{"id":360789,"url":"https://github.com/google/error-prone","last_synced_at":"2026-06-21T02:02:12.749Z","repository":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2026-05-20T22:15:49.000Z","size":172370,"stargazers_count":7177,"open_issues_count":483,"forks_count":793,"subscribers_count":150,"default_branch":"master","last_synced_at":"2026-05-21T04:03:23.107Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2026-05-20T22:05:23.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":92,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33303933,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-21T12:23:38.849Z","status":"ssl_error","status_checked_at":"2026-05-21T12:22:11.673Z","response_time":62,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2823,"last_synced_at":"2026-05-16T16:05:42.907Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":2113149,"followers":72588,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2026-05-16T16:05:42.908Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"packages":[{"id":5107599,"name":"com.google.errorprone:error_prone_docgen","ecosystem":"maven","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","homepage":"https://errorprone.info","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":114,"first_release_published_at":"2012-05-08T18:12:30.000Z","latest_release_published_at":"2025-10-22T14:14:10.000Z","latest_release_number":"2.43.0","last_synced_at":"2025-10-30T07:49:26.485Z","created_at":"2022-07-30T03:47:56.018Z","updated_at":"2025-10-30T07:49:26.486Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_docgen/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_docgen/","metadata":{"distribution_repositories":["https://central.sonatype.com/repository/maven-snapshots/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:34.749Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":2.9201268852715576,"forks_count":5.501973302728916,"average":22.315475629159536},"purl":"pkg:maven/com.google.errorprone/error_prone_docgen","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_docgen","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_docgen","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_docgen/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_docgen/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_docgen/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_docgen/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_docgen/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_docgen/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4869598,"name":"com.google.errorprone:error_prone_annotations","ecosystem":"maven","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","homepage":"https://errorprone.info","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":86,"first_release_published_at":"2015-01-28T22:43:58.000Z","latest_release_published_at":"2025-10-22T14:14:10.000Z","latest_release_number":"2.43.0","last_synced_at":"2025-10-30T07:49:32.981Z","created_at":"2022-07-26T19:40:27.405Z","updated_at":"2025-10-30T07:49:32.981Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_annotations/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_annotations/","metadata":{"distribution_repositories":["https://central.sonatype.com/repository/maven-snapshots/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:53.679Z","dependent_packages_count":1900,"downloads":null,"downloads_period":null,"dependent_repos_count":3654,"rankings":{"downloads":null,"dependent_repos_count":0.16418224228894074,"dependent_packages_count":0.04064511607884752,"stargazers_count":3.6210193314579184,"forks_count":6.698235040895393,"docker_downloads_count":0.007208000880977885,"average":2.1062579463204156},"purl":"pkg:maven/com.google.errorprone/error_prone_annotations","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_annotations","docker_dependents_count":16063,"docker_downloads_count":8243981076,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_annotations","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_annotations/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_annotations/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_annotations/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_annotations/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_annotations/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_annotations/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5034142,"name":"com.google.errorprone:error_prone_docgen_processor","ecosystem":"maven","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","homepage":"https://errorprone.info","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":72,"first_release_published_at":"2016-10-31T20:41:48.000Z","latest_release_published_at":"2025-10-22T14:14:10.000Z","latest_release_number":"2.43.0","last_synced_at":"2025-10-30T07:49:36.877Z","created_at":"2022-07-27T16:57:26.003Z","updated_at":"2025-10-30T07:49:36.878Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_docgen_processor/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_docgen_processor/","metadata":{"distribution_repositories":["https://central.sonatype.com/repository/maven-snapshots/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:48.075Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":20,"rankings":{"downloads":null,"dependent_repos_count":5.398153358176827,"dependent_packages_count":32.98043825203798,"stargazers_count":3.6197944304385525,"forks_count":6.704739553818335,"docker_downloads_count":null,"average":12.175781398617923},"purl":"pkg:maven/com.google.errorprone/error_prone_docgen_processor","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_docgen_processor","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_docgen_processor","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_docgen_processor/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_docgen_processor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_docgen_processor/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_docgen_processor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_docgen_processor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_docgen_processor/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4715825,"name":"com.google.errorprone:error_prone_refaster","ecosystem":"maven","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","homepage":"https://errorprone.info","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":70,"first_release_published_at":"2017-02-15T01:25:18.000Z","latest_release_published_at":"2025-10-22T14:14:10.000Z","latest_release_number":"2.43.0","last_synced_at":"2025-10-30T07:50:01.437Z","created_at":"2022-07-25T21:55:44.322Z","updated_at":"2025-10-30T07:50:01.437Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_refaster/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_refaster/","metadata":{"distribution_repositories":["https://central.sonatype.com/repository/maven-snapshots/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:15.149Z","dependent_packages_count":24,"downloads":null,"downloads_period":null,"dependent_repos_count":31,"rankings":{"downloads":null,"dependent_repos_count":4.1504069517164055,"dependent_packages_count":2.708005886534053,"stargazers_count":3.6210193314579184,"forks_count":6.698235040895393,"docker_downloads_count":null,"average":4.294416802650942},"purl":"pkg:maven/com.google.errorprone/error_prone_refaster","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_refaster","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_refaster","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_refaster/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_refaster/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_refaster/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_refaster/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_refaster/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_refaster/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4889347,"name":"com.google.errorprone:error_prone_parent","ecosystem":"maven","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","homepage":"https://errorprone.info","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":114,"first_release_published_at":"2012-05-08T18:11:54.000Z","latest_release_published_at":"2025-10-22T14:14:10.000Z","latest_release_number":"2.43.0","last_synced_at":"2025-10-30T07:49:05.492Z","created_at":"2022-07-26T21:19:12.468Z","updated_at":"2025-10-30T07:49:05.492Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_parent/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_parent/","metadata":{"distribution_repositories":["https://central.sonatype.com/repository/maven-snapshots/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:15.022Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":2,"rankings":{"downloads":null,"dependent_repos_count":16.11035797458114,"dependent_packages_count":50.149481470505194,"stargazers_count":3.6197944304385525,"forks_count":6.704739553818335,"docker_downloads_count":null,"average":19.146093357335804},"purl":"pkg:maven/com.google.errorprone/error_prone_parent","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_parent","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_parent","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_parent/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_parent/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_parent/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_parent/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_parent/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_parent/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":3885464,"name":"github.com/google/error-prone","ecosystem":"go","description":"","homepage":null,"licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"github.com/google","versions_count":83,"first_release_published_at":"2015-02-02T23:58:24.000Z","latest_release_published_at":"2025-10-22T14:10:00.000Z","latest_release_number":"v2.43.0+incompatible","last_synced_at":"2025-10-30T07:49:20.689Z","created_at":"2022-04-11T23:21:36.878Z","updated_at":"2025-10-30T07:49:20.689Z","registry_url":"https://pkg.go.dev/github.com/google/error-prone","install_command":"go get github.com/google/error-prone","documentation_url":"https://pkg.go.dev/github.com/google/error-prone#section-documentation","metadata":{},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:35.667Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":4.716716996980181,"dependent_packages_count":9.552826830390176,"stargazers_count":0.8261159360332245,"forks_count":1.087431186151391,"docker_downloads_count":null,"average":4.045772737388743},"purl":"pkg:golang/github.com/google/error-prone","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/google/error-prone","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/google/error-prone","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/google/error-prone/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Ferror-prone/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Ferror-prone/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Ferror-prone/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Ferror-prone/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoogle%2Ferror-prone/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":1982402,"maintainers_count":0,"namespaces_count":748632,"keywords_count":111330,"github":"golang","metadata":{"funded_packages_count":52718},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2025-10-30T05:50:02.839Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":4825083,"name":"com.google.errorprone:error_prone_check_api","ecosystem":"maven","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","homepage":"https://errorprone.info","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":72,"first_release_published_at":"2016-10-31T20:39:48.000Z","latest_release_published_at":"2025-10-22T14:14:10.000Z","latest_release_number":"2.43.0","last_synced_at":"2025-10-30T07:49:20.617Z","created_at":"2022-07-26T15:32:40.097Z","updated_at":"2025-10-30T07:49:20.617Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_check_api/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_check_api/","metadata":{"distribution_repositories":["https://central.sonatype.com/repository/maven-snapshots/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:48.073Z","dependent_packages_count":51,"downloads":null,"downloads_period":null,"dependent_repos_count":53,"rankings":{"downloads":null,"dependent_repos_count":2.9462762592002307,"dependent_packages_count":1.3803321687072652,"stargazers_count":3.6210193314579184,"forks_count":6.698235040895393,"docker_downloads_count":2.276326722662155,"average":3.3844379045845927},"purl":"pkg:maven/com.google.errorprone/error_prone_check_api","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_check_api","docker_dependents_count":64,"docker_downloads_count":297175,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_check_api","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_check_api/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_check_api/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_check_api/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_check_api/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_check_api/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_check_api/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5060430,"name":"com.google.errorprone:error_prone_annotation","ecosystem":"maven","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","homepage":"https://errorprone.info","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":114,"first_release_published_at":"2012-05-08T18:12:01.000Z","latest_release_published_at":"2025-10-22T14:14:10.000Z","latest_release_number":"2.43.0","last_synced_at":"2025-10-30T07:49:20.630Z","created_at":"2022-07-28T02:37:45.419Z","updated_at":"2025-10-30T07:49:20.630Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_annotation/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_annotation/","metadata":{"distribution_repositories":["https://central.sonatype.com/repository/maven-snapshots/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:15.060Z","dependent_packages_count":57,"downloads":null,"downloads_period":null,"dependent_repos_count":82,"rankings":{"downloads":null,"dependent_repos_count":2.21125449248666,"dependent_packages_count":1.2291643724534234,"stargazers_count":3.620819109211224,"forks_count":6.698235040895393,"docker_downloads_count":2.05808447376588,"average":3.1635114977625163},"purl":"pkg:maven/com.google.errorprone/error_prone_annotation","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_annotation","docker_dependents_count":112,"docker_downloads_count":806779,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_annotation","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_annotation/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_annotation/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_annotation/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_annotation/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_annotation/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_annotation/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5034143,"name":"com.google.errorprone:error_prone_test_helpers","ecosystem":"maven","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","homepage":"https://errorprone.info","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":72,"first_release_published_at":"2016-10-31T20:40:03.000Z","latest_release_published_at":"2025-10-22T14:14:10.000Z","latest_release_number":"2.43.0","last_synced_at":"2025-10-30T07:50:01.327Z","created_at":"2022-07-27T16:57:26.766Z","updated_at":"2025-10-30T07:50:01.328Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_test_helpers/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_test_helpers/","metadata":{"distribution_repositories":["https://central.sonatype.com/repository/maven-snapshots/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:51.498Z","dependent_packages_count":29,"downloads":null,"downloads_period":null,"dependent_repos_count":127,"rankings":{"downloads":null,"dependent_repos_count":1.6284075323609208,"dependent_packages_count":2.33879606363063,"stargazers_count":3.6210193314579184,"forks_count":6.698235040895393,"docker_downloads_count":null,"average":3.5716144920862156},"purl":"pkg:maven/com.google.errorprone/error_prone_test_helpers","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_test_helpers","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_test_helpers","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_test_helpers/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_test_helpers/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_test_helpers/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_test_helpers/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_test_helpers/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_test_helpers/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4825102,"name":"com.google.errorprone:error_prone_ant","ecosystem":"maven","description":"Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/","homepage":"http://nexus.sonatype.org/oss-repository-hosting.html","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":57,"first_release_published_at":"2012-05-08T18:12:42.000Z","latest_release_published_at":"2018-04-20T21:25:00.000Z","latest_release_number":"2.3.1","last_synced_at":"2025-10-30T07:50:02.040Z","created_at":"2022-07-26T15:32:45.563Z","updated_at":"2025-10-30T07:50:02.040Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_ant/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_ant/","metadata":{"repositories":["https://oss.sonatype.org/content/repositories/snapshots"],"distribution_repositories":["https://oss.sonatype.org/service/local/staging/deploy/maven2/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:25.986Z","dependent_packages_count":6,"downloads":null,"downloads_period":null,"dependent_repos_count":17,"rankings":{"downloads":null,"dependent_repos_count":5.89955025490895,"dependent_packages_count":9.706364113305325,"stargazers_count":3.5831427690360718,"forks_count":6.410169124979475,"docker_downloads_count":2.295382002987621,"average":5.578921653043489},"purl":"pkg:maven/com.google.errorprone/error_prone_ant","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_ant","docker_dependents_count":2,"docker_downloads_count":264082,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_ant","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_ant/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_ant/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_ant/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_ant/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_ant/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_ant/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4775349,"name":"com.google.errorprone:error_prone_core","ecosystem":"maven","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","homepage":"https://errorprone.info","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":114,"first_release_published_at":"2012-05-08T18:12:20.000Z","latest_release_published_at":"2025-10-22T14:14:10.000Z","latest_release_number":"2.43.0","last_synced_at":"2025-10-30T07:50:01.603Z","created_at":"2022-07-26T08:48:01.356Z","updated_at":"2025-10-30T07:50:01.603Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_core/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_core/","metadata":{"distribution_repositories":["https://central.sonatype.com/repository/maven-snapshots/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:53.651Z","dependent_packages_count":140,"downloads":null,"downloads_period":null,"dependent_repos_count":310,"rankings":{"downloads":null,"dependent_repos_count":0.8519456596822473,"dependent_packages_count":0.5385989220012654,"stargazers_count":3.6210193314579184,"forks_count":6.698235040895393,"docker_downloads_count":2.276126500415461,"average":2.797185090890457},"purl":"pkg:maven/com.google.errorprone/error_prone_core","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_core","docker_dependents_count":67,"docker_downloads_count":297500,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_core/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_core/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_core/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_core/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_core/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_core/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4765970,"name":"com.google.errorprone:error_prone_type_annotations","ecosystem":"maven","description":"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.","homepage":"https://errorprone.info","licenses":"Apache 2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/google/error-prone","keywords_array":[],"namespace":"com.google.errorprone","versions_count":59,"first_release_published_at":"2018-04-18T00:28:15.000Z","latest_release_published_at":"2025-10-22T14:14:10.000Z","latest_release_number":"2.43.0","last_synced_at":"2025-10-30T07:50:01.603Z","created_at":"2022-07-26T04:54:39.451Z","updated_at":"2025-10-30T07:50:01.603Z","registry_url":"https://central.sonatype.com/artifact/com.google.errorprone/error_prone_type_annotations/","install_command":null,"documentation_url":"https://appdoc.app/artifact/com.google.errorprone/error_prone_type_annotations/","metadata":{"distribution_repositories":["https://central.sonatype.com/repository/maven-snapshots/"]},"repo_metadata":{"id":19939649,"uuid":"23206290","full_name":"google/error-prone","owner":"google","description":"Catch common Java mistakes as compile-time errors","archived":false,"fork":false,"pushed_at":"2025-10-17T10:54:31.000Z","size":156204,"stargazers_count":7064,"open_issues_count":467,"forks_count":769,"subscribers_count":155,"default_branch":"master","last_synced_at":"2025-10-18T01:25:52.558Z","etag":null,"topics":["java","static-analysis"],"latest_commit_sha":null,"homepage":"https://errorprone.info","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"react-community/react-native-maps","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/google.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-08-21T23:26:50.000Z","updated_at":"2025-10-17T10:54:33.000Z","dependencies_parsed_at":"2024-02-05T20:30:15.506Z","dependency_job_id":"df70c356-1485-4a92-89cd-b25bceded0c6","html_url":"https://github.com/google/error-prone","commit_stats":{"total_commits":6445,"total_committers":313,"mean_commits":20.59105431309904,"dds":0.6884406516679596,"last_synced_commit":"5a3d7f970fd877b97172cb12602c2197889df5f3"},"previous_names":[],"tags_count":85,"template":false,"template_full_name":null,"purl":"pkg:github/google/error-prone","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","download_url":"https://codeload.github.com/google/error-prone/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/sbom","scorecard":{"id":436860,"data":{"date":"2025-08-11","repo":{"name":"github.com/google/error-prone","commit":"4245faa176fb4ce01e21742f811b8a8f21942d79"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 16 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:18","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/ci.yml:17","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:128","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: COPYING:0","Info: FSF or OSI recognized license: Apache License 2.0: COPYING:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/google/.github/SECURITY.md:1","Info: Found linked content: github.com/google/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/google/.github/SECURITY.md:1","Info: Found text in security policy: github.com/google/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/ci.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/google/error-prone/release.yml/master?enable=pin","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/ci.yml:97"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T04:53:54.587Z","repository_id":19939649,"created_at":"2025-08-19T04:53:54.588Z","updated_at":"2025-08-19T04:53:54.588Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279962635,"owners_count":26251485,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-19T02:00:07.647Z","response_time":64,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"google","name":"Google","uuid":"1342004","kind":"organization","description":"Google ❤️ Open Source","email":"opensource@google.com","website":"https://opensource.google/","location":"United States of America","twitter":"GoogleOSS","company":null,"icon_url":"https://avatars.githubusercontent.com/u/1342004?v=4","repositories_count":2773,"last_synced_at":"2025-08-12T15:55:14.931Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/google","funding_links":[],"total_stars":1967885,"followers":58475,"following":0,"created_at":"2022-11-02T16:20:58.973Z","updated_at":"2025-08-12T15:55:14.931Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/google/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-20T00:55:51.465Z","dependent_packages_count":42,"downloads":null,"downloads_period":null,"dependent_repos_count":52,"rankings":{"downloads":null,"dependent_repos_count":2.9815094755178246,"dependent_packages_count":1.6035831845011652,"stargazers_count":3.6210193314579184,"forks_count":6.698235040895393,"docker_downloads_count":2.2060487140726206,"average":3.4220791492889844},"purl":"pkg:maven/com.google.errorprone/error_prone_type_annotations","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_type_annotations","docker_dependents_count":159,"docker_downloads_count":56434754,"usage_url":"https://repos.ecosyste.ms/usage/maven/com.google.errorprone:error_prone_type_annotations","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/com.google.errorprone:error_prone_type_annotations/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-19T23:02:10.478Z","issues_count":350,"pull_requests_count":1457,"avg_time_to_close_issue":10918266.527638191,"avg_time_to_close_pull_request":767447.3400464756,"issues_closed_count":199,"pull_requests_closed_count":1291,"pull_request_authors_count":55,"issue_authors_count":244,"avg_comments_per_issue":2.1028571428571428,"avg_comments_per_pull_request":0.1757035003431709,"merged_pull_requests_count":857,"bot_issues_count":6,"bot_pull_requests_count":1310,"past_year_issues_count":142,"past_year_pull_requests_count":822,"past_year_avg_time_to_close_issue":483392.3333333333,"past_year_avg_time_to_close_pull_request":131179.42365887208,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":727,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":97,"past_year_avg_comments_per_issue":1.1549295774647887,"past_year_avg_comments_per_pull_request":0.08759124087591241,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":757,"past_year_merged_pull_requests_count":581,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","maintainers":[{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"},{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"},{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"},{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}],"active_maintainers":[{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"},{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"},{"login":"mihnita","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_type_annotations/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_type_annotations/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_type_annotations/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_type_annotations/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/com.google.errorprone:error_prone_type_annotations/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":562220,"maintainers_count":0,"namespaces_count":74519,"keywords_count":34968,"github":"maven-central","metadata":{"funded_packages_count":38540},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2025-10-29T05:15:08.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":18292,"full_name":"google/error-prone","default_branch":"master","total_commits":6815,"total_committers":320,"total_bot_commits":18,"total_bot_committers":1,"mean_commits":21.296875,"dds":0.6921496698459281,"past_year_total_commits":464,"past_year_total_committers":29,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":16.0,"past_year_dds":0.5517241379310345,"last_synced_at":"2025-10-23T06:52:21.219Z","last_synced_commit":"a97374a2b2f912257ff63e780e7caa059c2f2f7a","created_at":"2023-03-07T11:37:43.036Z","updated_at":"2025-10-23T06:35:59.873Z","committers":[{"name":"cushon","email":"cushon@google.com","login":"cushon","count":2098},{"name":"ghm","email":"ghm@google.com","login":"graememorgan","count":1123},{"name":"Eddie Aftandilian","email":"eaftan@google.com","login":null,"count":558},{"name":"Kurt Alfred Kluever","email":"kak@google.com","login":"kluever","count":283},{"name":"glorioso","email":"glorioso@google.com","login":"nick-someone","count":279},{"name":"cpovirk","email":"cpovirk@google.com","login":"cpovirk","count":275},{"name":"Error Prone Team","email":"java-team-github-bot@google.com","login":"java-team-github-bot","count":216},{"name":"bhagwani","email":"bhagwani@google.com","login":"sumitbhagwani","count":212},{"name":"Alex Eagle","email":"alexeagle@google.com","login":"alexeagle","count":199},{"name":"Alan Malloy","email":"amalloy@google.com","login":"amalloy","count":106},{"name":"awturner","email":"awturner@google.com","login":"awturner","count":95},{"name":"epmjohnston","email":"epmjohnston@google.com","login":"epmjohnston","count":93},{"name":"lowasser","email":"lowasser@google.com","login":"lowasser","count":65},{"name":"andrewrice","email":"andrewrice@google.com","login":null,"count":57},{"name":"ronshapiro","email":"ronshapiro@google.com","login":"ronshapiro","count":45},{"name":"kmb","email":"kmb@google.com","login":"kevin1e100","count":41},{"name":"Stephan Schroevers","email":"stephan.schroevers@teampicnic.com","login":"Stephan202","count":37},{"name":"Steven Goldfeder","email":"sgoldfed@gmail.com","login":"sgoldfed","count":29},{"name":"markbrady","email":"markbrady@google.com","login":"markhbrady","count":26},{"name":"Éamonn McManus","email":"emcmanus@google.com","login":"eamonnmcmanus","count":25},{"name":"avenet","email":"avenet@google.com","login":null,"count":24},{"name":"Colin Decker","email":"cgdecker@google.com","login":"cgdecker","count":22},{"name":"Bill Pugh","email":"pugh@cs.umd.edu","login":"billpugh","count":21},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":18},{"name":"gak","email":"gak@google.com","login":"gk5885","count":18},{"name":"Rick Ossendrijver","email":"rick.ossendrijver@gmail.com","login":"rickie","count":17},{"name":"Manu Sridharan","email":"msridhar@uber.com","login":"msridhar","count":17},{"name":"Matthew Dempsky","email":"mdempsky@google.com","login":"mdempsky","count":16},{"name":"Simon Nickerson","email":"sjnickerson@google.com","login":"sjnickerson","count":16},{"name":"konne","email":"konne@google.com","login":"konne88","count":16},{"name":"Chaoren Lin","email":"aoe@google.com","login":"chaoren","count":16},{"name":"bennostein","email":"bennostein@google.com","login":null,"count":16},{"name":"clm","email":"clm@google.com","login":null,"count":15},{"name":"dpb","email":"dpb@google.com","login":"netdpb","count":15},{"name":"Felix Berger","email":"flx@google.com","login":null,"count":14},{"name":"seibelsabrina","email":"seibelsabrina@google.com","login":null,"count":14},{"name":"bangert","email":"bangert@google.com","login":null,"count":12},{"name":"Donald Duo Zhao","email":"deltazulu@google.com","login":"dx404","count":12},{"name":"diamondm","email":"diamondm@google.com","login":"dimo414","count":12},{"name":"Scott Johnson","email":"scottjohnson@google.com","login":null,"count":11},{"name":"mariasam","email":"mariasam@google.com","login":"mariasam1","count":11},{"name":"Caitlin Sadowski","email":"supertri@google.com","login":"supertriceratops","count":11},{"name":"Radoslaw Burny","email":"rburny@google.com","login":"rburny","count":10},{"name":"Thomas Broyer","email":"t.broyer@ltgt.net","login":"tbroyer","count":10},{"name":"lundmark","email":"lundmark@google.com","login":"riklund","count":10},{"name":"mwacker","email":"mwacker@google.com","login":null,"count":10},{"name":"Amin Shali","email":"amshali@google.com","login":null,"count":10},{"name":"sulku","email":"sulku@google.com","login":null,"count":9},{"name":"kevinb","email":"kevinb@google.com","login":null,"count":9},{"name":"kayco","email":"kayco@google.com","login":null,"count":9},{"name":"eleanorh","email":"eleanorh@google.com","login":null,"count":9},{"name":"ashishkedia","email":"ashishkedia@google.com","login":"ashish1294","count":9},{"name":"Patrick Toomey","email":"ptoomey@google.com","login":null,"count":8},{"name":"Adam Wos","email":"adamwos@google.com","login":"adamgoog","count":8},{"name":"dorir","email":"dorir@google.com","login":"dorireuv","count":8},{"name":"Mike Edgar","email":"adgar@google.com","login":"michaeledgar","count":8},{"name":"Garrick Olson","email":"garricko@stanford.edu","login":"garricko","count":7},{"name":"Kevin O'Connor","email":"kevinoconnor@google.com","login":"kevinoconnor7","count":7},{"name":"tvanderlippe","email":"tvanderlippe@google.com","login":"TimvdLippe","count":7},{"name":"sameb","email":"sameb@google.com","login":"sameb","count":7},{"name":"jakubvrana","email":"jakubvrana@google.com","login":"vrana","count":7},{"name":"mboyington","email":"mboyington@google.com","login":null,"count":7},{"name":"deminguyen","email":"deminguyen@google.com","login":null,"count":6},{"name":"ringwalt","email":"ringwalt@google.com","login":"ringw","count":6},{"name":"bargallo","email":"bargallo@google.com","login":"tcolloca","count":6},{"name":"Jonathan Bluett-Duncan","email":"jbluettduncan@gmail.com","login":"jbduncan","count":6},{"name":"Alex Loh","email":"alexloh@google.com","login":null,"count":5},{"name":"amesbah","email":"amesbah@google.com","login":null,"count":5},{"name":"arielb","email":"arielb@google.com","login":"arielbackenroth","count":5},{"name":"dawasser","email":"dawasser@google.com","login":"dawasser","count":5},{"name":"emmaborhanian","email":"emmaborhanian@google.com","login":"emma-borhanian","count":5},{"name":"irogers","email":"irogers@google.com","login":"captain5050","count":5},{"name":"paulduffin","email":"paulduffin@google.com","login":"paulduffin","count":5},{"name":"Cody Lerum","email":"cody.lerum@gmail.com","login":"codylerum","count":4},{"name":"Vincent Privat","email":"vincent.privat@gmail.com","login":"don-vip","count":4},{"name":"aabdagic","email":"aabdagic@google.com","login":"aabdagic","count":4},{"name":"hanuszczak","email":"hanuszczak@google.com","login":"panhania","count":4},{"name":"plumpy","email":"plumpy@google.com","login":"plumpy","count":4},{"name":"siyuanl","email":"siyuanl@google.com","login":"lius2020","count":4},{"name":"yulissa","email":"yulissa@google.com","login":"yulissaa","count":4},{"name":"zhengx","email":"zhengx@google.com","login":"xgnehz","count":4},{"name":"lukes","email":"lukes@google.com","login":"lukesandberg","count":4},{"name":"Jake Wharton","email":"jakewharton@gmail.com","login":"JakeWharton","count":4},{"name":"cnsun","email":"cnsun@google.com","login":null,"count":4},{"name":"zorzella","email":"zorzella@google.com","login":null,"count":4},{"name":"erikbodzsar","email":"erikbodzsar@google.com","login":null,"count":3},{"name":"Michael Hixson","email":"mhixson@techempower.com","login":"michaelhixson","count":3},{"name":"notcarl","email":"notcarl@google.com","login":"carl-mastrangelo","count":3},{"name":"vmaverick","email":"vmaverick@google.com","login":"vmaverick","count":3},{"name":"tobyj","email":"tobyj@google.com","login":"toluju","count":3},{"name":"sffc","email":"sffc@google.com","login":"sffc","count":3},{"name":"schmitt","email":"schmitt@google.com","login":"aragos","count":3},{"name":"nwatson","email":"nwatson@google.com","login":"njwatson32","count":3},{"name":"mruppaner","email":"mruppaner@google.com","login":"mruppaner","count":3},{"name":"galitch","email":"galitch@google.com","login":"antongalitch","count":3},{"name":"dchai","email":"dchai@google.com","login":"donaldchai","count":3},{"name":"Sean C. Sullivan","email":"github@seansullivan.com","login":"sullis","count":3},{"name":"Patrick Koenig","email":"pkoenig10@gmail.com","login":"pkoenig10","count":3},{"name":"Nathan Naze","email":"nnaze@google.com","login":"nanaze","count":3},{"name":"Halil İbrahim Şener","email":"hibsener@gmail.com","login":"hisener","count":3},{"name":"Error Prone Team","email":"no-reply@google.com","login":"a-googler","count":3},{"name":"Daniel Agar","email":"daniel@agar.ca","login":"dagar","count":3},{"name":"yanx","email":"yanx@google.com","login":null,"count":3},{"name":"mlourenco","email":"mlourenco@google.com","login":null,"count":3},{"name":"jainshreya","email":"jainshreya@google.com","login":null,"count":3},{"name":"dgfried","email":"dgfried@google.com","login":null,"count":3},{"name":"dfielder","email":"dfielder@google.com","login":null,"count":3},{"name":"Peter Epstein","email":"pepstein@google.com","login":null,"count":3},{"name":"Preston Bennes","email":"preston.bennes@gmail.com","login":"Preston4tw","count":2},{"name":"Sam Gammon","email":"sam@elide.ventures","login":"sgammon","count":2},{"name":"Sebastian Monte","email":"sebastian.h.monte@gmail.com","login":"semonte","count":2},{"name":"Tyler Kindy","email":"tkindy@hubspot.com","login":"tkindy","count":2},{"name":"Wes Alvaro","email":"wesalvaro@google.com","login":"wesalvaro","count":2},{"name":"agoode","email":"agoode@google.com","login":"agoode","count":2},{"name":"andrewash","email":"andrewash@google.com","login":"ash211","count":2},{"name":"Andreas Deininger","email":"andreas@deininger.net","login":"deining","count":2},{"name":"Carter Kozak","email":"ckozak@ckozak.net","login":"carterkozak","count":2},{"name":"David Ostrovsky","email":"david@ostrovsky.org","login":"davido","count":2},{"name":"Sergey Simonchik","email":"sergey.simonchik@jetbrains.com","login":"segrey","count":2},{"name":"David Schlosnagle","email":"schlosna@gmail.com","login":"schlosna","count":2},{"name":"David Turner","email":"dturner@twosigma.com","login":"novalis","count":2},{"name":"Dmitry Timofeev","email":"dmittimofeev@ya.ru","login":"dmitry-timofeev","count":2},{"name":"Eric Cochran","email":"Eric@NightlyNexus.com","login":"NightlyNexus","count":2},{"name":"Fabian Windheuser","email":"mail@fabian.me","login":"fawind","count":2},{"name":"Gijs de Jong","email":"berichtaangijs@gmail.com","login":"oxkitsune","count":2},{"name":"=?UTF-8?q?Pawe=C5=82=20P=C5=82azie=C5=84ski?=","email":"nivertius@gmail.com","login":"nivertius","count":2},{"name":"Ian Rogers","email":"irogers@irogers.mtv.corp.google.com","login":null,"count":2},{"name":"chy","email":"chy@google.com","login":null,"count":2},{"name":"aljimenez","email":"aljimenez@google.com","login":null,"count":2},{"name":"abhatiya","email":"abhatiya@google.com","login":null,"count":2},{"name":"friedj","email":"friedj@google.com","login":null,"count":2},{"name":"David Pursehouse","email":"david.pursehouse@gmail.com","login":"dpursehouse","count":2},{"name":"tom-smalls","email":"tommckee@gmail.com","login":null,"count":2},{"name":"tap-prod","email":"tap-prod@google.com","login":null,"count":2},{"name":"rpavy","email":"rpavy@google.com","login":null,"count":2},{"name":"Alexandre Carlton","email":"alexandre.nikolei.carlton@gmail.com","login":"AlexandreCarlton","count":2},{"name":"yorick","email":"yorick@google.com","login":"yorickhenning","count":2},{"name":"xalep","email":"xalep@google.com","login":"tatintart","count":2},{"name":"wernerd","email":"wernerd@google.com","login":"wmdietlGC","count":2},{"name":"Daniel Woffinden","email":"daw@google.com","login":"dwoffinden","count":2},{"name":"sfoy","email":"sfoy@google.com","login":"seanmfoy","count":2},{"name":"raghsriniv","email":"raghsriniv@google.com","login":"raghsriniv","count":2},{"name":"phst","email":"phst@google.com","login":"phst","count":2},{"name":"pekow","email":"pekow@google.com","login":"slix","count":2},{"name":"ciera","email":"ciera@google.com","login":"ciera","count":2},{"name":"dbeaumont","email":"dbeaumont@google.com","login":"hagbard","count":2},{"name":"dlorant","email":"dlorant@google.com","login":"ratteler50","count":2},{"name":"pferaud","email":"pferaud@google.com","login":null,"count":2},{"name":"Sergey","email":"sergeykawork@gmail.com","login":"sergeykad","count":2},{"name":"Mark Hansen","email":"markhansen@google.com","login":"mhansen","count":2},{"name":"drichter","email":"drichter@google.com","login":"richterdavid","count":2},{"name":"olegv","email":"olegv@google.com","login":"oleg-codaio","count":2},{"name":"michaelroger","email":"michaelroger@google.com","login":"misterbeegee","count":2},{"name":"kurs","email":"kurs@google.com","login":"kursjan","count":2},{"name":"jijiang","email":"jijiang@google.com","login":"JiangJi","count":2},{"name":"jeremymanson","email":"jeremymanson@google.com","login":"jhmanson","count":2},{"name":"jdesprez","email":"jdesprez@google.com","login":"desprezj","count":2},{"name":"iignatyev","email":"igor.ignatyev@oracle.com","login":"iignatev","count":2},{"name":"fcardoso","email":"fcardoso@google.com","login":"fhcardoso","count":2},{"name":"endobson","email":"endobson@google.com","login":"endobson","count":2},{"name":"highegg","email":"highegg@google.com","login":null,"count":1},{"name":"jhecht","email":"jhecht@google.com","login":null,"count":1},{"name":"jlhicks","email":"jlhicks@google.com","login":null,"count":1},{"name":"kmuhlrad","email":"kmuhlrad@google.com","login":null,"count":1},{"name":"dxchen","email":"dxchen@google.com","login":null,"count":1},{"name":"dweinberg","email":"dweinberg@google.com","login":null,"count":1},{"name":"dustinh","email":"dustinh@google.com","login":null,"count":1},{"name":"dgay","email":"dgay@google.com","login":null,"count":1},{"name":"darylh","email":"darylh@google.com","login":null,"count":1},{"name":"croyer","email":"croyer@google.com","login":null,"count":1},{"name":"bziman","email":"bziman@google.com","login":null,"count":1},{"name":"bshumate","email":"bshumate@google.com","login":null,"count":1},{"name":"boadway","email":"boadway@google.com","login":null,"count":1},{"name":"bemasc","email":"bemasc@google.com","login":null,"count":1},{"name":"vzm","email":"vzm@google.com","login":null,"count":1},{"name":"vlk","email":"vlk@google.com","login":null,"count":1},{"name":"vinnyliao","email":"vinnyliao@google.com","login":null,"count":1},{"name":"vachaspati","email":"vachaspati@google.com","login":null,"count":1},{"name":"tanaeem","email":"tanaeem@google.com","login":null,"count":1},{"name":"samwat","email":"samwat@google.com","login":null,"count":1},{"name":"reschly","email":"reschly@google.com","login":null,"count":1},{"name":"pvisontay","email":"pvisontay@google.com","login":null,"count":1},{"name":"pstemari","email":"pstemari@google.com","login":null,"count":1},{"name":"peteg","email":"peteg@google.com","login":null,"count":1},{"name":"openamiguel","email":"mopena@princeton.edu","login":null,"count":1},{"name":"nobody","email":"balckstone666@gmail.com","login":null,"count":1},{"name":"napermd","email":"napermd@google.com","login":null,"count":1},{"name":"mrhead","email":"mrhead@google.com","login":null,"count":1},{"name":"mpoletti","email":"mpoletti@google.com","login":null,"count":1},{"name":"johnerez","email":"johnerez@google.com","login":null,"count":1},{"name":"mikeli","email":"mikeli@google.com","login":null,"count":1},{"name":"micahstairs","email":"micahstairs@google.com","login":null,"count":1},{"name":"mecarson","email":"mecarson@google.com","login":null,"count":1},{"name":"mdiamond","email":"mdiamond@google.com","login":null,"count":1},{"name":"matblair","email":"matblair@google.com","login":null,"count":1},{"name":"martinrb","email":"martinrb@google.com","login":null,"count":1},{"name":"mandreescu","email":"mandreescu@google.com","login":null,"count":1},{"name":"maxxedev","email":"5051664+maxxedev","login":"maxxedev","count":1},{"name":"monnoroch","email":"monnoroch@google.com","login":"Monnoroch","count":1},{"name":"mvv","email":"mvv@google.com","login":"xmxwx","count":1},{"name":"nickread","email":"nickread@google.com","login":"nickread","count":1},{"name":"peterwhy","email":"peterwhy@google.com","login":"peterwhy","count":1},{"name":"pigelvy","email":"pigelvy","login":"pigelvy","count":1},{"name":"pjayara","email":"pjayara@google.com","login":"pjayara-g","count":1},{"name":"polymorpheus","email":"polymorpheus@google.com","login":"ChrisHennickAtGoogle","count":1},{"name":"reudismam","email":"reudismam@gmail.com","login":"reudismam","count":1},{"name":"rjclarkson","email":"rjclarkson@google.com","login":"rickyclarkson","count":1},{"name":"dovwas","email":"dovwas@google.com","login":"dovwasgoog","count":1},{"name":"sciencewhiz","email":"sciencewhiz","login":"sciencewhiz","count":1},{"name":"srujun","email":"srujun@google.com","login":"srujun","count":1},{"name":"stevegutz","email":"stevegutz","login":"stevegutz","count":1},{"name":"suzhang","email":"suzhang@google.com","login":"zhangsu","count":1},{"name":"wojo","email":"wojo@google.com","login":"thvortex","count":1},{"name":"xtof","email":"xtof@google.com","login":"xtofian","count":1},{"name":"yardennb","email":"yardennb@google.com","login":"yardennb","count":1},{"name":"zhin","email":"zhin@google.com","login":"ngzhian","count":1},{"name":"maekawa","email":"maekawa@google.com","login":null,"count":1},{"name":"arideout","email":"arideout@google.com","login":null,"count":1},{"name":"amayika","email":"amayika@google.com","login":null,"count":1},{"name":"agrieve","email":"agrieve@google.com","login":null,"count":1},{"name":"Will Holen","email":"vidarh@google.com","login":null,"count":1},{"name":"Martynas Venckus","email":"martynas@google.com","login":null,"count":1},{"name":"Maksim Bezsaznyj","email":"maksim@squareup.com","login":null,"count":1},{"name":"sabeille","email":"sabeille@google.com","login":null,"count":1},{"name":"Fuyao Zhao","email":"fuyaoz@fuyaoz-macbookpro3.roam.corp.google.com","login":null,"count":1},{"name":"Alex Eagle","email":"alexeagle@alexeagle-macbookair.local","login":null,"count":1},{"name":"kcooney","email":"kcooney@google.com","login":"kcooney","count":1},{"name":"kcrca","email":"kcrca@google.com","login":"kcrca","count":1},{"name":"kgorovoy","email":"kgorovoy@google.com","login":"kirilg","count":1},{"name":"kikeg","email":"kikeg@google.com","login":"xkikeg","count":1},{"name":"kmoon","email":"kmoon@google.com","login":"kmoon-work","count":1},{"name":"laefer","email":"laefer@google.com","login":"laefer-google","count":1},{"name":"larsrc","email":"larsrc@google.com","login":"larsrc-google","count":1},{"name":"lgemeinhardt","email":"github@gemeinhardt.info","login":"lgemeinhardt","count":1},{"name":"maxp","email":"maxp@google.com","login":"maxpoletto","count":1},{"name":"Johnny Lim","email":"izeye@naver.com","login":"izeye","count":1},{"name":"Kazuaki Matsuo","email":"fly.49.89.over@gmail.com","login":"KazuCocoa","count":1},{"name":"Keith Lea","email":"keithl@stripe.com","login":"keithl-stripe","count":1},{"name":"Kevin Macksamie","email":"kevin.macksamie@gmail.com","login":"k-mack","count":1},{"name":"Khalid Abdullah","email":"khalidcomilla58@gmail.com","login":"khalid586","count":1},{"name":"Lazaro Clapp","email":"lazaro@uber.com","login":"lazaroclapp","count":1},{"name":"Louis Morgan","email":"ljrmorgan@gmail.com","login":"ljrmorgan","count":1},{"name":"Marcono1234","email":"Marcono1234","login":"Marcono1234","count":1},{"name":"MartinWitt","email":"wittlinger.martin@gmail.com","login":"MartinWitt","count":1},{"name":"Michael Vorburger ⛑️","email":"vorburger@google.com","login":"vorburger","count":1},{"name":"Mike Drob","email":"mdrob@apache.org","login":"madrob","count":1},{"name":"Mikkel Kjeldsen","email":"commonquail@gmail.com","login":"commonquail","count":1},{"name":"Nick Travers","email":"n.e.travers@gmail.com","login":"nicktrav","count":1},{"name":"Niklas Gustavsson","email":"niklas@protocol7.com","login":"protocol7","count":1},{"name":"Olivier Lamy","email":"olamy@apache.org","login":"olamy","count":1},{"name":"Piotrek Żygieło","email":"11896137+pzygielo","login":"pzygielo","count":1},{"name":"Richard Bradley","email":"Richard.Bradley@softwire.com","login":"RichardBradley","count":1},{"name":"Rob Blair","email":"robtheblair@gmail.com","login":"RobertTheBlair","count":1},{"name":"Robert Muir","email":"rmuir@apache.org","login":"rmuir","count":1},{"name":"Roberto Lublinerman","email":"rluble@google.com","login":"rluble","count":1},{"name":"Roman Salvador","email":"rsalvador@salesforce.com","login":"rsalvador","count":1},{"name":"Piotr Findeisen","email":"piotr.findeisen@gmail.com","login":"findepi","count":1},{"name":"Alex","email":"aleksandrosansan@gmail.com","login":"sashashura","count":1},{"name":"=?UTF-8?q?C=C3=A9sar=20Soto=20Valero?=","email":"cesarsotovalero@gmail.com","login":"cesarsotovalero","count":1},{"name":"Andrew Gaul","email":"andrew@gaul.org","login":"gaul","count":1},{"name":"AndrewMonteith","email":"andrewmonteith1999@gmail.com","login":"AndrewMonteith","count":1},{"name":"Anish Visa","email":"anishvisaria98@gmail.com","login":"Anish2","count":1},{"name":"Anthony Vanelverdinghe","email":"dev@anthonyv.be","login":"anthonyvdotbe","count":1},{"name":"Artur Havliukovskyi","email":"agavlyukovskiy@gmail.com","login":"gavlyukovskiy","count":1},{"name":"Bastien LEMALE","email":"bastien.lemale@datadoghq.com","login":"blemale","count":1},{"name":"Carsten Otto","email":"github@c-otto.de","login":"C-Otto","count":1},{"name":"Clayton Walker","email":"clayton.m.walker@gmail.com","login":"Sineaggi","count":1},{"name":"Delany","email":"delanym","login":"delanym","count":1},{"name":"Ding Yuan","email":"yuanding02@gmail.com","login":"diy1","count":1},{"name":"Dragan Bozanovic","email":"bozanovicdr@gmail.com","login":"bdragan","count":1},{"name":"Elkhan Eminov","email":"elxaneminov99@gmail.com","login":"elkkhan","count":1},{"name":"Eric Anderson","email":"ejona@google.com","login":"ejona86","count":1},{"name":"Gary Hodgson","email":"contact@garyhodgson.com","login":"garyhodgson","count":1},{"name":"Guido Lena Cota","email":"guido.lenacota@gmail.com","login":"glenacota","count":1},{"name":"Hannes Wellmann","email":"wellmann.hannes1@gmx.net","login":"HannesWell","count":1},{"name":"Harshit Bangar","email":"harshit.bangar@gmail.com","login":"bangarharshit","count":1},{"name":"Jean-Noël Rouvignac","email":"jn.rouvignac@gmail.com","login":"JnRouvignac","count":1},{"name":"mkanat","email":"mkanat@google.com","login":"mkanat","count":1},{"name":"eatnumber1","email":"eatnumber1@google.com","login":"eatnumber1","count":1},{"name":"ekasper","email":"ekasper@google.com","login":"ekasper","count":1},{"name":"fwilhelm","email":"fwilhelm@google.com","login":"felixwilhelm","count":1},{"name":"gcmn","email":"gcmn@google.com","login":"GMNGeoffrey","count":1},{"name":"glebm","email":"glebm@google.com","login":"glebm","count":1},{"name":"gnoack","email":"gnoack@google.com","login":"gnoack","count":1},{"name":"guyben","email":"guyben@google.com","login":"guyben13","count":1},{"name":"hboehm","email":"hboehm@google.com","login":"hboehm","count":1},{"name":"huangkaifeng","email":"calvinkfh@gmail.com","login":"kaifeng-h","count":1},{"name":"jasonlong","email":"jasonlong@google.com","login":"jaslong","count":1},{"name":"jdd","email":"jdd@google.com","login":"detreville","count":1},{"name":"jianglai","email":"jianglai@google.com","login":"jianglai","count":1},{"name":"joachimkainz","email":"joachimkainz@google.com","login":"joachimfkainz","count":1},{"name":"Alexander","email":"bzz","login":"bzz","count":1},{"name":"jsjeon","email":"jsjeon@google.com","login":"jsjeon","count":1},{"name":"zhaoruoxu","email":"zhaoruoxu@google.com","login":null,"count":1},{"name":"yanglinw","email":"yanglinw@google.com","login":null,"count":1},{"name":"yanghang","email":"yanghang@google.com","login":null,"count":1},{"name":"xiongzhaorong","email":"xiongzhaorong@google.com","login":null,"count":1},{"name":"wenzhang","email":"wenzhang@google.com","login":null,"count":1},{"name":"Said Tahsin Dane","email":"tasomaniac@gmail.com","login":"tasomaniac","count":1},{"name":"Scott Wegner","email":"swegner@google.com","login":"swegner","count":1},{"name":"Simon Legner","email":"Simon.Legner@gmail.com","login":"simon04","count":1},{"name":"Tagir Valeev","email":"amaembo@gmail.com","login":"amaembo","count":1},{"name":"Thomas Krisch","email":"thomas.krisch+git@gmail.com","login":"kriths","count":1},{"name":"Thomas M. DuBuisson","email":"thomas.dubuisson@gmail.com","login":"TomMD","count":1},{"name":"Vladimir Sitnikov","email":"sitnikov.vladimir@gmail.com","login":"vlsi","count":1},{"name":"Werner Dietl","email":"wdietl@gmail.com","login":"wmdietl","count":1},{"name":"Yigit Boyar","email":"yboyar@google.com","login":"yigit","count":1},{"name":"algonell","email":"algonell@gmail.com","login":"algonell","count":1},{"name":"asalo","email":"asalo@google.com","login":"alexsalo","count":1},{"name":"bcorso","email":"bcorso@google.com","login":"bcorso","count":1},{"name":"bcsf","email":"bcsf@google.com","login":"bchang","count":1},{"name":"bkrivan","email":"bkrivan@google.com","login":"tesztbela","count":1},{"name":"brendandouglas","email":"brendandouglas@google.com","login":"brendandouglas","count":1},{"name":"caravone","email":"caravone@google.com","login":"caravone","count":1},{"name":"cgruber","email":"cgruber@google.com","login":"cgruber","count":1},{"name":"chrisn","email":"chrisn@google.com","login":"herbyderby","count":1},{"name":"davidplass","email":"davidplass@google.com","login":"dplassgit","count":1},{"name":"davies","email":"davies@google.com","login":"daviesatgoogle","count":1},{"name":"dniz","email":"dniz@google.com","login":"dsn5ft","count":1},{"name":"zhuht","email":"zhuht@google.com","login":"zhuht23","count":1}],"past_year_committers":[{"name":"ghm","email":"ghm@google.com","login":"graememorgan","count":208},{"name":"Liam Miller-Cushon","email":"cushon@google.com","login":"cushon","count":115},{"name":"Kurt Alfred Kluever","email":"kak@google.com","login":"kluever","count":37},{"name":"Error Prone Team","email":"java-team-github-bot@google.com","login":"java-team-github-bot","count":29},{"name":"markbrady","email":"markbrady@google.com","login":"markhbrady","count":22},{"name":"cpovirk","email":"cpovirk@google.com","login":"cpovirk","count":16},{"name":"Kevin O'Connor","email":"kevinoconnor@google.com","login":"kevinoconnor7","count":7},{"name":"Chaoren Lin","email":"aoe@google.com","login":"chaoren","count":4},{"name":"Stephan Schroevers","email":"stephan.schroevers@teampicnic.com","login":"Stephan202","count":4},{"name":"Éamonn McManus","email":"emcmanus@google.com","login":"eamonnmcmanus","count":3},{"name":"Artur Havliukovskyi","email":"agavlyukovskiy@gmail.com","login":"gavlyukovskiy","count":1},{"name":"Daniel Woffinden","email":"daw@google.com","login":"dwoffinden","count":1},{"name":"David P. Baker","email":"dpb@google.com","login":"netdpb","count":1},{"name":"Dragan Bozanovic","email":"bozanovicdr@gmail.com","login":"bdragan","count":1},{"name":"Johnny Lim","email":"izeye@naver.com","login":"izeye","count":1},{"name":"Manu Sridharan","email":"msridhar@gmail.com","login":"msridhar","count":1},{"name":"Mark Hansen","email":"markhansen@google.com","login":"mhansen","count":1},{"name":"Mikkel Kjeldsen","email":"commonquail@gmail.com","login":"commonquail","count":1},{"name":"Nick Glorioso","email":"glorioso@google.com","login":"nick-someone","count":1},{"name":"Niklas Gustavsson","email":"niklas@protocol7.com","login":"protocol7","count":1},{"name":"Rick Ossendrijver","email":"rick.ossendrijver@gmail.com","login":"rickie","count":1},{"name":"Roberto Lublinerman","email":"rluble@google.com","login":"rluble","count":1},{"name":"Sam Berlin","email":"sameb@google.com","login":"sameb","count":1},{"name":"Scott Wegner","email":"swegner@google.com","login":"swegner","count":1},{"name":"Thomas Broyer","email":"t.broyer@ltgt.net","login":"tbroyer","count":1},{"name":"Tyler Kindy","email":"tkindy@hubspot.com","login":"tkindy","count":1},{"name":"Vladimir Sitnikov","email":"sitnikov.vladimir@gmail.com","login":"vlsi","count":1},{"name":"lgemeinhardt","email":"github@gemeinhardt.info","login":"lgemeinhardt","count":1},{"name":"lowasser","email":"lowasser@google.com","login":"lowasser","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-10-28T00:00:16.967Z","repositories_count":6088649,"commits_count":922428732,"contributors_count":35989289,"owners_count":1109340,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"google/error-prone","html_url":"https://github.com/google/error-prone","last_synced_at":"2025-10-30T08:01:15.754Z","status":null,"issues_count":357,"pull_requests_count":1470,"avg_time_to_close_issue":10864070.145,"avg_time_to_close_pull_request":852441.1075268817,"issues_closed_count":200,"pull_requests_closed_count":1302,"pull_request_authors_count":57,"issue_authors_count":247,"avg_comments_per_issue":2.0952380952380953,"avg_comments_per_pull_request":0.17551020408163265,"merged_pull_requests_count":864,"bot_issues_count":6,"bot_pull_requests_count":1321,"past_year_issues_count":148,"past_year_pull_requests_count":806,"past_year_avg_time_to_close_issue":480630.1014492754,"past_year_avg_time_to_close_pull_request":132935.71809256662,"past_year_issues_closed_count":69,"past_year_pull_requests_closed_count":713,"past_year_pull_request_authors_count":27,"past_year_issue_authors_count":100,"past_year_avg_comments_per_issue":1.1689189189189189,"past_year_avg_comments_per_pull_request":0.07692307692307693,"past_year_bot_issues_count":3,"past_year_bot_pull_requests_count":745,"past_year_merged_pull_requests_count":574,"created_at":"2023-05-15T13:12:30.894Z","updated_at":"2025-10-30T08:01:15.755Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/google%2Ferror-prone/issues","issue_labels_count":{"table":{"lombok":9,"Priority-High":1,"Type-Enhancement":1,"migrated":1,"Status-Accepted":1,"help wanted":1,"question":1,"Type-NewCheck":1,"enhancement":1}},"pull_request_labels_count":{"table":{"cla: yes":5,"dependencies":2}},"issue_author_associations_count":{"table":{"NONE":293,"CONTRIBUTOR":55,"MEMBER":5,"COLLABORATOR":3,"OWNER":1}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":1404,"NONE":53,"COLLABORATOR":10,"MEMBER":3}},"issue_authors":{"table":{"PhilippWendler":13,"delanym":11,"commonquail":7,"Pankraz76":7,"copybara-service[bot]":6,"msridhar":5,"ben-manes":5,"csrma":5,"ksobolew":5,"facboy":5,"alexandrenavarro":4,"wendigo":4,"bannmann":4,"xenoterracide":4,"Marcono1234":3,"Stephan202":3,"kevinb9n":3,"magicprinc":3,"cushon":3,"davido":3,"XN137":3,"lepistone":2,"uhafner":2,"pzygielo":2,"vlad-iv":2,"gowtham3105":2,"elkkhan":2,"jamiesellick93":2,"chetnabanthia":2,"onlyonce":2,"anthonyvdotbe":2,"jbellis":2,"mmoayyed":2,"benjaminp":2,"ivanvandessel-wk":2,"AlexLandau":2,"mernst":2,"codeleverage":2,"fzakaria":2,"hugoncosta":2,"TimvdLippe":2,"DevCharly":2,"trebele-tibco":2,"alexec":2,"PBoddington":2,"vorburger":2,"tereigo":1,"robinst":1,"evelioml":1,"Papisco":1,"marcindabrowski":1,"eamonnmcmanus":1,"nxvipin":1,"Morvell":1,"ash211":1,"mlopatkin":1,"youssef-jetdav":1,"javajoemc":1,"CVdV-au":1,"He-Pin":1,"norrisjeremy":1,"ryanpinter":1,"wmdietl":1,"cobratbq":1,"girotomas":1,"Dan-Nedelescu":1,"zodac":1,"fahadadnan-au":1,"sikchi":1,"jensbaitingerbosch":1,"paulduffin":1,"AmitKumarDeoghoria":1,"mrsoto":1,"vivekkothari":1,"esselesse":1,"mateuszrzeszutek":1,"nakulj":1,"yougogirl":1,"Lana11s":1,"ezraeinhorn624":1,"jeffrey-easyesi":1,"djh82":1,"Colecf":1,"zhang-lucy":1,"patpatpat123":1,"benpage-o":1,"quangnx":1,"kamilgregorczyk":1,"Evreke":1,"vernou":1,"mydeanstevens8":1,"meltsufin":1,"daniel-gs-silva":1,"jklamer":1,"AlessioDiFazio":1,"rsalvador":1,"tkindy":1,"keydon":1,"hazendaz":1,"Flowdalic":1,"brenoepics":1,"sbroeder":1,"torsten-liermann":1,"nick-someone":1,"valerafili":1,"pvlnsk":1,"sergiorebelo":1,"KrisWatson-Signifyd":1,"TeppoLehtonen-TomTom":1,"mauricedchateau":1,"lucentum":1,"michael-neuhold":1,"clarenced":1,"tomasbjerre":1,"findepi":1,"Py7600tyty":1,"Fide1496":1,"asheldon":1,"lazaroclapp":1,"Bezkup":1,"laeubi":1,"JarvisCraft":1,"leventov":1,"Danielmethner":1,"shalabi":1,"ebrinktech":1,"aldexis":1,"csymeonides-mf":1,"mdlnr":1,"k-mack":1,"ralstonba":1,"aterai":1,"ferreiraapfernanda":1,"sinsuren":1,"ParSal123":1,"richiethom":1,"lilianValeroFp":1,"cpovirk":1,"nlarsson":1,"DenWav":1,"caitlinshk":1,"sjtuwangjiahuan":1,"krisso-rtb":1,"spadou":1,"dododge":1,"feici02":1,"martint":1,"roberto-perata":1,"xiarkakhsayad":1,"cowsandmilk":1,"MichalStehlikCz":1,"sz-liva":1,"raovikash":1,"macfarla":1,"carterkozak":1,"kohlschuetter":1,"lfgcampos":1,"Mentado111":1,"pkoenig10":1,"oxkitsune":1,"glarbi":1,"RoiEXLab":1,"thermo911":1,"lfarkas":1,"iuriichulovskyi":1,"donalmurtagh":1,"Luis-Pascoal":1,"hiroshi-sampaio":1,"sweemer":1,"rdesgroppes":1,"JulianJho":1,"iignatev":1,"ForworkMeta":1,"mihalyr":1,"gregallen":1,"psigx":1,"sf-db":1,"aarjavsheth":1,"dclements":1,"stym06":1,"victornoel":1,"9392489216":1,"trks1970":1,"danny-su":1,"exe-atewinkel":1,"tbroyer":1,"omer-azmon":1,"jchen7-sc":1,"mklaehn":1,"pburka":1,"hirth-abi":1,"cowwoc":1,"jaredsburrows":1,"tgeng":1,"anidotnet":1,"snazy":1,"Adusya":1,"sparmboy":1,"Nimmel":1,"writeoncereadmany":1,"trofymenkovadym":1,"scordio":1,"tsmock":1,"sergiofigueras":1,"jkwatson":1,"gabrielshanahan":1,"lg-db":1,"abhishekj720":1,"KengoTODA":1,"1nickbart1":1,"inb73":1,"Xander-Polishchuk":1,"mihnita":1,"erm-g":1,"GowthamGthm":1,"Prasit05l":1,"coolderli":1,"torrespro":1,"s-noroozi-cs":1,"shanebishop":1,"doublep":1,"ankitd-cashify":1,"PeteGillin":1,"jmillikin":1,"trask":1,"stantonk":1,"climategadgets":1,"Edarke":1,"jnehlmeier":1,"gaetanBloch":1,"turbospaces":1,"hanneskaeufler":1,"angusjoshi":1,"szk-git":1,"remal":1,"Philzen":1,"genericjon":1,"TWiStErRob":1,"chonton":1,"benhumphrey-okta":1,"CVEDetect":1,"boris-petrov":1,"jbnerd":1,"vlsi":1,"gigantic2":1,"jlwagner12":1,"Chordrain":1}},"pull_request_authors":{"table":{"copybara-service[bot]":1319,"Stephan202":16,"cushon":10,"rickie":10,"msridhar":9,"commonquail":9,"izeye":7,"tkindy":5,"vlsi":4,"scolsen":4,"Lucifer6606":4,"sgammon":3,"pkoenig10":3,"vorburger":3,"hisener":3,"tbroyer":3,"oxkitsune":3,"rsalvador":3,"wmdietl":2,"protocol7":2,"compf":2,"dependabot[bot]":2,"findepi":2,"ralstonba":2,"CVdV-au":2,"lgemeinhardt":2,"gavlyukovskiy":2,"lepistone":2,"PhilippWendler":2,"algonell":2,"jaredstehler":2,"rumen-vasilev":1,"k-mack":1,"JarvisCraft":1,"moonfruit":1,"PBoddington":1,"styurin":1,"dkashyn-sfdc":1,"madrob":1,"khalid586":1,"bdragan":1,"aldexis":1,"kelvinou01":1,"ajamjambrut":1,"maxxedev":1,"bryanspacex":1,"Marcono1234":1,"HannesWell":1,"superxiao":1,"alexandrenavarro":1,"CVEDetect":1,"rtfmoz2":1,"mihnita":1,"elkkhan":1,"deining":1,"hth313":1,"samuelsoder":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-10-31T00:00:39.152Z","repositories_count":11269926,"issues_count":34999756,"pull_requests_count":113601730,"authors_count":11042235,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"lombok":2}},"past_year_pull_request_labels_count":{"table":{"dependencies":1}},"past_year_issue_author_associations_count":{"table":{"NONE":126,"CONTRIBUTOR":20,"MEMBER":2}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":765,"NONE":25,"MEMBER":3}},"past_year_issue_authors":{"table":{"PhilippWendler":9,"Pankraz76":7,"csrma":5,"commonquail":5,"facboy":4,"alexandrenavarro":4,"bannmann":4,"delanym":3,"copybara-service[bot]":3,"msridhar":3,"ben-manes":3,"kevinb9n":2,"TimvdLippe":2,"jbellis":2,"lepistone":2,"benjaminp":2,"fzakaria":2,"vlad-iv":2,"wendigo":2,"jamiesellick93":2,"pvlnsk":1,"Prasit05l":1,"pzygielo":1,"quangnx":1,"richiethom":1,"ryanpinter":1,"PeteGillin":1,"PBoddington":1,"ParSal123":1,"nxvipin":1,"norrisjeremy":1,"mydeanstevens8":1,"mmoayyed":1,"mklaehn":1,"mihnita":1,"zodac":1,"youssef-jetdav":1,"xiarkakhsayad":1,"vlsi":1,"uhafner":1,"turbospaces":1,"trofymenkovadym":1,"tkindy":1,"TeppoLehtonen-TomTom":1,"tbroyer":1,"sz-liva":1,"sweemer":1,"stym06":1,"Stephan202":1,"sparmboy":1,"spadou":1,"snazy":1,"sikchi":1,"shalabi":1,"sf-db":1,"sergiorebelo":1,"scordio":1,"mihalyr":1,"ferreiraapfernanda":1,"ezraeinhorn624":1,"ebrinktech":1,"eamonnmcmanus":1,"danny-su":1,"Dan-Nedelescu":1,"Danielmethner":1,"CVdV-au":1,"codeleverage":1,"climategadgets":1,"Chordrain":1,"brenoepics":1,"benpage-o":1,"aterai":1,"ash211":1,"angusjoshi":1,"AmitKumarDeoghoria":1,"AlessioDiFazio":1,"aldexis":1,"9392489216":1,"1nickbart1":1,"marcindabrowski":1,"lilianValeroFp":1,"lg-db":1,"lfgcampos":1,"lfarkas":1,"laeubi":1,"krisso-rtb":1,"JulianJho":1,"jnehlmeier":1,"jmillikin":1,"jlwagner12":1,"jensbaitingerbosch":1,"jeffrey-easyesi":1,"jchen7-sc":1,"javajoemc":1,"JarvisCraft":1,"ivanvandessel-wk":1,"hiroshi-sampaio":1,"hanneskaeufler":1,"girotomas":1,"genericjon":1}},"past_year_pull_request_authors":{"table":{"copybara-service[bot]":735,"commonquail":9,"izeye":7,"Stephan202":6,"msridhar":4,"vlsi":4,"tkindy":2,"CVdV-au":2,"protocol7":2,"PhilippWendler":2,"vorburger":2,"rickie":2,"tbroyer":2,"gavlyukovskiy":2,"styurin":1,"PBoddington":1,"mihnita":1,"alexandrenavarro":1,"ajamjambrut":1,"dependabot[bot]":1,"bdragan":1,"moonfruit":1,"JarvisCraft":1,"aldexis":1,"rumen-vasilev":1,"kelvinou01":1}},"maintainers":[{"table":{"login":"cushon","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cushon"}},{"table":{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"}},{"table":{"login":"mihnita","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}},{"table":{"login":"dclements","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dclements"}},{"table":{"login":"cpovirk","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cpovirk"}},{"table":{"login":"vernou","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vernou"}},{"table":{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"}},{"table":{"login":"nick-someone","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nick-someone"}}],"active_maintainers":[{"table":{"login":"mihnita","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mihnita"}},{"table":{"login":"vorburger","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vorburger"}},{"table":{"login":"eamonnmcmanus","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eamonnmcmanus"}}]}},"events":{"total":{"CreateEvent":381,"ReleaseEvent":5,"IssuesEvent":193,"WatchEvent":247,"DeleteEvent":371,"MemberEvent":1,"IssueCommentEvent":348,"PushEvent":1150,"PullRequestReviewCommentEvent":64,"PullRequestReviewEvent":73,"PullRequestEvent":823,"ForkEvent":34},"last_year":{"CreateEvent":354,"ReleaseEvent":3,"IssuesEvent":186,"WatchEvent":235,"DeleteEvent":346,"MemberEvent":1,"IssueCommentEvent":311,"PushEvent":1068,"PullRequestReviewEvent":69,"PullRequestReviewCommentEvent":64,"PullRequestEvent":758,"ForkEvent":32}},"keywords":["java","static-analysis"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/ci.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:32.943Z","updated_at":"2023-01-14T13:15:32.943Z","repository_link":"https://github.com/google/error-prone/blob/master/.github/workflows/ci.yml","dependencies":[{"id":6897625393,"package_name":"styfle/cancel-workflow-action","ecosystem":"actions","requirements":"0.8.0","direct":true,"kind":"composite","optional":false},{"id":6897625395,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6897625397,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/release.yml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:33.136Z","updated_at":"2023-01-14T13:15:33.136Z","repository_link":"https://github.com/google/error-prone/blob/master/.github/workflows/release.yml","dependencies":[{"id":6897626995,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2.4.0","direct":true,"kind":"composite","optional":false},{"id":6897626996,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v2.5.0","direct":true,"kind":"composite","optional":false},{"id":6897626997,"package_name":"softprops/action-gh-release","ecosystem":"actions","requirements":"v0.1.14","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"maven","filepath":"annotation/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:33.237Z","updated_at":"2023-01-14T13:15:33.237Z","repository_link":"https://github.com/google/error-prone/blob/master/annotation/pom.xml","dependencies":[{"id":6897627107,"package_name":"com.google.guava:guava","ecosystem":"maven","requirements":"${guava.version}","direct":true,"kind":"runtime","optional":false},{"id":6897627108,"package_name":"junit:junit","ecosystem":"maven","requirements":"${junit.version}","direct":true,"kind":"test","optional":false},{"id":6897627109,"package_name":"com.google.truth:truth","ecosystem":"maven","requirements":"${truth.version}","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"annotations/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:33.268Z","updated_at":"2023-01-14T13:15:33.268Z","repository_link":"https://github.com/google/error-prone/blob/master/annotations/pom.xml","dependencies":[{"id":6897627116,"package_name":"junit:junit","ecosystem":"maven","requirements":"${junit.version}","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"check_api/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:33.285Z","updated_at":"2023-01-14T13:15:33.285Z","repository_link":"https://github.com/google/error-prone/blob/master/check_api/pom.xml","dependencies":[{"id":6897627141,"package_name":"com.google.errorprone:error_prone_annotation","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"runtime","optional":false},{"id":6897627142,"package_name":"com.google.code.findbugs:jsr305","ecosystem":"maven","requirements":"3.0.2","direct":true,"kind":"runtime","optional":false},{"id":6897627143,"package_name":"org.checkerframework:dataflow-errorprone","ecosystem":"maven","requirements":"${dataflow.version}","direct":true,"kind":"runtime","optional":false},{"id":6897627144,"package_name":"io.github.java-diff-utils:java-diff-utils","ecosystem":"maven","requirements":"4.0","direct":true,"kind":"runtime","optional":false},{"id":6897627145,"package_name":"com.google.auto.value:auto-value-annotations","ecosystem":"maven","requirements":"${autovalue.version}","direct":true,"kind":"compile","optional":false},{"id":6897627146,"package_name":"com.google.errorprone:error_prone_annotations","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"compile","optional":false},{"id":6897627147,"package_name":"junit:junit","ecosystem":"maven","requirements":"${junit.version}","direct":true,"kind":"test","optional":false},{"id":6897627148,"package_name":"org.hamcrest:hamcrest-core","ecosystem":"maven","requirements":"2.2","direct":true,"kind":"test","optional":false},{"id":6897627149,"package_name":"com.google.truth:truth","ecosystem":"maven","requirements":"${truth.version}","direct":true,"kind":"test","optional":false},{"id":6897627150,"package_name":"com.google.truth.extensions:truth-java8-extension","ecosystem":"maven","requirements":"${truth.version}","direct":true,"kind":"test","optional":false},{"id":6897627151,"package_name":"org.mockito:mockito-core","ecosystem":"maven","requirements":"${mockito.version}","direct":true,"kind":"test","optional":false},{"id":6897627152,"package_name":"com.google.guava:guava-testlib","ecosystem":"maven","requirements":"${guava.version}","direct":true,"kind":"test","optional":false},{"id":6897627153,"package_name":"com.github.kevinstern:software-and-algorithms","ecosystem":"maven","requirements":"1.0","direct":true,"kind":"runtime","optional":false},{"id":6897627154,"package_name":"com.github.ben-manes.caffeine:caffeine","ecosystem":"maven","requirements":"${caffeine.version}","direct":true,"kind":"runtime","optional":false},{"id":6897627155,"package_name":"com.google.jimfs:jimfs","ecosystem":"maven","requirements":"1.2","direct":true,"kind":"test","optional":false},{"id":6897627156,"package_name":"com.google.inject:guice","ecosystem":"maven","requirements":"${guice.version}","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"core/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:33.313Z","updated_at":"2023-01-14T13:15:33.313Z","repository_link":"https://github.com/google/error-prone/blob/master/core/pom.xml","dependencies":[{"id":6897627187,"package_name":"com.google.errorprone:error_prone_annotation","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"runtime","optional":false},{"id":6897627188,"package_name":"com.google.errorprone:error_prone_type_annotations","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"runtime","optional":false},{"id":6897627189,"package_name":"com.google.errorprone:error_prone_check_api","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"runtime","optional":false},{"id":6897627190,"package_name":"com.google.errorprone:error_prone_test_helpers","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"test","optional":false},{"id":6897627191,"package_name":"org.pcollections:pcollections","ecosystem":"maven","requirements":"3.1.4","direct":true,"kind":"runtime","optional":false},{"id":6897627192,"package_name":"com.google.guava:guava","ecosystem":"maven","requirements":"${guava.version}","direct":true,"kind":"runtime","optional":false},{"id":6897627193,"package_name":"com.google.auto:auto-common","ecosystem":"maven","requirements":"1.2.1","direct":true,"kind":"runtime","optional":false},{"id":6897627194,"package_name":"com.google.code.findbugs:jsr305","ecosystem":"maven","requirements":"3.0.2","direct":true,"kind":"runtime","optional":false},{"id":6897627195,"package_name":"org.checkerframework:dataflow-errorprone","ecosystem":"maven","requirements":"${dataflow.version}","direct":true,"kind":"runtime","optional":false},{"id":6897627196,"package_name":"com.google.auto.value:auto-value-annotations","ecosystem":"maven","requirements":"${autovalue.version}","direct":true,"kind":"compile","optional":false},{"id":6897627197,"package_name":"com.google.auto.value:auto-value","ecosystem":"maven","requirements":"${autovalue.version}","direct":true,"kind":"test","optional":false},{"id":6897627198,"package_name":"com.google.errorprone:error_prone_annotations","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"compile","optional":false},{"id":6897627199,"package_name":"junit:junit","ecosystem":"maven","requirements":"${junit.version}","direct":true,"kind":"test","optional":false},{"id":6897627200,"package_name":"org.gwtproject:gwt-user","ecosystem":"maven","requirements":"${gwt.version}","direct":true,"kind":"test","optional":false},{"id":6897627201,"package_name":"com.google.testparameterinjector:test-parameter-injector","ecosystem":"maven","requirements":"1.1","direct":true,"kind":"test","optional":false},{"id":6897627202,"package_name":"org.hamcrest:hamcrest-core","ecosystem":"maven","requirements":"1.3","direct":true,"kind":"test","optional":false},{"id":6897627203,"package_name":"org.hamcrest:hamcrest-library","ecosystem":"maven","requirements":"1.3","direct":true,"kind":"test","optional":false},{"id":6897627204,"package_name":"com.google.truth:truth","ecosystem":"maven","requirements":"${truth.version}","direct":true,"kind":"test","optional":false},{"id":6897627205,"package_name":"com.google.truth.extensions:truth-java8-extension","ecosystem":"maven","requirements":"${truth.version}","direct":true,"kind":"test","optional":false},{"id":6897627206,"package_name":"com.google.truth.extensions:truth-proto-extension","ecosystem":"maven","requirements":"${truth.version}","direct":true,"kind":"test","optional":false},{"id":6897627207,"package_name":"com.google.inject:guice","ecosystem":"maven","requirements":"${guice.version}","direct":true,"kind":"test","optional":false},{"id":6897627208,"package_name":"com.google.inject.extensions:guice-assistedinject","ecosystem":"maven","requirements":"5.1.0","direct":true,"kind":"test","optional":false},{"id":6897627209,"package_name":"com.google.inject.extensions:guice-servlet","ecosystem":"maven","requirements":"5.1.0","direct":true,"kind":"test","optional":false},{"id":6897627210,"package_name":"com.google.inject.extensions:guice-testlib","ecosystem":"maven","requirements":"5.1.0","direct":true,"kind":"test","optional":false},{"id":6897627211,"package_name":"com.google.gwt.inject:gin","ecosystem":"maven","requirements":"2.1.2","direct":true,"kind":"test","optional":false},{"id":6897627212,"package_name":"org.mockito:mockito-core","ecosystem":"maven","requirements":"${mockito.version}","direct":true,"kind":"test","optional":false},{"id":6897627213,"package_name":"org.jmock:jmock","ecosystem":"maven","requirements":"2.12.0","direct":true,"kind":"test","optional":false},{"id":6897627214,"package_name":"org.jmock:jmock-junit4","ecosystem":"maven","requirements":"2.12.0","direct":true,"kind":"test","optional":false},{"id":6897627215,"package_name":"com.google.protobuf:protobuf-java","ecosystem":"maven","requirements":"${protobuf.version}","direct":true,"kind":"runtime","optional":false},{"id":6897627216,"package_name":"com.google.dagger:dagger","ecosystem":"maven","requirements":"2.40.5","direct":true,"kind":"test","optional":false},{"id":6897627217,"package_name":"com.google.dagger:dagger-producers","ecosystem":"maven","requirements":"2.40.5","direct":true,"kind":"test","optional":false},{"id":6897627218,"package_name":"com.google.auto.factory:auto-factory","ecosystem":"maven","requirements":"1.0.1","direct":true,"kind":"test","optional":false},{"id":6897627219,"package_name":"com.google.guava:guava-testlib","ecosystem":"maven","requirements":"${guava.version}","direct":true,"kind":"test","optional":false},{"id":6897627220,"package_name":"com.google.testing.compile:compile-testing","ecosystem":"maven","requirements":"${compile.testing.version}","direct":true,"kind":"test","optional":false},{"id":6897627221,"package_name":"com.google.protobuf:protobuf-java-util","ecosystem":"maven","requirements":"${protobuf.version}","direct":true,"kind":"test","optional":false},{"id":6897627222,"package_name":"com.ibm.icu:icu4j","ecosystem":"maven","requirements":"70.1","direct":true,"kind":"test","optional":false},{"id":6897627223,"package_name":"com.google.auto.service:auto-service-annotations","ecosystem":"maven","requirements":"${autoservice.version}","direct":true,"kind":"compile","optional":false},{"id":6897627224,"package_name":"io.netty:netty-all","ecosystem":"maven","requirements":"5.0.0.Alpha2","direct":true,"kind":"test","optional":false},{"id":6897627225,"package_name":"joda-time:joda-time","ecosystem":"maven","requirements":"2.10.13","direct":true,"kind":"test","optional":false},{"id":6897627226,"package_name":"com.google.common.html.types:proto","ecosystem":"maven","requirements":"1.0.8","direct":true,"kind":"test","optional":false},{"id":6897627227,"package_name":"com.google.common.html.types:types","ecosystem":"maven","requirements":"1.0.8","direct":true,"kind":"test","optional":false},{"id":6897627228,"package_name":"org.assertj:assertj-core","ecosystem":"maven","requirements":"3.22.0","direct":true,"kind":"test","optional":false},{"id":6897627229,"package_name":"org.easymock:easymock","ecosystem":"maven","requirements":"4.3","direct":true,"kind":"test","optional":false},{"id":6897627230,"package_name":"pl.pragmatists:JUnitParams","ecosystem":"maven","requirements":"1.1.1","direct":true,"kind":"test","optional":false},{"id":6897627231,"package_name":"org.threeten:threeten-extra","ecosystem":"maven","requirements":"1.7.0","direct":true,"kind":"test","optional":false},{"id":6897627232,"package_name":"com.google.flogger:flogger","ecosystem":"maven","requirements":"${flogger.version}","direct":true,"kind":"test","optional":false},{"id":6897627233,"package_name":"org.jspecify:jspecify","ecosystem":"maven","requirements":"${jspecify.version}","direct":true,"kind":"test","optional":false},{"id":6897627234,"package_name":"javax.inject:javax.inject","ecosystem":"maven","requirements":"1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"docgen/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:33.518Z","updated_at":"2023-01-14T13:15:33.518Z","repository_link":"https://github.com/google/error-prone/blob/master/docgen/pom.xml","dependencies":[{"id":6897628816,"package_name":"com.google.errorprone:error_prone_annotation","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"runtime","optional":false},{"id":6897628822,"package_name":"com.google.errorprone:error_prone_core","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"runtime","optional":false},{"id":6897628825,"package_name":"com.google.errorprone:error_prone_docgen_processor","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"runtime","optional":false},{"id":6897628828,"package_name":"com.google.guava:guava","ecosystem":"maven","requirements":"${guava.version}","direct":true,"kind":"runtime","optional":false},{"id":6897628830,"package_name":"org.yaml:snakeyaml","ecosystem":"maven","requirements":"1.30","direct":true,"kind":"runtime","optional":false},{"id":6897628832,"package_name":"junit:junit","ecosystem":"maven","requirements":"${junit.version}","direct":true,"kind":"test","optional":false},{"id":6897628835,"package_name":"com.beust:jcommander","ecosystem":"maven","requirements":"1.82","direct":true,"kind":"runtime","optional":false},{"id":6897628838,"package_name":"com.google.auto.value:auto-value-annotations","ecosystem":"maven","requirements":"${autovalue.version}","direct":true,"kind":"provided","optional":false},{"id":6897628840,"package_name":"com.github.spullara.mustache.java:compiler","ecosystem":"maven","requirements":"0.9.10","direct":true,"kind":"runtime","optional":false},{"id":6897628858,"package_name":"com.google.code.gson:gson","ecosystem":"maven","requirements":"2.8.9","direct":true,"kind":"runtime","optional":false},{"id":6897628861,"package_name":"com.google.truth:truth","ecosystem":"maven","requirements":"${truth.version}","direct":true,"kind":"test","optional":false}]},{"ecosystem":"maven","filepath":"docgen_processor/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:33.635Z","updated_at":"2023-01-14T13:15:33.635Z","repository_link":"https://github.com/google/error-prone/blob/master/docgen_processor/pom.xml","dependencies":[{"id":6897629563,"package_name":"com.google.errorprone:error_prone_annotation","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"runtime","optional":false},{"id":6897629564,"package_name":"com.google.guava:guava","ecosystem":"maven","requirements":"${guava.version}","direct":true,"kind":"runtime","optional":false},{"id":6897629565,"package_name":"com.google.auto.service:auto-service-annotations","ecosystem":"maven","requirements":"${autoservice.version}","direct":true,"kind":"runtime","optional":false},{"id":6897629566,"package_name":"com.google.code.gson:gson","ecosystem":"maven","requirements":"2.8.9","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"refaster/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:33.673Z","updated_at":"2023-01-14T13:15:33.673Z","repository_link":"https://github.com/google/error-prone/blob/master/refaster/pom.xml","dependencies":[{"id":6897629625,"package_name":"com.google.errorprone:error_prone_core","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"compile","optional":false},{"id":6897629626,"package_name":"com.google.auto.service:auto-service-annotations","ecosystem":"maven","requirements":"${autoservice.version}","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"test_helpers/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:33.719Z","updated_at":"2023-01-14T13:15:33.719Z","repository_link":"https://github.com/google/error-prone/blob/master/test_helpers/pom.xml","dependencies":[{"id":6897629635,"package_name":"com.google.errorprone:error_prone_annotation","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"runtime","optional":false},{"id":6897629636,"package_name":"com.google.errorprone:error_prone_check_api","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"runtime","optional":false},{"id":6897629637,"package_name":"com.google.code.findbugs:jsr305","ecosystem":"maven","requirements":"3.0.2","direct":true,"kind":"runtime","optional":false},{"id":6897629638,"package_name":"org.checkerframework:dataflow-errorprone","ecosystem":"maven","requirements":"${dataflow.version}","direct":true,"kind":"runtime","optional":false},{"id":6897629639,"package_name":"com.google.auto.value:auto-value","ecosystem":"maven","requirements":"${autovalue.version}","direct":true,"kind":"provided","optional":false},{"id":6897629640,"package_name":"com.google.auto.service:auto-service","ecosystem":"maven","requirements":"${autoservice.version}","direct":true,"kind":"provided","optional":false},{"id":6897629641,"package_name":"com.google.errorprone:error_prone_annotations","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"compile","optional":false},{"id":6897629642,"package_name":"com.google.googlejavaformat:google-java-format","ecosystem":"maven","requirements":"1.13.0","direct":true,"kind":"runtime","optional":false},{"id":6897629643,"package_name":"junit:junit","ecosystem":"maven","requirements":"${junit.version}","direct":true,"kind":"runtime","optional":false},{"id":6897629644,"package_name":"org.hamcrest:hamcrest-core","ecosystem":"maven","requirements":"2.2","direct":true,"kind":"runtime","optional":false},{"id":6897629645,"package_name":"org.hamcrest:hamcrest-library","ecosystem":"maven","requirements":"2.2","direct":true,"kind":"runtime","optional":false},{"id":6897629646,"package_name":"com.google.truth:truth","ecosystem":"maven","requirements":"${truth.version}","direct":true,"kind":"runtime","optional":false},{"id":6897629647,"package_name":"org.mockito:mockito-core","ecosystem":"maven","requirements":"${mockito.version}","direct":true,"kind":"test","optional":false},{"id":6897629648,"package_name":"com.google.guava:guava-testlib","ecosystem":"maven","requirements":"${guava.version}","direct":true,"kind":"test","optional":false},{"id":6897629649,"package_name":"com.google.jimfs:jimfs","ecosystem":"maven","requirements":"1.2","direct":true,"kind":"runtime","optional":false},{"id":6897629650,"package_name":"com.google.testing.compile:compile-testing","ecosystem":"maven","requirements":"${compile.testing.version}","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"maven","filepath":"type_annotations/pom.xml","sha":null,"kind":"manifest","created_at":"2023-01-14T13:15:33.764Z","updated_at":"2023-01-14T13:15:33.764Z","repository_link":"https://github.com/google/error-prone/blob/master/type_annotations/pom.xml","dependencies":[{"id":6897629662,"package_name":"com.google.errorprone:error_prone_annotations","ecosystem":"maven","requirements":"${project.version}","direct":true,"kind":"provided","optional":false}]},{"ecosystem":"maven","filepath":"pom.xml","sha":null,"kind":"manifest","created_at":"2023-09-22T01:52:42.034Z","updated_at":"2023-09-22T01:52:42.034Z","repository_link":"https://github.com/google/error-prone/blob/master/pom.xml","dependencies":[]}],"score":37.55186312416411,"created_at":"2025-05-08T02:55:44.264Z","updated_at":"2026-06-21T02:02:12.750Z","avatar_url":"https://github.com/google.png","language":"Java","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/360789","html_url":"https://summary.ecosyste.ms/projects/360789"}