T20:15:33.000Z","size":5064,"stargazers_count":451,"open_issues_count":77,"forks_count":261,"subscribers_count":76,"default_branch":"main","last_synced_at":"2025-12-06T03:29:59.139Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://developers.google.com/identity","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/googleapis.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-02-12T00:06:15.000Z","updated_at":"2025-12-04T20:46:18.000Z","dependencies_parsed_at":"2023-01-17T00:01:25.481Z","dependency_job_id":"b02936c0-f143-41ac-b34c-c618143bcb8d","html_url":"https://github.com/googleapis/google-auth-library-java","commit_stats":null,"previous_names":["google/google-auth-library-java"],"tags_count":100,"template":false,"template_full_name":null,"purl":"pkg:github/googleapis/google-auth-library-java","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","download_url":"https://codeload.github.com/googleapis/google-auth-library-java/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/sbom","scorecard":{"id":252128,"data":{"date":"2025-08-11","repo":{"name":"github.com/googleapis/google-auth-library-java","commit":"1669dc8b7d23fd7085ea7085b2bb5507a6932920"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.5,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"24 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yaml:1","Warn: no topLevel permission defined: .github/workflows/downstream.yaml:1","Warn: no topLevel permission defined: .github/workflows/renovate_config_check.yaml:1","Warn: no topLevel permission defined: .github/workflows/sonar.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yaml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/ci.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/downstream.yaml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/downstream.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/renovate_config_check.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/renovate_config_check.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/googleapis/google-auth-library-java/sonar.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:23","Warn: npmCommand not pinned by hash: .github/workflows/renovate_config_check.yaml:24","Info:   0 out of  25 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":4,"reason":"SAST tool is not run on all commits -- score normalized to 4","details":["Warn: 14 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-17T08:44:30.178Z","repository_id":27205911,"created_at":"2025-08-17T08:44:30.178Z","updated_at":"2025-08-17T08:44:30.178Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":27621537,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-12-09T02:00:09.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"googleapis","name":"Google APIs","uuid":"16785467","kind":"organization","description":"Clients for Google APIs and tools that help produce them.","email":null,"website":"https://googleapis.github.io","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/16785467?v=4","repositories_count":781,"last_synced_at":"2023-04-09T04:55:29.167Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/googleapis","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:18.651Z","updated_at":"2023-04-09T04:55:29.452Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/googleapis/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-02-18T20:18:28.342Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.43071605246526,"dependent_packages_count":49.22324264011672,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":41.82697934629099},"purl":"pkg:maven/com.google.auth/google-auth-library-cab-token-generator","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-cab-token-generator","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.auth:google-auth-library-cab-token-generator","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.auth:google-auth-library-cab-token-generator/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-12-06T21:00:50.941Z","issues_count":116,"pull_requests_count":828,"avg_time_to_close_issue":16924833.766666666,"avg_time_to_close_pull_request":2373937.480882353,"issues_closed_count":60,"pull_requests_closed_count":680,"pull_request_authors_count":51,"issue_authors_count":77,"avg_comments_per_issue":1.5775862068965516,"avg_comments_per_pull_request":2.1533816425120773,"merged_pull_requests_count":561,"bot_issues_count":12,"bot_pull_requests_count":153,"past_year_issues_count":25,"past_year_pull_requests_count":367,"past_year_avg_time_to_close_issue":4078863.714285714,"past_year_avg_time_to_close_pull_request":460615.2404181185,"past_year_issues_closed_count":7,"past_year_pull_requests_closed_count":287,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":14,"past_year_avg_comments_per_issue":0.52,"past_year_avg_comments_per_pull_request":2.1634877384196183,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":51,"past_year_merged_pull_requests_count":241,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/issues","maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"TimurSadykov","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/TimurSadykov"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"lsirac","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsirac"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"},{"login":"arithmetic1728","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arithmetic1728"}],"active_maintainers":[{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"},{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"},{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"},{"login":"suztomo","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-cab-token-generator/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-cab-token-generator/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-cab-token-generator/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-cab-token-generator/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.auth:google-auth-library-cab-token-generator/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":594698,"maintainers_count":0,"namespaces_count":79057,"keywords_count":0,"github":"maven-central","metadata":{"funded_packages_count":39453},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-03-27T08:27:49.844Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13418722,"name":"google-auth-java","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/googleapis/google-auth-library-java","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/googleapis/google-auth-library-java","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-07T04:36:53.495Z","latest_release_published_at":"2026-02-07T04:36:53.495Z","latest_release_number":"0.18.0-1","last_synced_at":"2026-03-07T04:44:46.844Z","created_at":"2026-02-07T04:36:53.173Z","updated_at":"2026-03-07T05:07:59.167Z","registry_url":"https://launchpad.net/ubuntu/+source/google-auth-java","install_command":"apt-get install google-auth-java","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"libgoogle-auth-java","standards_version":"4.5.1","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), default-jdk, libgoogle-auto-value-java (\u003e= 1.6.6~), libgoogle-http-client-java (\u003e= 1.32.1~), libgrpc-java, libguava-java (\u003e= 28.1~), maven-debian-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/google-auth-java?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/google-auth-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/google-auth-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/google-auth-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/google-auth-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/google-auth-java/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/google-auth-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/google-auth-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/google-auth-java/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"jammy","funded_packages_count":119},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-03-18T07:57:27.251Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}}],"commits":{"id":4206066,"full_name":"googleapis/google-auth-library-java","default_branch":"main","total_commits":1204,"total_committers":105,"total_bot_commits":213,"total_bot_committers":4,"mean_commits":11.466666666666667,"dds":0.6627906976744187,"past_year_total_commits":99,"past_year_total_committers":20,"past_year_total_bot_commits":26,"past_year_total_bot_committers":1,"past_year_mean_commits":4.95,"past_year_dds":0.7373737373737373,"last_synced_at":"2026-03-13T15:08:56.405Z","last_synced_commit":"90b61a95112999443e622e31d58e1bda1c1c0bd9","created_at":"2024-11-06T19:10:58.641Z","updated_at":"2026-03-13T15:06:24.937Z","committers":[{"name":"Mend Renovate","email":"bot@renovateapp.com","login":"renovate-bot","count":406},{"name":"release-please[bot]","email":"55107282+release-please[bot]","login":"release-please[bot]","count":159},{"name":"Jeff Ching","email":"chingor@google.com","login":"chingor13","count":85},{"name":"gcf-owl-bot[bot]","email":"78513119+gcf-owl-bot[bot]","login":"gcf-owl-bot[bot]","count":45},{"name":"Lawrence Qiu","email":"lawrenceqiu@google.com","login":"lqiu96","count":38},{"name":"Elliotte Rusty Harold","email":"elharo","login":"elharo","count":36},{"name":"Leo","email":"39062083+lsirac","login":"lsirac","count":32},{"name":"Yoshi Automation Bot","email":"yoshi-automation@google.com","login":"yoshi-automation","count":28},{"name":"Timur Sadykov","email":"stim@google.com","login":"TimurSadykov","count":26},{"name":"Anthony Moore","email":"anthm@google.com","login":"anthmgoogle","count":24},{"name":"Mike Eltsufin","email":"meltsufin@google.com","login":"meltsufin","count":18},{"name":"aeitzman","email":"12433791+aeitzman","login":"aeitzman","count":14},{"name":"Min Zhu","email":"zhumin@google.com","login":"zhumin8","count":13},{"name":"Marco Ziccardi","email":"marco.ziccard@gmail.com","login":"mziccard","count":12},{"name":"Garrett Jones","email":"garrettjonesgoogle","login":"garrettjonesgoogle","count":11},{"name":"Neenu Shaji","email":"Neenu1995","login":"Neenu1995","count":11},{"name":"Emily Ball","email":"emilyball@google.com","login":"eaball35","count":10},{"name":"Thomas Coffee","email":"tcoffee@google.com","login":"tcoffee-google","count":10},{"name":"arithmetic1728","email":"58957152+arithmetic1728","login":"arithmetic1728","count":10},{"name":"sai-sunder-s","email":"4540365+sai-sunder-s","login":"sai-sunder-s","count":10},{"name":"Diego Marquez","email":"diegomarquezp@google.com","login":"diegomarquezp","count":10},{"name":"Andrei Arlou","email":"andrei.arlou@gmail.com","login":"Captain1653","count":8},{"name":"Shin Fan","email":"shinfan@google.com","login":"shinfan","count":8},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":8},{"name":"Mridula","email":"66699525+mpeddada1","login":"mpeddada1","count":7},{"name":"Carl Lundin","email":"108372512+clundin25","login":"clundin25","count":7},{"name":"nbayati","email":"99771966+nbayati","login":"nbayati","count":6},{"name":"Tomo Suzuki","email":"suztomo@google.com","login":"suztomo","count":6},{"name":"Kun Zhang","email":"zhangkun@google.com","login":"zhangkun83","count":6},{"name":"Michael Darakananda","email":"pongad@google.com","login":"pongad","count":6},{"name":"Les Vogel","email":"lesv","login":"lesv","count":6},{"name":"Riya Mehta","email":"55350838+rmehta19","login":"rmehta19","count":5},{"name":"ldetmer","email":"1771267+ldetmer","login":"ldetmer","count":5},{"name":"Igor Bernstein","email":"igorbernstein@google.com","login":"igorbernstein2","count":5},{"name":"Victor Chudnovsky","email":"vchudnov@google.com","login":"vchudnov-g","count":4},{"name":"Jin","email":"ustc.bigtailwolf@gmail.com","login":"BigTailWolf","count":4},{"name":"kolea2","email":"45548808+kolea2","login":"kolea2","count":4},{"name":"Alice","email":"65933803+alicejli","login":"alicejli","count":4},{"name":"Les Vogel","email":"lesv@google.com","login":null,"count":4},{"name":"salrashid123","email":"salrashid123@gmail.com","login":"salrashid123","count":3},{"name":"Sita Lakshmi Sangameswaran","email":"sitalakshmi@google.com","login":"Sita04","count":3},{"name":"Robert Spies","email":"wilford@google.com","login":"wilford","count":3},{"name":"Louis Bergelson","email":"louisb@broadinstitute.org","login":"lbergelson","count":3},{"name":"Jean de Klerk","email":"deklerk@google.com","login":"jeanbza","count":3},{"name":"Hiranya Jayathilaka","email":"hiranya911@gmail.com","login":"hiranya911","count":3},{"name":"Burke Davison","email":"40617934+burkedavison","login":"burkedavison","count":3},{"name":"Bruno P. Kinoshita","email":"kinow","login":"kinow","count":2},{"name":"Chanseok Oh","email":"chanseok@google.com","login":"chanseokoh","count":2},{"name":"Dmitry Tretyakov","email":"dtretyakov","login":"dtretyakov","count":2},{"name":"JesseLovelace","email":"43148100+JesseLovelace","login":"JesseLovelace","count":2},{"name":"Joe Chou","email":"poanc@google.com","login":"poanc","count":2},{"name":"Joe Wang","email":"106995533+JoeWang1127","login":"JoeWang1127","count":2},{"name":"Justin Beckwith","email":"justin.beckwith@gmail.com","login":"JustinBeckwith","count":2},{"name":"Neo Wu","email":"neowu@google.com","login":"neozwu","count":2},{"name":"Noam Lewis","email":"sinelaw","login":"sinelaw","count":2},{"name":"Rafael Guedes","email":"rafaelmenta@gmail.com","login":"rafaelmenta","count":2},{"name":"Solomon Duskis","email":"sduskis@google.com","login":"sduskis","count":2},{"name":"Niklas Gustavsson","email":"niklas@protocol7.com","login":"protocol7","count":2},{"name":"Josh Mahonin","email":"jmahonin@decodable.co","login":"jmahonin","count":2},{"name":"Max Rumpf","email":"max.rumpf1998@gmail.com","login":"Maxr1998","count":1},{"name":"Navina Ramesh","email":"navi.trinity@gmail.com","login":"navina","count":1},{"name":"Nicholas Cook","email":"irataxy","login":"irataxy","count":1},{"name":"Quentin Castel","email":"quentincastel86@gmail.com","login":"qcastel","count":1},{"name":"Rahul Kesharwani","email":"42969463+rahulKQL","login":"rahulKQL","count":1},{"name":"Ryan Kohler","email":"ryan.c.kohler@gmail.com","login":"ScruffyProdigy","count":1},{"name":"Sakthivel Subramanian","email":"179120858+sakthivelmanii","login":"sakthivelmanii","count":1},{"name":"Shubha Rajan","email":"shubhadayini@google.com","login":"shubha-rajan","count":1},{"name":"Steve Wolter","email":"steve.wolter.de@gmail.com","login":"stevewolter","count":1},{"name":"Steven van Rossum","email":"stevenvanrossum@gmail.com","login":"sjvanrossum","count":1},{"name":"Tim Swast","email":"swast@google.com","login":"tswast","count":1},{"name":"Tom Haines","email":"thomas.haines@gmail.com","login":"tom-haines","count":1},{"name":"Viacheslav Rostovtsev","email":"58152857+viacheslav-rostovtsev","login":"viacheslav-rostovtsev","count":1},{"name":"Walter Poupore","email":"WalterHub","login":"WalterHub","count":1},{"name":"Yasser Elsayed","email":"yebrahim","login":"yebrahim","count":1},{"name":"Yury Bandarchuk","email":"YuryBandarchuk16","login":"YuryBandarchuk16","count":1},{"name":"ajaaym","email":"34161822+ajaaym","login":"ajaaym","count":1},{"name":"google-cloud-policy-bot[bot]","email":"80869356+google-cloud-policy-bot[bot]","login":"google-cloud-policy-bot[bot]","count":1},{"name":"ivan-f-n","email":"ivanfdeznavarro@gmail.com","login":"ivan-f-n","count":1},{"name":"kenji yoshida","email":"6b656e6a69@gmail.com","login":"xuwei-k","count":1},{"name":"piaxc","email":"piac@google.com","login":"piaxc","count":1},{"name":"werman","email":"pjiyer@google.com","login":"vverman","count":1},{"name":"Frank Natividad","email":"frankyn","login":"frankyn","count":1},{"name":"Eric Anderson","email":"ejona@google.com","login":"ejona86","count":1},{"name":"Emmanouil Katefidis","email":"katefidis@ceid.upatras.gr","login":"man0s","count":1},{"name":"Dheeraj Panangat","email":"63601723+dpanangat","login":"dpanangat","count":1},{"name":"David Xia","email":"davidxia","login":"davidxia","count":1},{"name":"Daniel Norberg","email":"daniel.norberg@gmail.com","login":"danielnorberg","count":1},{"name":"Cody Oss","email":"6331106+codyoss","login":"codyoss","count":1},{"name":"Clément Denis","email":"clement.denis@gmail.com","login":"clementdenis","count":1},{"name":"Chaoren","email":"chaorenliu@google.com","login":"liuchaoren","count":1},{"name":"Bu Sun Kim","email":"8822365+busunkim96","login":"busunkim96","count":1},{"name":"Blake Li","email":"blakeli@google.com","login":"blakeli0","count":1},{"name":"Benjamin E. Coe","email":"bencoe@google.com","login":"bcoe","count":1},{"name":"BenWhitehead","email":"BenWhitehead","login":"BenWhitehead","count":1},{"name":"Andy Zhao","email":"andyzhao@google.com","login":"andyrzhao","count":1},{"name":"Fredrik Grönqvist","email":"fjnsson@gmail.com","login":"freddd","count":1},{"name":"Jeff Williams","email":"jeffrey.l.williams@gmail.com","login":"hegemonic","count":1},{"name":"Jiahua Huang","email":"jiahuah@google.com","login":"huangjiahua","count":1},{"name":"Jin Seop Kim","email":"jinseop@google.com","login":"jinseopkim0","count":1},{"name":"Jisha Abubaker","email":"jishaa@google.com","login":"jabubake","count":1},{"name":"Kevin Regan","email":"regank@google.com","login":"Galabar001","count":1},{"name":"Kurt Alfred Kluever","email":"kak@google.com","login":"kluever","count":1},{"name":"Liam Miller-Cushon","email":"cushon@google.com","login":"cushon","count":1},{"name":"Mario Jones Vimal","email":"mariovimal@gmail.com","login":"mario-vimal","count":1},{"name":"zul","email":"zul.kifal07@gmail.com","login":"zulkifal","count":1}],"past_year_committers":[{"name":"release-please[bot]","email":"55107282+release-please[bot]","login":"release-please[bot]","count":26},{"name":"Lawrence Qiu","email":"lawrenceqiu@google.com","login":"lqiu96","count":21},{"name":"Mend Renovate","email":"bot@renovateapp.com","login":"renovate-bot","count":16},{"name":"Leo","email":"39062083+lsirac","login":"lsirac","count":7},{"name":"Diego Marquez","email":"diegomarquezp@google.com","login":"diegomarquezp","count":6},{"name":"nbayati","email":"99771966+nbayati","login":"nbayati","count":4},{"name":"Mike Eltsufin","email":"meltsufin@google.com","login":"meltsufin","count":3},{"name":"Min Zhu","email":"zhumin@google.com","login":"zhumin8","count":2},{"name":"Mridula","email":"66699525+mpeddada1","login":"mpeddada1","count":2},{"name":"Tomo Suzuki","email":"suztomo@google.com","login":"suztomo","count":2},{"name":"Andy Zhao","email":"andyzhao@google.com","login":"andyrzhao","count":1},{"name":"Blake Li","email":"blakeli@google.com","login":"blakeli0","count":1},{"name":"Clément Denis","email":"clement.denis@gmail.com","login":"clementdenis","count":1},{"name":"Jiahua Huang","email":"jiahuah@google.com","login":"huangjiahua","count":1},{"name":"Jin Seop Kim","email":"jinseop@google.com","login":"jinseopkim0","count":1},{"name":"Joe Wang","email":"106995533+JoeWang1127","login":"JoeWang1127","count":1},{"name":"Steven van Rossum","email":"stevenvanrossum@gmail.com","login":"sjvanrossum","count":1},{"name":"Viacheslav Rostovtsev","email":"58152857+viacheslav-rostovtsev","login":"viacheslav-rostovtsev","count":1},{"name":"ldetmer","email":"1771267+ldetmer","login":"ldetmer","count":1},{"name":"werman","email":"pjiyer@google.com","login":"vverman","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-03-27T00:00:09.539Z","repositories_count":6204237,"commits_count":927072750,"contributors_count":35824690,"owners_count":1144655,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"googleapis/google-auth-library-java","html_url":"https://github.com/googleapis/google-auth-library-java","last_synced_at":"2025-10-30T18:17:02.100Z","status":"active","issues_count":116,"pull_requests_count":828,"avg_time_to_close_issue":16924833.766666666,"avg_time_to_close_pull_request":2373937.480882353,"issues_closed_count":60,"pull_requests_closed_count":680,"pull_request_authors_count":51,"issue_authors_count":77,"avg_comments_per_issue":1.5775862068965516,"avg_comments_per_pull_request":2.1533816425120773,"merged_pull_requests_count":561,"bot_issues_count":12,"bot_pull_requests_count":153,"past_year_issues_count":30,"past_year_pull_requests_count":407,"past_year_avg_time_to_close_issue":3071502.3,"past_year_avg_time_to_close_pull_request":533349.2950310559,"past_year_issues_closed_count":10,"past_year_pull_requests_closed_count":322,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":17,"past_year_avg_comments_per_issue":0.4666666666666667,"past_year_avg_comments_per_pull_request":2.2874692874692877,"past_year_bot_issues_count":2,"past_year_bot_pull_requests_count":53,"past_year_merged_pull_requests_count":274,"created_at":"2023-05-15T07:23:57.858Z","updated_at":"2025-10-30T18:17:02.101Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/googleapis%2Fgoogle-auth-library-java/issues","issue_labels_count":{"table":{"priority: p3":22,"type: feature request":19,"type: bug":14,"type: process":13,"priority: p2":12,"type: cleanup":5,"type: docs":4,"type: question":3,"size: xs":3,"priority: p4":3,"size: m":1,"android":1,"api: cloudkms":1,"api: gmail":1,"next major: breaking change":1,"help wanted":1,"triage me":1,":rotating_light:":1,"status: investigating":1,"feature":1}},"pull_request_labels_count":{"table":{"size: xs":374,"size: s":189,"size: m":82,"autorelease: snapshot":52,"size: l":49,"owl-bot-update-lock":36,"autorelease: pending":28,"size: u":26,"autorelease: published":24,"size: xl":21,"dependencies":13,"kokoro:force-run":10,"python":9,"automerge":9,"do not merge":7,"cla: yes":5,"samples":3,"autorelease: closed":2,"autorelease: tagged":2,"autorelease: triggered":2,"autorelease: failed":1,"owlbot:run":1}},"issue_author_associations_count":{"table":{"NONE":78,"CONTRIBUTOR":35,"MEMBER":3}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":693,"MEMBER":74,"NONE":53,"COLLABORATOR":8}},"issue_authors":{"table":{"zhumin8":11,"failure-checker[bot]":11,"lqiu96":9,"renovate-bot":4,"nbayati":3,"TimurSadykov":2,"jcdesignweb":2,"diegomarquezp":2,"Imyourhubbibugga":2,"Anouk1973":2,"sqrrrl":2,"aran964230":1,"shubha-rajan":1,"tzhou2021":1,"BalamuraliKirhsnan":1,"nusbahcodes":1,"roma2341":1,"ginolegigot":1,"dnl-trpp":1,"mpeddada1":1,"stanczykj":1,"imyjim":1,"Th-Barth":1,"jianglai":1,"weiminyu":1,"psx95":1,"yonghaoy":1,"SetoKaiba":1,"civetming":1,"julianSelser":1,"shivsrivastava":1,"dmdum":1,"shareefalis":1,"arttom":1,"rmehta19":1,"roque86":1,"douglassu":1,"gkatzioura":1,"HendPro12":1,"idontusenumbers":1,"jpharaoh-google":1,"thomasmey":1,"marcust":1,"sinelaw":1,"BhuvanaBilagi":1,"lloydaf":1,"z0mg":1,"torgeir":1,"ludoch":1,"dwiajik":1,"Ghilherme":1,"Vacxe":1,"alicejli":1,"noobiewoobie":1,"linnea-s":1,"play-yuhei-ueno":1,"sankalpkale88":1,"gaurav517":1,"ybhwang":1,"play-akira-kawakami":1,"hynek5":1,"fkorotkov":1,"forking-renovate[bot]":1,"andyrzhao":1,"qiufuzong":1,"erlendnils1":1,"cushon":1,"yetao":1,"sjvanrossum":1,"clementdenis":1,"ksauzz":1,"jmahonin":1,"henryrneh":1,"petedmarsh":1,"Gianlo98":1,"ashishb":1,"lzy-2022":1}},"pull_request_authors":{"table":{"renovate-bot":331,"release-please[bot]":104,"lqiu96":43,"meltsufin":38,"gcf-owl-bot[bot]":36,"lsirac":25,"zhumin8":24,"diegomarquezp":20,"nbayati":20,"aeitzman":19,"TimurSadykov":17,"ldetmer":14,"dependabot[bot]":13,"rmehta19":11,"mpeddada1":9,"clundin25":8,"huangjiahua":8,"BigTailWolf":8,"jinseopkim0":6,"andyrzhao":6,"vverman":5,"alicejli":5,"burkedavison":5,"viacheslav-rostovtsev":4,"sai-sunder-s":4,"suztomo":4,"sinelaw":3,"kluever":3,"blakeli0":2,"GrigorievNick":2,"julianSelser":2,"anthmgoogle":2,"sakthivelmanii":2,"cushon":2,"sjvanrossum":2,"yamandabbagh":2,"clementdenis":2,"misswinkelman89":2,"jurgispods":2,"chingor13":2,"JoeWang1127":1,"piaxc":1,"irataxy":1,"jmahonin":1,"edjeffreys":1,"ejona86":1,"arithmetic1728":1,"rng70-or":1,"rafaelmenta":1,"fkorotkov":1,"gkatzioura":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-10-30T00:00:25.546Z","repositories_count":11263014,"issues_count":35009938,"pull_requests_count":113611200,"authors_count":11042159,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"priority: p3":11,"type: bug":5,"type: cleanup":4,"type: docs":3,"priority: p2":3,"type: process":3,"type: feature request":2,"priority: p4":1}},"past_year_pull_request_labels_count":{"table":{"size: xs":194,"size: s":86,"size: m":34,"autorelease: snapshot":26,"size: l":20,"autorelease: pending":17,"size: xl":14,"autorelease: published":10,"do not merge":4,"automerge":3,"autorelease: closed":2,"kokoro:force-run":2,"autorelease: tagged":2,"autorelease: triggered":2,"size: u":1}},"past_year_issue_author_associations_count":{"table":{"CONTRIBUTOR":17,"NONE":11,"MEMBER":2}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":326,"MEMBER":55,"NONE":26}},"past_year_issue_authors":{"table":{"zhumin8":8,"lqiu96":4,"nbayati":3,"failure-checker[bot]":2,"aran964230":1,"clementdenis":1,"diegomarquezp":1,"dnl-trpp":1,"ginolegigot":1,"Anouk1973":1,"play-akira-kawakami":1,"play-yuhei-ueno":1,"psx95":1,"renovate-bot":1,"rmehta19":1,"yetao":1,"andyrzhao":1}},"past_year_pull_request_authors":{"table":{"renovate-bot":153,"release-please[bot]":53,"meltsufin":38,"lqiu96":33,"nbayati":20,"diegomarquezp":18,"lsirac":16,"zhumin8":12,"ldetmer":10,"huangjiahua":8,"rmehta19":7,"jinseopkim0":6,"mpeddada1":6,"andyrzhao":6,"vverman":5,"aeitzman":4,"viacheslav-rostovtsev":4,"suztomo":2,"sakthivelmanii":2,"clementdenis":2,"misswinkelman89":2}},"maintainers":[{"table":{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"}},{"table":{"login":"TimurSadykov","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/TimurSadykov"}},{"table":{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"}},{"table":{"login":"lsirac","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lsirac"}},{"table":{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"}},{"table":{"login":"suztomo","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"}},{"table":{"login":"arithmetic1728","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arithmetic1728"}}],"active_maintainers":[{"table":{"login":"meltsufin","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/meltsufin"}},{"table":{"login":"lqiu96","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lqiu96"}},{"table":{"login":"viacheslav-rostovtsev","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/viacheslav-rostovtsev"}},{"table":{"login":"suztomo","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/suztomo"}}]}},"events":{"total":{"CreateEvent":108,"CommitCommentEvent":1,"ReleaseEvent":14,"IssuesEvent":63,"WatchEvent":28,"DeleteEvent":77,"IssueCommentEvent":949,"PushEvent":441,"PullRequestEvent":430,"PullRequestReviewEvent":817,"PullRequestReviewCommentEvent":668,"ForkEvent":19},"last_year":{"CreateEvent":102,"CommitCommentEvent":1,"ReleaseEvent":13,"IssuesEvent":50,"WatchEvent":25,"DeleteEvent":73,"IssueCommentEvent":837,"PushEvent":411,"PullRequestReviewCommentEvent":603,"PullRequestReviewEvent":736,"PullRequestEvent":398,"ForkEvent":19}},"keywords":[],"dependencies":[{"ecosystem":"maven","filepath":"appengine/pom.xml","sha":null,"kind":"manifest","created_at":"2022-07-13T03:50:28.477Z","updated_at":"2022-07-13T03:50:28.477Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/appengine/pom.xml","dependencies":[{"id":212843928,"package_name":"com.google.auth:google-auth-library-credentials","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":212843929,"package_name":"com.google.auth:google-auth-library-oauth2-http","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":212843930,"package_name":"com.google.appengine:appengine-api-1.0-sdk","ecosystem":"maven","requirements":null,"direct":true,"kind":"provided","optional":false},{"id":212843931,"package_name":"com.google.guava:guava","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":212843932,"package_name":"org.junit.jupiter:junit-jupiter-api","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":212843933,"package_name":"com.google.auth:google-auth-library-oauth2-http","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"bom/pom.xml","sha":null,"kind":"manifest","created_at":"2022-07-13T03:50:28.598Z","updated_at":"2022-07-13T03:50:28.598Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/bom/pom.xml","dependencies":[{"id":212844296,"package_name":"com.google.auth:google-auth-library-credentials","ecosystem":"maven","requirements":"1.8.1-SNAPSHOT","direct":true,"kind":"runtime","optional":false},{"id":212844297,"package_name":"com.google.auth:google-auth-library-oauth2-http","ecosystem":"maven","requirements":"1.8.1-SNAPSHOT","direct":true,"kind":"runtime","optional":false},{"id":212844298,"package_name":"com.google.auth:google-auth-library-appengine","ecosystem":"maven","requirements":"1.8.1-SNAPSHOT","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"credentials/pom.xml","sha":null,"kind":"manifest","created_at":"2022-07-13T03:50:28.686Z","updated_at":"2022-07-13T03:50:28.686Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/credentials/pom.xml","dependencies":[{"id":212845473,"package_name":"org.junit.jupiter:junit-jupiter-api","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"oauth2_http/pom.xml","sha":null,"kind":"manifest","created_at":"2022-07-13T03:50:28.757Z","updated_at":"2022-07-13T03:50:28.757Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/oauth2_http/pom.xml","dependencies":[{"id":212846472,"package_name":"com.google.auto.value:auto-value-annotations","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":212846474,"package_name":"com.google.code.findbugs:jsr305","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":212846475,"package_name":"com.google.auth:google-auth-library-credentials","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":212846476,"package_name":"com.google.http-client:google-http-client","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":212846477,"package_name":"com.google.http-client:google-http-client-gson","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":212846478,"package_name":"com.google.guava:guava","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":212846479,"package_name":"org.junit.jupiter:junit-jupiter-api","ecosystem":"maven","requirements":null,"direct":true,"kind":"test","optional":false},{"id":212846480,"package_name":"org.hamcrest:hamcrest-core","ecosystem":"maven","requirements":"1.3","direct":true,"kind":"test","optional":false},{"id":212846481,"package_name":"junit:junit","ecosystem":"maven","requirements":"4.13.2","direct":true,"kind":"test","optional":false},{"id":212846482,"package_name":"org.mockito:mockito-core","ecosystem":"maven","requirements":"4.6.1","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"pom.xml","sha":null,"kind":"manifest","created_at":"2022-07-13T03:50:29.020Z","updated_at":"2022-07-13T03:50:29.020Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/pom.xml","dependencies":[{"id":212848037,"package_name":"org.junit:junit-bom","ecosystem":"maven","requirements":"5.8.2","direct":true,"kind":"import","optional":false},{"id":212848038,"package_name":"com.google.auth:google-auth-library-credentials","ecosystem":"maven","requirements":"1.8.1-SNAPSHOT","direct":true,"kind":"runtime","optional":false},{"id":212848039,"package_name":"com.google.auth:google-auth-library-oauth2-http","ecosystem":"maven","requirements":"1.8.1-SNAPSHOT","direct":true,"kind":"runtime","optional":false},{"id":212848040,"package_name":"com.google.auth:google-auth-library-cloudshell","ecosystem":"maven","requirements":"1.8.1-SNAPSHOT","direct":true,"kind":"runtime","optional":false},{"id":212848041,"package_name":"com.google.http-client:google-http-client-bom","ecosystem":"maven","requirements":"1.42.0","direct":true,"kind":"import","optional":false},{"id":212848042,"package_name":"com.google.appengine:appengine-api-1.0-sdk","ecosystem":"maven","requirements":"2.0.5","direct":true,"kind":"runtime","optional":false},{"id":212848043,"package_name":"com.google.guava:guava","ecosystem":"maven","requirements":"31.0.1-android","direct":true,"kind":"runtime","optional":false},{"id":212848044,"package_name":"com.google.code.findbugs:jsr305","ecosystem":"maven","requirements":"3.0.2","direct":true,"kind":"runtime","optional":false},{"id":212848045,"package_name":"com.google.auto.value:auto-value-annotations","ecosystem":"maven","requirements":"1.9","direct":true,"kind":"runtime","optional":false},{"id":212848046,"package_name":"com.google.appengine:appengine","ecosystem":"maven","requirements":"2.0.5","direct":true,"kind":"test","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/auto-release.yaml","sha":null,"kind":"manifest","created_at":"2023-01-14T06:13:16.161Z","updated_at":"2023-01-14T06:13:16.161Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/.github/workflows/auto-release.yaml","dependencies":[{"id":6892679981,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci.yaml","sha":null,"kind":"manifest","created_at":"2023-01-14T06:13:16.199Z","updated_at":"2023-01-14T06:13:16.199Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/.github/workflows/ci.yaml","dependencies":[{"id":6892679982,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6892679983,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/downstream.yaml","sha":null,"kind":"manifest","created_at":"2023-01-14T06:13:16.231Z","updated_at":"2023-01-14T06:13:16.231Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/.github/workflows/downstream.yaml","dependencies":[{"id":6892679984,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6892679985,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"maven","filepath":"samples/snippets/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T06:13:16.306Z","updated_at":"2023-01-14T06:13:16.306Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/samples/snippets/pom.xml","dependencies":[{"id":6892679986,"package_name":"com.google.auth:google-auth-library-oauth2-http","ecosystem":"maven","requirements":"1.13.0","direct":true,"kind":"runtime","optional":false},{"id":6892679987,"package_name":"com.google.cloud:google-iam-admin","ecosystem":"maven","requirements":"3.1.0","direct":true,"kind":"runtime","optional":false},{"id":6892679988,"package_name":"com.google.cloud:google-cloud-compute","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":6892679989,"package_name":"com.google.cloud:google-cloud-storage","ecosystem":"maven","requirements":null,"direct":true,"kind":"runtime","optional":false},{"id":6892679990,"package_name":"junit:junit","ecosystem":"maven","requirements":"4.13.2","direct":true,"kind":"test","optional":false},{"id":6892679991,"package_name":"com.google.truth:truth","ecosystem":"maven","requirements":"1.1.3","direct":true,"kind":"test","optional":false},{"id":6892679992,"package_name":"com.google.cloud:libraries-bom","ecosystem":"maven","requirements":"26.1.5","direct":true,"kind":"import","optional":false}]},{"ecosystem":"pypi","filepath":".kokoro/requirements.in","sha":null,"kind":"manifest","created_at":"2023-01-14T06:13:16.337Z","updated_at":"2023-01-14T06:13:16.337Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/.kokoro/requirements.in","dependencies":[{"id":6892679993,"package_name":"gcp-docuploader","ecosystem":"pypi","requirements":"==0.6.3","direct":true,"kind":"runtime","optional":false},{"id":6892679994,"package_name":"google-crc32c","ecosystem":"pypi","requirements":"==1.3.0","direct":true,"kind":"runtime","optional":false},{"id":6892679995,"package_name":"googleapis-common-protos","ecosystem":"pypi","requirements":"==1.56.3","direct":true,"kind":"runtime","optional":false},{"id":6892679996,"package_name":"gcp-releasetool","ecosystem":"pypi","requirements":"==1.9.1","direct":true,"kind":"runtime","optional":false},{"id":6892679997,"package_name":"cryptography","ecosystem":"pypi","requirements":"==38.0.3","direct":true,"kind":"runtime","optional":false},{"id":6892679998,"package_name":"cachetools","ecosystem":"pypi","requirements":"==4.2.4","direct":true,"kind":"runtime","optional":false},{"id":6892679999,"package_name":"cffi","ecosystem":"pypi","requirements":"==1.15.1","direct":true,"kind":"runtime","optional":false},{"id":6892680000,"package_name":"jeepney","ecosystem":"pypi","requirements":"==0.7.1","direct":true,"kind":"runtime","optional":false},{"id":6892680001,"package_name":"jinja2","ecosystem":"pypi","requirements":"==3.0.3","direct":true,"kind":"runtime","optional":false},{"id":6892680002,"package_name":"markupsafe","ecosystem":"pypi","requirements":"==2.0.1","direct":true,"kind":"runtime","optional":false},{"id":6892680003,"package_name":"keyring","ecosystem":"pypi","requirements":"==23.4.1","direct":true,"kind":"runtime","optional":false},{"id":6892680004,"package_name":"packaging","ecosystem":"pypi","requirements":"==21.3","direct":true,"kind":"runtime","optional":false},{"id":6892680005,"package_name":"protobuf","ecosystem":"pypi","requirements":"==3.19.5","direct":true,"kind":"runtime","optional":false},{"id":6892680006,"package_name":"pyjwt","ecosystem":"pypi","requirements":"==2.4.0","direct":true,"kind":"runtime","optional":false},{"id":6892680007,"package_name":"pyparsing","ecosystem":"pypi","requirements":"==3.0.9","direct":true,"kind":"runtime","optional":false},{"id":6892680008,"package_name":"pycparser","ecosystem":"pypi","requirements":"==2.21","direct":true,"kind":"runtime","optional":false},{"id":6892680009,"package_name":"pyperclip","ecosystem":"pypi","requirements":"==1.8.2","direct":true,"kind":"runtime","optional":false},{"id":6892680010,"package_name":"python-dateutil","ecosystem":"pypi","requirements":"==2.8.2","direct":true,"kind":"runtime","optional":false},{"id":6892680011,"package_name":"requests","ecosystem":"pypi","requirements":"==2.27.1","direct":true,"kind":"runtime","optional":false},{"id":6892680012,"package_name":"certifi","ecosystem":"pypi","requirements":"==2022.9.24","direct":true,"kind":"runtime","optional":false},{"id":6892680013,"package_name":"importlib-metadata","ecosystem":"pypi","requirements":"==4.8.3","direct":true,"kind":"runtime","optional":false},{"id":6892680014,"package_name":"zipp","ecosystem":"pypi","requirements":"==3.6.0","direct":true,"kind":"runtime","optional":false},{"id":6892680015,"package_name":"google_api_core","ecosystem":"pypi","requirements":"==2.8.2","direct":true,"kind":"runtime","optional":false},{"id":6892680016,"package_name":"google-cloud-storage","ecosystem":"pypi","requirements":"==2.0.0","direct":true,"kind":"runtime","optional":false},{"id":6892680017,"package_name":"google-resumable-media","ecosystem":"pypi","requirements":"==2.3.3","direct":true,"kind":"runtime","optional":false},{"id":6892680018,"package_name":"google-cloud-core","ecosystem":"pypi","requirements":"==2.3.1","direct":true,"kind":"runtime","optional":false},{"id":6892680019,"package_name":"typing-extensions","ecosystem":"pypi","requirements":"==4.1.1","direct":true,"kind":"runtime","optional":false},{"id":6892680020,"package_name":"urllib3","ecosystem":"pypi","requirements":"==1.26.12","direct":true,"kind":"runtime","optional":false},{"id":6892680021,"package_name":"rsa","ecosystem":"pypi","requirements":"==4.9","direct":true,"kind":"runtime","optional":false},{"id":6892680022,"package_name":"six","ecosystem":"pypi","requirements":"==1.16.0","direct":true,"kind":"runtime","optional":false},{"id":6892680023,"package_name":"attrs","ecosystem":"pypi","requirements":"==22.1.0","direct":true,"kind":"runtime","optional":false},{"id":6892680024,"package_name":"google-auth","ecosystem":"pypi","requirements":"==2.14.1","direct":true,"kind":"runtime","optional":false},{"id":6892680025,"package_name":"idna","ecosystem":"pypi","requirements":"==3.4","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":".kokoro/requirements.txt","sha":null,"kind":"lockfile","created_at":"2023-01-14T06:13:16.369Z","updated_at":"2023-01-14T06:13:16.369Z","repository_link":"https://github.com/googleapis/google-auth-library-java/blob/main/.kokoro/requirements.txt","dependencies":[{"id":6892680026,"package_name":"attrs","ecosystem":"pypi","requirements":"==22.1.0","direct":false,"kind":"runtime","optional":false},{"id":6892680027,"package_name":"cachetools","ecosystem":"pypi","requirements":"==4.2.4","direct":false,"kind":"runtime","optional":false},{"id":6892680028,"package_name":"certifi","ecosystem":"pypi","requirements":"==2022.9.24","direct":false,"kind":"runtime","optional":false},{"id":6892680029,"package_name":"cffi","ecosystem":"pypi","requirements":"==1.15.1","direct":false,"kind":"runtime","optional":false},{"id":6892680030,"package_name":"charset-normalizer","ecosystem":"pypi","requirements":"==2.0.12","direct":false,"kind":"runtime","optional":false},{"id":6892680031,"package_name":"click","ecosystem":"pypi","requirements":"==8.0.4","direct":false,"kind":"runtime","optional":false},{"id":6892680032,"package_name":"colorlog","ecosystem":"pypi","requirements":"==6.7.0","direct":false,"kind":"runtime","optional":false},{"id":6892680033,"package_name":"cryptography","ecosystem":"pypi","requirements":"==38.0.3","direct":false,"kind":"runtime","optional":false},{"id":6892680034,"package_name":"gcp-docuploader","ecosystem":"pypi","requirements":"==0.6.3","direct":false,"kind":"runtime","optional":false},{"id":6892680035,"package_name":"gcp-releasetool","ecosystem":"pypi","requirements":"==1.9.1","direct":false,"kind":"runtime","optional":false},{"id":6892680036,"package_name":"google-api-core","ecosystem":"pypi","requirements":"==2.8.2","direct":false,"kind":"runtime","optional":false},{"id":6892680037,"package_name":"google-auth","ecosystem":"pypi","requirements":"==2.14.1","direct":false,"kind":"runtime","optional":false},{"id":6892680038,"package_name":"google-cloud-core","ecosystem":"pypi","requirements":"==2.3.1","direct":false,"kind":"runtime","optional":false},{"id":6892680039,"package_name":"google-cloud-storage","ecosystem":"pypi","requirements":"==2.0.0","direct":false,"kind":"runtime","optional":false},{"id":6892680040,"package_name":"google-crc32c","ecosystem":"pypi","requirements":"==1.3.0","direct":false,"kind":"runtime","optional":false},{"id":6892680041,"package_name":"google-resumable-media","ecosystem":"pypi","requirements":"==2.3.3","direct":false,"kind":"runtime","optional":false},{"id":6892680042,"package_name":"googleapis-common-protos","ecosystem":"pypi","requirements":"==1.56.3","direct":false,"kind":"runtime","optional":false},{"id":6892680043,"package_name":"idna","ecosystem":"pypi","requirements":"==3.4","direct":false,"kind":"runtime","optional":false},{"id":6892680044,"package_name":"importlib-metadata","ecosystem":"pypi","requirements":"==4.8.3","direct":false,"kind":"runtime","optional":false},{"id":6892680045,"package_name":"jeepney","ecosystem":"pypi","requirements":"==0.7.1","direct":false,"kind":"runtime","optional":false},{"id":6892680046,"package_name":"jinja2","ecosystem":"pypi","requirements":"==3.0.3","direct":false,"kind":"runtime","optional":false},{"id":6892680047,"package_name":"keyring","ecosystem":"pypi","requirements":"==23.4.1","direct":false,"kind":"runtime","optional":false},{"id":6892680048,"package_name":"markupsafe","ecosystem":"pypi","requirements":"==2.0.1","direct":false,"kind":"runtime","optional":false},{"id":6892680049,"package_name":"packaging","ecosystem":"pypi","requirements":"==21.3","direct":false,"kind":"runtime","optional":false},{"id":6892680050,"package_name":"protobuf","ecosystem":"pypi","requirements":"==3.19.5","direct":false,"kind":"runtime","optional":false},{"id":6892680051,"package_name":"pyasn1","ecosystem":"pypi","requirements":"==0.4.8","direct":false,"kind":"runtime","optional":false},{"id":6892680052,"package_name":"pyasn1-modules","ecosystem":"pypi","requirements":"==0.2.8","direct":false,"kind":"runtime","optional":false},{"id":6892680053,"package_name":"pycparser","ecosystem":"pypi","requirements":"==2.21","direct":false,"kind":"runtime","optional":false},{"id":6892680054,"package_name":"pyjwt","ecosystem":"pypi","requirements":"==2.4.0","direct":false,"kind":"runtime","optional":false},{"id":6892680055,"package_name":"pyparsing","ecosystem":"pypi","requirements":"==3.0.9","direct":false,"kind":"runtime","optional":false},{"id":6892680056,"package_name":"pyperclip","ecosystem":"pypi","requirements":"==1.8.2","direct":false,"kind":"runtime","optional":false},{"id":6892680057,"package_name":"python-dateutil","ecosystem":"pypi","requirements":"==2.8.2","direct":false,"kind":"runtime","optional":false},{"id":6892680058,"package_name":"requests","ecosystem":"pypi","requirements":"==2.27.1","direct":false,"kind":"runtime","optional":false},{"id":6892680059,"package_name":"rsa","ecosystem":"pypi","requirements":"==4.9","direct":false,"kind":"runtime","optional":false},{"id":6892680060,"package_name":"secretstorage","ecosystem":"pypi","requirements":"==3.3.3","direct":false,"kind":"runtime","optional":false},{"id":6892680061,"package_name":"six","ecosystem":"pypi","requirements":"==1.16.0","direct":false,"kind":"runtime","optional":false},{"id":6892680062,"package_name":"typing-extensions","ecosystem":"pypi","requirements":"==4.1.1","direct":false,"kind":"runtime","optional":false},{"id":6892680063,"package_name":"urllib3","ecosystem":"pypi","requirements":"==1.26.12","direct":false,"kind":"runtime","optional":false},{"id":6892680064,"package_name":"zipp","ecosystem":"pypi","requirements":"==3.6.0","direct":false,"kind":"runtime","optional":false}]}],"score":33.46069291848428,"created_at":"2025-04-28T21:38:21.177Z","updated_at":"2026-06-21T16:01:07.687Z","avatar_url":"https://github.com/googleapis.png","language":"Java","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/360308","html_url":"https://summary.ecosyste.ms/projects/360308"}