{"id":360969,"url":"https://github.com/typetools/checker-framework","last_synced_at":"2026-06-21T16:01:31.621Z","repository":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2026-05-31T02:07:29.000Z","size":243236,"stargazers_count":1138,"open_issues_count":436,"forks_count":437,"subscribers_count":42,"default_branch":"master","last_synced_at":"2026-05-31T04:06:27.566Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2026-05-31T02:06:34.000Z","dependencies_parsed_at":"2026-03-04T19:07:14.568Z","dependency_job_id":null,"html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":196,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34101070,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-09T02:00:06.510Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"packages":[{"id":5062326,"name":"org.checkerframework:jdk8","ecosystem":"maven","description":"Annotated JDK 8 consists of Checker Framework annotations for the Open JDK Java 8 API. Method implementations in this file are empty. This file should only be compiled against and should never be placed on the runtime classpath of a compiled program.","homepage":"https://checkerframework.org","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":75,"first_release_published_at":"2014-04-03T00:37:33.000Z","latest_release_published_at":"2020-04-01T23:12:16.000Z","latest_release_number":"3.3.0","last_synced_at":"2026-05-30T05:01:54.271Z","created_at":"2022-07-28T03:39:02.704Z","updated_at":"2026-05-30T05:01:54.272Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/jdk8/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/jdk8/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:30.984Z","dependent_packages_count":27,"downloads":null,"downloads_period":null,"dependent_repos_count":245,"rankings":{"downloads":null,"dependent_repos_count":1.0193314579182893,"dependent_packages_count":2.4242909629688953,"stargazers_count":12.102609691538223,"forks_count":10.130824954049086,"docker_downloads_count":7.005361941030662,"average":6.5364838015010305},"purl":"pkg:maven/org.checkerframework/jdk8","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:jdk8","docker_dependents_count":1,"docker_downloads_count":14,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:jdk8","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:jdk8/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk8/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk8/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk8/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk8/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk8/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk8/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13677838,"name":"checker-framework-java","ecosystem":"debian","description":null,"homepage":"https://github.com/typetools/checker-framework","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T16:27:59.812Z","latest_release_published_at":"2026-02-12T16:27:59.812Z","latest_release_number":"3.2.0+ds-1","last_synced_at":"2026-03-12T17:14:13.756Z","created_at":"2026-02-12T16:27:59.649Z","updated_at":"2026-03-12T17:14:13.757Z","registry_url":"https://tracker.debian.org/pkg/checker-framework-java","install_command":"apt-get install checker-framework-java","documentation_url":"https://packages.debian.org/bookworm/checker-framework-java","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"libchecker-framework-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"bnd, debhelper-compat (= 13), default-jdk, gradle-apt-plugin, gradle-debian-helper, libgradle-core-java, libgradle-plugins-java, maven-repo-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-12T16:28:00.361Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/checker-framework-java?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/checker-framework-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/checker-framework-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/checker-framework-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/checker-framework-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/checker-framework-java/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/checker-framework-java/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/checker-framework-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/checker-framework-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/checker-framework-java/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"debian","metadata":{"codename":"bookworm"},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-04-27T18:20:38.992Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":5085360,"name":"org.checkerframework:checker-compat-qual","ecosystem":"maven","description":"Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker","homepage":"https://checkerframework.org","licenses":"The MIT License","normalized_licenses":["MIT"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":51,"first_release_published_at":"2014-09-25T19:06:36.000Z","latest_release_published_at":"2023-11-02T15:17:58.000Z","latest_release_number":"2.5.6","last_synced_at":"2026-06-01T13:02:12.958Z","created_at":"2022-07-29T02:20:54.335Z","updated_at":"2026-06-01T13:02:12.958Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/checker-compat-qual/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/checker-compat-qual/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:29.748Z","dependent_packages_count":712,"downloads":null,"downloads_period":null,"dependent_repos_count":346,"rankings":{"downloads":null,"dependent_repos_count":0.7934791749258178,"dependent_packages_count":0.10511646904770486,"stargazers_count":12.102609691538223,"forks_count":10.130824954049086,"docker_downloads_count":5.524932675269549,"average":5.731392592966076},"purl":"pkg:maven/org.checkerframework/checker-compat-qual","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:checker-compat-qual","docker_dependents_count":5,"docker_downloads_count":39528485,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:checker-compat-qual","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:checker-compat-qual/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-compat-qual/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-compat-qual/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-compat-qual/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-compat-qual/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-compat-qual/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-compat-qual/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4912358,"name":"org.checkerframework:checker-qual7","ecosystem":"maven","description":"Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker","homepage":"https://checkerframework.org","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception,The MIT License","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception","MIT"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":6,"first_release_published_at":"2017-09-29T17:15:20.000Z","latest_release_published_at":"2018-03-01T18:56:53.000Z","latest_release_number":"2.4.0","last_synced_at":"2026-06-01T21:30:19.693Z","created_at":"2022-07-27T00:44:05.038Z","updated_at":"2026-06-01T21:30:19.693Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/checker-qual7/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/checker-qual7/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:30.373Z","dependent_packages_count":5,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.77465987245843,"dependent_packages_count":11.484948292604791,"stargazers_count":12.280206468767394,"forks_count":10.82078943469364,"docker_downloads_count":null,"average":13.840151017131063},"purl":"pkg:maven/org.checkerframework/checker-qual7","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:checker-qual7","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:checker-qual7","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:checker-qual7/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual7/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual7/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual7/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual7/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual7/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual7/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13630569,"name":"checker-framework-java","ecosystem":"debian","description":null,"homepage":"https://github.com/typetools/checker-framework","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T01:08:58.728Z","latest_release_published_at":"2026-02-12T01:08:58.728Z","latest_release_number":"3.2.0+ds-3","last_synced_at":"2026-03-13T15:12:38.589Z","created_at":"2026-02-12T01:08:58.352Z","updated_at":"2026-03-13T15:12:38.589Z","registry_url":"https://tracker.debian.org/pkg/checker-framework-java","install_command":"apt-get install checker-framework-java","documentation_url":"https://packages.debian.org/trixie/checker-framework-java","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"libchecker-framework-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"bnd, debhelper-compat (= 13), default-jdk, gradle-apt-plugin, gradle-debian-helper, libgradle-core-java, libgradle-plugins-java, libplume-util-java, maven-repo-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-12T02:37:32.436Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/checker-framework-java?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/checker-framework-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/checker-framework-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/checker-framework-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/checker-framework-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/checker-framework-java/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/checker-framework-java/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/checker-framework-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/checker-framework-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/checker-framework-java/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"debian","metadata":{"codename":"trixie"},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-04-27T18:20:39.853Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13489536,"name":"checker-framework-java","ecosystem":"debian","description":null,"homepage":"https://github.com/typetools/checker-framework","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-10T17:53:19.054Z","latest_release_published_at":"2026-02-10T17:53:19.054Z","latest_release_number":"3.0.1+ds2-3","last_synced_at":"2026-03-14T12:42:35.430Z","created_at":"2026-02-10T17:53:18.819Z","updated_at":"2026-03-14T12:42:35.430Z","registry_url":"https://tracker.debian.org/pkg/checker-framework-java","install_command":"apt-get install checker-framework-java","documentation_url":"https://packages.debian.org/bullseye/checker-framework-java","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"libchecker-framework-java","standards_version":"4.5.1","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"bnd, debhelper-compat (= 13), default-jdk, gradle-apt-plugin, gradle-debian-helper, libgradle-core-java, libgradle-plugins-java, maven-repo-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-11T13:59:45.411Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/checker-framework-java?arch=source\u0026distro=debian-11\u0026repository_url=https://packages.debian.org/bullseye","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/checker-framework-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/checker-framework-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/checker-framework-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/checker-framework-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/checker-framework-java/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/checker-framework-java/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/checker-framework-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/checker-framework-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/checker-framework-java/codemeta","maintainers":[],"registry":{"name":"debian-11","url":"https://packages.debian.org/bullseye","ecosystem":"debian","default":false,"packages_count":31268,"maintainers_count":0,"namespaces_count":3,"keywords_count":0,"github":"debian","metadata":{"codename":"bullseye"},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.702Z","updated_at":"2026-04-27T18:20:39.352Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/namespaces"}},{"id":13413324,"name":"checker-framework-java","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/typetools/checker-framework","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-06T22:36:00.553Z","latest_release_published_at":"2026-02-06T22:36:00.553Z","latest_release_number":"3.0.1+ds2-3","last_synced_at":"2026-03-07T00:13:57.911Z","created_at":"2026-02-06T22:36:00.226Z","updated_at":"2026-03-07T00:13:57.911Z","registry_url":"https://launchpad.net/ubuntu/+source/checker-framework-java","install_command":"apt-get install checker-framework-java","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"libchecker-framework-java","standards_version":"4.5.1","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"bnd, debhelper-compat (= 13), default-jdk, gradle-apt-plugin, gradle-debian-helper, libgradle-core-java, libgradle-plugins-java, maven-repo-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{},"purl":"pkg:deb/ubuntu/checker-framework-java?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/checker-framework-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/checker-framework-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/checker-framework-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/checker-framework-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/checker-framework-java/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/checker-framework-java/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/checker-framework-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/checker-framework-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/checker-framework-java/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"jammy"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-04-27T18:20:36.155Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":13443916,"name":"checker-framework-java","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/typetools/checker-framework","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T09:35:43.496Z","latest_release_published_at":"2026-02-08T09:35:43.496Z","latest_release_number":"3.2.0+ds-3","last_synced_at":"2026-03-08T09:58:01.223Z","created_at":"2026-02-08T09:35:42.298Z","updated_at":"2026-03-08T10:07:57.479Z","registry_url":"https://launchpad.net/ubuntu/+source/checker-framework-java","install_command":"apt-get install checker-framework-java","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"libchecker-framework-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"bnd, debhelper-compat (= 13), default-jdk, gradle-apt-plugin, gradle-debian-helper, libgradle-core-java, libgradle-plugins-java, libplume-util-java, maven-repo-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/checker-framework-java?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/checker-framework-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/checker-framework-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/checker-framework-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/checker-framework-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/checker-framework-java/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/checker-framework-java/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/checker-framework-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/checker-framework-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/checker-framework-java/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-04-27T18:20:37.303Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13383452,"name":"checker-framework-java","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/typetools/checker-framework","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-05T10:25:29.574Z","latest_release_published_at":"2026-02-05T10:25:29.574Z","latest_release_number":"3.2.0+ds-3","last_synced_at":"2026-03-05T11:23:40.787Z","created_at":"2026-02-05T10:25:28.980Z","updated_at":"2026-03-05T11:31:18.471Z","registry_url":"https://launchpad.net/ubuntu/+source/checker-framework-java","install_command":"apt-get install checker-framework-java","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"libchecker-framework-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"bnd, debhelper-compat (= 13), default-jdk, gradle-apt-plugin, gradle-debian-helper, libgradle-core-java, libgradle-plugins-java, libplume-util-java, maven-repo-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/checker-framework-java?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/checker-framework-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/checker-framework-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/checker-framework-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/checker-framework-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/checker-framework-java/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/checker-framework-java/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/checker-framework-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/checker-framework-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/checker-framework-java/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"noble"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-04-27T18:20:35.701Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":4912411,"name":"org.checkerframework:jdk7","ecosystem":"maven","description":"Annotated JDK 7 consists of bytecode implementing the Open JDK Java 7 api annotated with Checker Framework annotations. Method implementations in this file are empty. This file should only be compiled against and should never be placed on the runtime classpath of a compiled program.","homepage":"https://checkerframework.org","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":43,"first_release_published_at":"2014-04-03T00:36:08.000Z","latest_release_published_at":"2017-08-03T17:56:49.000Z","latest_release_number":"2.1.14","last_synced_at":"2026-05-30T09:50:46.437Z","created_at":"2022-07-27T00:44:21.098Z","updated_at":"2026-05-30T09:50:46.438Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/jdk7/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/jdk7/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:48:46.763Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":46,"rankings":{"downloads":null,"dependent_repos_count":3.218172171109932,"dependent_packages_count":32.98601447606843,"stargazers_count":12.280206468767394,"forks_count":10.82078943469364,"docker_downloads_count":4.599696463681759,"average":12.780975802864232},"purl":"pkg:maven/org.checkerframework/jdk7","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:jdk7","docker_dependents_count":2,"docker_downloads_count":343,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:jdk7","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:jdk7/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk7/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk7/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk7/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk7/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk7/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:jdk7/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13540661,"name":"checker-framework-java","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/typetools/checker-framework","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T00:57:41.650Z","latest_release_published_at":"2026-02-11T00:57:41.650Z","latest_release_number":"3.2.0+ds-1","last_synced_at":"2026-03-12T04:15:54.456Z","created_at":"2026-02-11T00:57:41.479Z","updated_at":"2026-03-12T04:15:54.456Z","registry_url":"https://launchpad.net/ubuntu/+source/checker-framework-java","install_command":"apt-get install checker-framework-java","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"libchecker-framework-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"bnd, debhelper-compat (= 13), default-jdk, gradle-apt-plugin, gradle-debian-helper, libgradle-core-java, libgradle-plugins-java, maven-repo-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-11T14:37:35.925Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/checker-framework-java?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/checker-framework-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/checker-framework-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/checker-framework-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/checker-framework-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/checker-framework-java/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/checker-framework-java/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/checker-framework-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/checker-framework-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/checker-framework-java/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-04-27T18:20:38.741Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":5090093,"name":"org.checkerframework:dataflow","ecosystem":"maven","description":"Dataflow is a dataflow framework based on the javac compiler.","homepage":"https://checkerframework.org/","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":143,"first_release_published_at":"2014-09-25T19:14:10.000Z","latest_release_published_at":"2026-03-02T20:48:50.000Z","latest_release_number":"3.54.0","last_synced_at":"2026-05-30T05:01:56.317Z","created_at":"2022-07-29T05:35:50.972Z","updated_at":"2026-05-30T05:01:56.317Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/dataflow/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/dataflow/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:31.552Z","dependent_packages_count":11,"downloads":null,"downloads_period":null,"dependent_repos_count":12,"rankings":{"downloads":null,"dependent_repos_count":7.060036640671146,"dependent_packages_count":5.585388610580523,"stargazers_count":12.283610240146082,"forks_count":10.82078943469364,"docker_downloads_count":null,"average":8.937456231522848},"purl":"pkg:maven/org.checkerframework/dataflow","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:dataflow","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:dataflow","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:dataflow/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5076821,"name":"org.checkerframework:javacutil","ecosystem":"maven","description":"javacutil contains utility classes for the javac compiler.","homepage":"https://checkerframework.org/","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":143,"first_release_published_at":"2014-09-25T19:16:13.000Z","latest_release_published_at":"2026-03-02T20:48:50.000Z","latest_release_number":"3.54.0","last_synced_at":"2026-05-22T18:47:45.924Z","created_at":"2022-07-28T15:02:41.733Z","updated_at":"2026-05-22T18:47:45.924Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/javacutil/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/javacutil/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:31.386Z","dependent_packages_count":11,"downloads":null,"downloads_period":null,"dependent_repos_count":9,"rankings":{"downloads":null,"dependent_repos_count":8.214518115107769,"dependent_packages_count":5.585388610580523,"stargazers_count":12.283610240146082,"forks_count":10.82078943469364,"docker_downloads_count":null,"average":9.226076600132004},"purl":"pkg:maven/org.checkerframework/javacutil","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:javacutil","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:javacutil","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:javacutil/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:javacutil/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:javacutil/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:javacutil/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:javacutil/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:javacutil/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:javacutil/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5107136,"name":"org.checkerframework:checker","ecosystem":"maven","description":"The Checker Framework enhances Java's type system to make it more powerful and useful. This lets software developers detect and prevent errors in their Java programs. The Checker Framework includes compiler plug-ins (\"checkers\") that find bugs or verify their absence. It also permits you to write your own compiler plug-ins.","homepage":"https://checkerframework.org/","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":152,"first_release_published_at":"2014-04-03T00:31:52.000Z","latest_release_published_at":"2026-04-07T22:51:23.000Z","latest_release_number":"4.0.0","last_synced_at":"2026-05-29T11:45:30.390Z","created_at":"2022-07-30T01:01:40.449Z","updated_at":"2026-05-29T11:45:30.390Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/checker/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/checker/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:48:28.374Z","dependent_packages_count":55,"downloads":null,"downloads_period":null,"dependent_repos_count":375,"rankings":{"downloads":null,"dependent_repos_count":0.7418219387080885,"dependent_packages_count":1.2702099330256587,"stargazers_count":12.283610240146082,"forks_count":10.82078943469364,"docker_downloads_count":4.551843442534328,"average":5.933654997821559},"purl":"pkg:maven/org.checkerframework/checker","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:checker","docker_dependents_count":2,"docker_downloads_count":397,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:checker","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:checker/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5076809,"name":"org.checkerframework:framework-test","ecosystem":"maven","description":"framework-test contains utility classes for testing type-checkersthat are built on the Checker Framework.","homepage":"https://checkerframework.org/","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":98,"first_release_published_at":"2018-08-31T01:47:56.000Z","latest_release_published_at":"2026-05-01T18:13:52.000Z","latest_release_number":"4.1.0","last_synced_at":"2026-05-06T10:38:02.171Z","created_at":"2022-07-28T15:02:22.833Z","updated_at":"2026-05-06T10:38:02.171Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/framework-test/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/framework-test/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:31.215Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":10,"rankings":{"downloads":null,"dependent_repos_count":7.811670954759784,"dependent_packages_count":17.56669903592988,"stargazers_count":12.283610240146082,"forks_count":10.82078943469364,"docker_downloads_count":null,"average":12.120692416382347},"purl":"pkg:maven/org.checkerframework/framework-test","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:framework-test","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:framework-test","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:framework-test/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:framework-test/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:framework-test/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:framework-test/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:framework-test/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:framework-test/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:framework-test/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4912424,"name":"org.checkerframework:checker-qual-android","ecosystem":"maven","description":"checker-qual-android contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework. The checker-qual-android artifact is identical to the checker-qual artifact, except that in checker-qual-android annotations have classfile retention. The default Android Gradle plugin retains types annotated with runtime annotations in the main dex, but strips out class-retention annotations.","homepage":"https://checkerframework.org/","licenses":"The MIT License","normalized_licenses":["MIT"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":96,"first_release_published_at":"2018-10-03T12:32:00.000Z","latest_release_published_at":"2026-04-07T22:51:23.000Z","latest_release_number":"4.0.0","last_synced_at":"2026-05-29T15:31:26.449Z","created_at":"2022-07-27T00:44:29.832Z","updated_at":"2026-05-29T15:31:26.449Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/checker-qual-android/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/checker-qual-android/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:31.599Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":14,"rankings":{"downloads":null,"dependent_repos_count":6.563672549184496,"dependent_packages_count":32.98601447606843,"stargazers_count":12.010908086159464,"forks_count":9.902171606139602,"docker_downloads_count":null,"average":15.365691679387998},"purl":"pkg:maven/org.checkerframework/checker-qual-android","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:checker-qual-android","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:checker-qual-android","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:checker-qual-android/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual-android/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual-android/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual-android/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual-android/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual-android/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual-android/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4828415,"name":"io.github.eisop:jdk8","ecosystem":"maven","description":"Annotated JDK 8 consists of bytecode implementing the Open JDK Java 8 api annotated with Checker Framework annotations. Method implementations in this file are empty. This file should only be compiled against and should never be placed on the runtime classpath of a compiled program.","homepage":"https://checkerframework.org","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"io.github.eisop","versions_count":1,"first_release_published_at":"2019-05-24T18:28:28.000Z","latest_release_published_at":"2019-05-24T18:28:28.000Z","latest_release_number":"3.0.0-b2","last_synced_at":"2026-05-30T18:15:37.212Z","created_at":"2022-07-26T15:43:08.301Z","updated_at":"2026-05-30T18:15:37.212Z","registry_url":"https://central.sonatype.com/artifact/io.github.eisop/jdk8/","install_command":null,"documentation_url":"https://appdoc.app/artifact/io.github.eisop/jdk8/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:33.342Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":48.85985838769028,"stargazers_count":9.411660844738092,"forks_count":7.896621810061336,"average":24.537021245859275},"purl":"pkg:maven/io.github.eisop/jdk8","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/io.github.eisop:jdk8","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/io.github.eisop:jdk8","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/io.github.eisop:jdk8/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/io.github.eisop:jdk8/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/io.github.eisop:jdk8/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/io.github.eisop:jdk8/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/io.github.eisop:jdk8/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/io.github.eisop:jdk8/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/io.github.eisop:jdk8/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4912349,"name":"org.checkerframework:testlib","ecosystem":"maven","description":"Testlib is a collection of utility classes for testing checkers that use the Checker Framework.","homepage":"https://checkerframework.org","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception,The MIT License","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception","MIT"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":4,"first_release_published_at":"2018-05-01T20:52:09.000Z","latest_release_published_at":"2018-08-01T22:18:31.000Z","latest_release_number":"2.5.4","last_synced_at":"2026-04-27T13:39:43.940Z","created_at":"2022-07-27T00:44:02.304Z","updated_at":"2026-04-27T13:39:43.940Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/testlib/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/testlib/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-09-26T18:23:15.000Z","size":239838,"stargazers_count":1095,"open_issues_count":414,"forks_count":380,"subscribers_count":43,"default_branch":"master","last_synced_at":"2025-09-27T04:35:06.160Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-09-26T18:22:21.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278283509,"owners_count":25961311,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-04T02:00:05.491Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:52.894Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.77465987245843,"dependent_packages_count":17.56669903592988,"stargazers_count":12.102609691538223,"forks_count":10.130824954049086,"docker_downloads_count":null,"average":15.143698388493904},"purl":"pkg:maven/org.checkerframework/testlib","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:testlib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:testlib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:testlib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-02T08:01:33.768Z","issues_count":257,"pull_requests_count":1179,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":301705.99306930695,"issues_closed_count":138,"pull_requests_closed_count":1010,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4747081712062258,"avg_comments_per_pull_request":0.3324851569126378,"merged_pull_requests_count":867,"bot_issues_count":3,"bot_pull_requests_count":204,"past_year_issues_count":73,"past_year_pull_requests_count":496,"past_year_avg_time_to_close_issue":782880.5769230769,"past_year_avg_time_to_close_pull_request":178864.34625322997,"past_year_issues_closed_count":26,"past_year_pull_requests_closed_count":387,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":34,"past_year_avg_comments_per_issue":0.5753424657534246,"past_year_avg_comments_per_pull_request":0.27419354838709675,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":335,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":589,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":222,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":259,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":90,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:testlib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:testlib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:testlib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:testlib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:testlib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:testlib/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4912413,"name":"org.checkerframework:checker-util","ecosystem":"maven","description":"checker-util contains utility classes for programmers to use at run time.","homepage":"https://checkerframework.org/","licenses":"The MIT License","normalized_licenses":["MIT"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":67,"first_release_published_at":"2021-02-01T20:37:22.000Z","latest_release_published_at":"2026-04-07T22:51:23.000Z","latest_release_number":"4.0.0","last_synced_at":"2026-05-24T02:03:02.924Z","created_at":"2022-07-27T00:44:22.319Z","updated_at":"2026-05-24T02:03:02.925Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/checker-util/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/checker-util/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-09-26T18:23:15.000Z","size":239838,"stargazers_count":1095,"open_issues_count":414,"forks_count":380,"subscribers_count":43,"default_branch":"master","last_synced_at":"2025-09-27T04:35:06.160Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-09-26T18:22:21.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278283509,"owners_count":25961311,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-04T02:00:05.491Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:52.818Z","dependent_packages_count":4,"downloads":null,"downloads_period":null,"dependent_repos_count":6,"rankings":{"downloads":null,"dependent_repos_count":10.030734114867503,"dependent_packages_count":13.926458368789357,"stargazers_count":12.280206468767394,"forks_count":10.82078943469364,"docker_downloads_count":null,"average":11.764547096779474},"purl":"pkg:maven/org.checkerframework/checker-util","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:checker-util","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:checker-util","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:checker-util/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-02T08:01:33.768Z","issues_count":257,"pull_requests_count":1179,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":301705.99306930695,"issues_closed_count":138,"pull_requests_closed_count":1010,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4747081712062258,"avg_comments_per_pull_request":0.3324851569126378,"merged_pull_requests_count":867,"bot_issues_count":3,"bot_pull_requests_count":204,"past_year_issues_count":73,"past_year_pull_requests_count":496,"past_year_avg_time_to_close_issue":782880.5769230769,"past_year_avg_time_to_close_pull_request":178864.34625322997,"past_year_issues_closed_count":26,"past_year_pull_requests_closed_count":387,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":34,"past_year_avg_comments_per_issue":0.5753424657534246,"past_year_avg_comments_per_pull_request":0.27419354838709675,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":335,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":589,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":222,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":259,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":90,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-util/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-util/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-util/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-util/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-util/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-util/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":4912405,"name":"org.checkerframework:dataflow-shaded","ecosystem":"maven","description":"dataflow-shaded is a dataflow framework based on the javac compiler. It differs from the org.checkerframework:dataflow artifact in two ways. First, the packages in this artifact have been renamed to org.checkerframework.shaded.*. Second, unlike the dataflow artifact, this artifact contains the dependencies it requires.","homepage":"https://checkerframework.org/","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":82,"first_release_published_at":"2020-02-03T18:33:28.000Z","latest_release_published_at":"2026-05-01T18:13:52.000Z","latest_release_number":"4.1.0","last_synced_at":"2026-05-24T02:03:56.478Z","created_at":"2022-07-27T00:44:18.196Z","updated_at":"2026-05-24T02:03:56.478Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/dataflow-shaded/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/dataflow-shaded/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-09-26T18:23:15.000Z","size":239838,"stargazers_count":1095,"open_issues_count":414,"forks_count":380,"subscribers_count":43,"default_branch":"master","last_synced_at":"2025-09-27T04:35:06.160Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-09-26T18:22:21.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":278283509,"owners_count":25961311,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-04T02:00:05.491Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:52.813Z","dependent_packages_count":12,"downloads":null,"downloads_period":null,"dependent_repos_count":2,"rankings":{"downloads":null,"dependent_repos_count":16.115688414139694,"dependent_packages_count":5.170328724226443,"stargazers_count":12.280206468767394,"forks_count":10.82078943469364,"docker_downloads_count":null,"average":11.096753260456794},"purl":"pkg:maven/org.checkerframework/dataflow-shaded","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:dataflow-shaded","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:dataflow-shaded","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:dataflow-shaded/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-02T08:01:33.768Z","issues_count":257,"pull_requests_count":1179,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":301705.99306930695,"issues_closed_count":138,"pull_requests_closed_count":1010,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4747081712062258,"avg_comments_per_pull_request":0.3324851569126378,"merged_pull_requests_count":867,"bot_issues_count":3,"bot_pull_requests_count":204,"past_year_issues_count":73,"past_year_pull_requests_count":496,"past_year_avg_time_to_close_issue":782880.5769230769,"past_year_avg_time_to_close_pull_request":178864.34625322997,"past_year_issues_closed_count":26,"past_year_pull_requests_closed_count":387,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":34,"past_year_avg_comments_per_issue":0.5753424657534246,"past_year_avg_comments_per_pull_request":0.27419354838709675,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":335,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":589,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":222,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":259,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":90,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-shaded/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-shaded/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-shaded/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-shaded/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-shaded/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-shaded/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13471486,"name":"checker-framework-java","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/typetools/checker-framework","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-09T22:18:45.786Z","latest_release_published_at":"2026-02-09T22:18:45.786Z","latest_release_number":"3.2.0+ds-2","last_synced_at":"2026-03-09T23:02:28.612Z","created_at":"2026-02-09T22:18:43.110Z","updated_at":"2026-03-09T23:32:12.534Z","registry_url":"https://launchpad.net/ubuntu/+source/checker-framework-java","install_command":"apt-get install checker-framework-java","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"libchecker-framework-java","standards_version":"4.6.2","maintainer":"Debian Java Maintainers \u003cpkg-java-maintainers@lists.alioth.debian.org\u003e","build_depends":"bnd, debhelper-compat (= 13), default-jdk, gradle-apt-plugin, gradle-debian-helper, libgradle-core-java, libgradle-plugins-java, libplume-util-java, maven-repo-helper","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/checker-framework-java?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/checker-framework-java","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/checker-framework-java","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/checker-framework-java/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/checker-framework-java/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/checker-framework-java/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/checker-framework-java/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/checker-framework-java/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/checker-framework-java/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/checker-framework-java/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-04-27T18:20:38.051Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":4912343,"name":"org.checkerframework:dataflow-errorprone","ecosystem":"maven","description":"dataflow-errorprone is a dataflow framework based on the javac compiler. It differs from the org.checkerframework:dataflow artifact in two ways. First, the packages in this artifact have been renamed to org.checkerframework.errorprone.*. Second, unlike the dataflow artifact, this artifact contains the dependencies it requires.","homepage":"https://checkerframework.org/","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":63,"first_release_published_at":"2021-06-01T20:42:29.000Z","latest_release_published_at":"2026-04-07T22:51:23.000Z","latest_release_number":"4.0.0","last_synced_at":"2026-05-27T17:47:21.297Z","created_at":"2022-07-27T00:44:01.104Z","updated_at":"2026-05-27T17:47:21.298Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/dataflow-errorprone/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/dataflow-errorprone/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:31.992Z","dependent_packages_count":42,"downloads":null,"downloads_period":null,"dependent_repos_count":15,"rankings":{"downloads":null,"dependent_repos_count":6.295775719497203,"dependent_packages_count":1.607784640951456,"stargazers_count":12.280206468767394,"forks_count":10.82078943469364,"docker_downloads_count":null,"average":7.751139065977424},"purl":"pkg:maven/org.checkerframework/dataflow-errorprone","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:dataflow-errorprone","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:dataflow-errorprone","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:dataflow-errorprone/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-errorprone/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-errorprone/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-errorprone/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-errorprone/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-errorprone/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-errorprone/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5422843,"name":"org.checkerframework:checker-qual","ecosystem":"maven","description":"checker-qual contains annotations (type qualifiers) that a programmerwrites to specify Java code for type-checking by the Checker Framework.","homepage":"https://checkerframework.org/","licenses":"The MIT License","normalized_licenses":["MIT"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":149,"first_release_published_at":"2014-04-03T00:32:55.000Z","latest_release_published_at":"2026-03-02T20:48:50.000Z","latest_release_number":"3.54.0","last_synced_at":"2026-04-30T16:32:17.156Z","created_at":"2022-11-14T19:41:23.589Z","updated_at":"2026-04-30T16:32:17.157Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/checker-qual/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/checker-qual/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:48:20.327Z","dependent_packages_count":1685,"downloads":null,"downloads_period":null,"dependent_repos_count":2614,"rankings":{"downloads":null,"dependent_repos_count":0.20562783564189122,"dependent_packages_count":0.04344814053971801,"stargazers_count":12.102609691538223,"forks_count":10.130824954049086,"docker_downloads_count":4.518206172439062,"average":5.400143358841596},"purl":"pkg:maven/org.checkerframework/checker-qual","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:checker-qual","docker_dependents_count":28,"docker_downloads_count":426669745,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:checker-qual","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:checker-qual/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:checker-qual/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":5062309,"name":"org.checkerframework:dataflow-nullaway","ecosystem":"maven","description":"dataflow-nullaway is a dataflow framework based on the javac compiler. It differs from the org.checkerframework:dataflow artifact in two ways. First, the packages in this artifact have been renamed to org.checkerframework.nullaway.*. Second, unlike the dataflow artifact, this artifact contains the dependencies it requires.","homepage":"https://checkerframework.org/","licenses":"GNU General Public License, version 2 (GPL2), with the classpath exception","normalized_licenses":["GPL-1.0","GPL-2.0-with-classpath-exception"],"repository_url":"https://github.com/typetools/checker-framework","keywords_array":[],"namespace":"org.checkerframework","versions_count":64,"first_release_published_at":"2021-06-01T20:42:35.000Z","latest_release_published_at":"2026-05-01T18:13:52.000Z","latest_release_number":"4.1.0","last_synced_at":"2026-05-24T22:18:58.792Z","created_at":"2022-07-28T03:38:49.058Z","updated_at":"2026-05-24T22:18:58.792Z","registry_url":"https://central.sonatype.com/artifact/org.checkerframework/dataflow-nullaway/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.checkerframework/dataflow-nullaway/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":34544328,"uuid":"38488726","full_name":"typetools/checker-framework","owner":"typetools","description":"Pluggable type-checking for Java","archived":false,"fork":false,"pushed_at":"2025-10-11T06:00:50.000Z","size":239908,"stargazers_count":1098,"open_issues_count":418,"forks_count":379,"subscribers_count":42,"default_branch":"master","last_synced_at":"2025-10-11T11:34:16.302Z","etag":null,"topics":["java","types","verification"],"latest_commit_sha":null,"homepage":"http://checkerframework.org/","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/typetools.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-07-03T11:09:17.000Z","updated_at":"2025-10-10T08:13:44.000Z","dependencies_parsed_at":"2024-01-22T09:30:12.579Z","dependency_job_id":"1c9ce476-5a97-4eae-9cb1-69db300c0589","html_url":"https://github.com/typetools/checker-framework","commit_stats":null,"previous_names":[],"tags_count":187,"template":false,"template_full_name":null,"purl":"pkg:github/typetools/checker-framework","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","download_url":"https://codeload.github.com/typetools/checker-framework/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/sbom","scorecard":{"id":72906,"data":{"date":"2025-08-04","repo":{"name":"github.com/typetools/checker-framework","commit":"521a6c44bc16c3a874618ad2cb789ada4f9f3034"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":3.3,"checks":[{"name":"Code-Review","score":1,"reason":"Found 3/26 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact checker-framework-3.49.5 not signed: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 not signed: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 not signed: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 not signed: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 not signed: https://api.github.com/repos/typetools/checker-framework/releases/203431709","Warn: release artifact checker-framework-3.49.5 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/228849499","Warn: release artifact checker-framework-3.49.4 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/222527114","Warn: release artifact checker-framework-3.49.3 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/216220143","Warn: release artifact checker-framework-3.49.2 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/209696297","Warn: release artifact checker-framework-3.49.1 does not have provenance: https://api.github.com/repos/typetools/checker-framework/releases/203431709"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":-1,"reason":"internal error: failure checking for Gradle wrapper validating Action: failure listing workflow runs: internal error: ListWorkflowRunsByFileName: GET https://api.github.com/repos/typetools/checker-framework/actions/workflows/gradle-wrapper-validation.yml-DISABLED/runs?status=success: 404 Not Found []","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk11.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk17.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21-plus.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk21.m4:6: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk24.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25-plus.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdk25.m4:6: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkbase.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubuntu-jdkplus.m4:5: pin your Docker image by updating ubuntu to ubuntu@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkbase.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Warn: containerImage not pinned by hash: checker/bin-devel/Dockerfile-ubunturolling-jdkplus.m4:5: pin your Docker image by updating ubuntu:rolling to ubuntu:rolling@sha256:95a416ad2446813278ec13b7efdeb551190c94e12028707dd7525632d3cec0d1","Info:   0 out of  28 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-15T04:13:25.177Z","repository_id":34544328,"created_at":"2025-08-15T04:13:25.177Z","updated_at":"2025-08-15T04:13:25.177Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279011279,"owners_count":26084928,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-12T02:00:06.719Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"typetools","name":"typetools","uuid":"12883499","kind":"organization","description":"","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12883499?v=4","repositories_count":18,"last_synced_at":"2023-02-27T14:10:53.508Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/typetools","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-10T21:59:40.136Z","updated_at":"2023-02-27T14:10:53.529Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/typetools/repositories"},"tags":[]},"repo_metadata_updated_at":"2025-10-12T23:46:31.053Z","dependent_packages_count":18,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":20.77465987245843,"dependent_packages_count":3.5449277799802186,"stargazers_count":12.283610240146082,"forks_count":10.947730084934108,"docker_downloads_count":null,"average":11.88773199437971},"purl":"pkg:maven/org.checkerframework/dataflow-nullaway","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.checkerframework:dataflow-nullaway","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.checkerframework:dataflow-nullaway","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.checkerframework:dataflow-nullaway/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-10T01:40:25.132Z","issues_count":257,"pull_requests_count":1195,"avg_time_to_close_issue":25847817.608695652,"avg_time_to_close_pull_request":299366.79627815867,"issues_closed_count":138,"pull_requests_closed_count":1021,"pull_request_authors_count":29,"issue_authors_count":82,"avg_comments_per_issue":1.4785992217898833,"avg_comments_per_pull_request":0.34309623430962344,"merged_pull_requests_count":870,"bot_issues_count":3,"bot_pull_requests_count":206,"past_year_issues_count":67,"past_year_pull_requests_count":498,"past_year_avg_time_to_close_issue":850045.9130434783,"past_year_avg_time_to_close_pull_request":178362.3059125964,"past_year_issues_closed_count":23,"past_year_pull_requests_closed_count":389,"past_year_pull_request_authors_count":21,"past_year_issue_authors_count":33,"past_year_avg_comments_per_issue":0.6268656716417911,"past_year_avg_comments_per_pull_request":0.3072289156626506,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":91,"past_year_merged_pull_requests_count":329,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","maintainers":[{"login":"mernst","count":599,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":225,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"},{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}],"active_maintainers":[{"login":"mernst","count":261,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"},{"login":"smillst","count":85,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"},{"login":"iamsanjaymalakar","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-nullaway/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-nullaway/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-nullaway/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-nullaway/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-nullaway/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.checkerframework:dataflow-nullaway/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608196,"maintainers_count":0,"namespaces_count":80715,"keywords_count":34863,"github":"maven-central","metadata":{"funded_packages_count":37776},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-05-29T05:08:51.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":9855722,"full_name":"typetools/checker-framework","default_branch":"master","total_commits":18023,"total_committers":172,"total_bot_commits":382,"total_bot_committers":3,"mean_commits":104.78488372093024,"dds":0.5844753925539588,"past_year_total_commits":678,"past_year_total_committers":18,"past_year_total_bot_commits":104,"past_year_total_bot_committers":2,"past_year_mean_commits":37.666666666666664,"past_year_dds":0.35545722713864303,"last_synced_at":"2026-06-05T08:10:59.201Z","last_synced_commit":"dd05f24507aede034b6841b1c650cb634c721175","created_at":"2025-05-08T05:36:03.756Z","updated_at":"2026-06-05T08:07:51.699Z","committers":[{"name":"Michael Ernst","email":"mernst@cs.washington.edu","login":"mernst","count":7489},{"name":"Werner Dietl","email":"wdietl@gmail.com","login":"wmdietl","count":3023},{"name":"Suzanne Millstein","email":"smillst@cs.washington.edu","login":"smillst","count":2254},{"name":"stefanheule","email":"devnull@localhost","login":null,"count":2058},{"name":"jonathangburke","email":"jonathangburke@gmail.com","login":"JonathanBurke","count":533},{"name":"Javier Thaine","email":"jthaine@cs.washington.edu","login":"jthaine","count":304},{"name":"Martin Kellogg","email":"kelloggm@cs.washington.edu","login":"kelloggm","count":286},{"name":"charlie garrett","email":"charlie.garrett@gmail.com","login":"solleks","count":226},{"name":"renovate[bot]","email":"29139614+renovate[bot]","login":"renovate[bot]","count":222},{"name":"David McArthur","email":"mcarthur@cs.washington.edu","login":null,"count":186},{"name":"Stuart Pernsteiner","email":"spernste@cs.washington.edu","login":"spernsteiner","count":116},{"name":"Eric Spishak","email":"espishak@cs.washington.edu","login":"emspishak","count":108},{"name":"Mahmood Ali","email":"msaeed43@gmail.com","login":"notnoop","count":106},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":88},{"name":"dependabot-preview[bot]","email":"27856297+dependabot-preview[bot]","login":"dependabot-preview[bot]","count":72},{"name":"Manu Sridharan","email":"msridhar@gmail.com","login":"msridhar","count":63},{"name":"Jeff Luo","email":"j36luo@uwaterloo.ca","login":"jyluo","count":48},{"name":"Vlastimil Dort","email":"panacekcz@seznam.cz","login":"panacekcz","count":46},{"name":"James Yoo","email":"24359440+jyoo980","login":"jyoo980","count":46},{"name":"Dan Brown","email":"dbro@cs.washington.edu","login":"dbrosoft","count":43},{"name":"Weitian Xing","email":"xingweitian@gmail.com","login":"xingweitian","count":39},{"name":"wmdietlGC","email":"wernerd@google.com","login":"wmdietlGC","count":33},{"name":"Konstantin Weitz","email":"konne@google.com","login":"konne88","count":31},{"name":"Rashmi Mudduluru","email":"rashmi4@cs.washington.edu","login":"t-rasmud","count":24},{"name":"Paulo Barros","email":"pbsf@cs.washington.edu","login":null,"count":22},{"name":"CharlesZ-Chen","email":"charleszhuochen@gmail.com","login":"CharlesZ-Chen","count":22},{"name":"Colin Stebbins Gordon","email":"csgordon@drexel.edu","login":"csgordon","count":21},{"name":"Calvin Loncaric","email":"marvinx03@gmail.com","login":"Calvin-L","count":19},{"name":"Maximilian Gama","email":"maxi.gama@yahoo.com","login":"Maxi17","count":19},{"name":"David Lazar","email":"lazar6@illinois.edu","login":"davidlazar","count":18},{"name":"Jason Waataja","email":"jwaataja@cs.washington.edu","login":"jwaataja","count":17},{"name":"Steph Dietzel","email":"stephdietzel@gmail.com","login":"stephdietzel","count":17},{"name":"Narges Shadab","email":"54193416+Nargeshdb","login":"Nargeshdb","count":14},{"name":"stefan","email":"stefan@stefan-mobile.cs.washington.edu","login":null,"count":14},{"name":"stefan","email":"stefan@stefan-mobile.dhcp4.washington.edu","login":null,"count":14},{"name":"Sidney Monteiro","email":"sidney_f_monteiro@hotmail.com","login":"smonteiro","count":13},{"name":"Liam Miller-Cushon","email":"cushon@google.com","login":"cushon","count":13},{"name":"Kartikeya Goswami","email":"kartikeyagoswami20@gmail.com","login":"gokaco","count":13},{"name":"Abraham Lin","email":"abraham.lin@post.harvard.edu","login":"atomicknight","count":12},{"name":"bitterfox","email":"bitterfoxc@gmail.com","login":"bitterfox","count":12},{"name":"Chris Povirk","email":"cpovirk@google.com","login":"cpovirk","count":12},{"name":"Stefan Heule","email":"stefanheule@gmail.com","login":"stefanheule","count":11},{"name":"Paulo Barros","email":"pbsfcin@gmail.com","login":"pbsf","count":11},{"name":"Neil Brown","email":"github@twistedsquare.com","login":"neilccbrown","count":9},{"name":"danbrotherston","email":"danbrotherston@gmail.com","login":"danbrotherston","count":8},{"name":"Lázaro Clapp","email":"lazaro.clapp@gmail.com","login":"lazaroclapp","count":7},{"name":"Sascha Kehrli","email":"84683849+skehrli","login":"skehrli","count":7},{"name":"Jiasen (Jason) Xu","email":"jiasenxu@gmail.com","login":"JasonMrX","count":7},{"name":"Nhat Nguyen","email":"hoangnhat2911@gmail.com","login":"nhat-nguyen","count":7},{"name":"Sanjay Malakar","email":"iamsanjaymalakar@gmail.com","login":"iamsanjaymalakar","count":7},{"name":"Nhat Dinh","email":"35314819+NhatDinh","login":"NhatDinh","count":6},{"name":"Michael Ernst","email":"mdernst@amazon.com","login":"mdernsta","count":6},{"name":"Bohdan","email":"bohdansharipov@gmail.com","login":"Bohdankm22","count":6},{"name":"Priti Chattopadhyay","email":"35490584+PRITI1999","login":"PRITI1999","count":6},{"name":"txiang61","email":"j.tt.xiang@gmail.com","login":"txiang61","count":6},{"name":"Dilraj Singh","email":"dilraj.singh850@gmail.com","login":"dilraj45","count":5},{"name":"Ashish Rana","email":"ashishrana160796@gmail.com","login":"ashishrana160796","count":4},{"name":"Artem Pyanykh","email":"artem.pyanykh@gmail.com","login":"artempyanykh","count":4},{"name":"Felipe R. Monteiro","email":"rms.felipe@gmail.com","login":"feliperodri","count":4},{"name":"Nikhil Shinde","email":"crenickshinde1996@gmail.com","login":"nikshinde1996","count":4},{"name":"Steph Dietzel","email":"sdietzel@cs.washington.edu","login":"Magurgs","count":4},{"name":"aditya3434","email":"56246494+aditya3434","login":"aditya3434","count":4},{"name":"LS@WATER","email":"abslamp","login":"abslamp","count":4},{"name":"Anatoly Kupriyanov","email":"kan.izh@gmail.com","login":"kan-izh","count":4},{"name":"Akash Srivastava","email":"46711393+Kakarot-SSJ4","login":"Kakarot-SSJ4","count":4},{"name":"Kivanc Muslu","email":"kivanc@cs.washington.edu","login":null,"count":4},{"name":"cmackie","email":"pullman.cm@gmail.com","login":"cmackie","count":4},{"name":"Ruturaj Mohanty","email":"kanha95@gmail.com","login":"kanha95","count":3},{"name":"Ravi Roshan","email":"rroshan4167@gmail.com","login":"Ravi-Roshan","count":3},{"name":"MrigankArora","email":"40845859+MrigankArora","login":"MrigankArora","count":3},{"name":"Sean McLaughlin","email":"seanmcl@gmail.com","login":"seanmcl","count":3},{"name":"Yuki Yang","email":"106207451+YukiYang31","login":"YukiYang31","count":3},{"name":"zcai","email":"12403206+zcai1","login":"zcai1","count":3},{"name":"Lian Sun","email":"57457122+lnsun","login":"lnsun","count":3},{"name":"Dmitriy Shepelev","email":"ph.ds@outlook.com","login":"DmitriyShepelev","count":3},{"name":"ChristosToxiadis","email":"72411317+ChristosToxiadis","login":"ChristosToxiadis","count":3},{"name":"Javier Thaine","email":"javier@Javiers-MacBook-Pro.local","login":null,"count":3},{"name":"Philip Lai","email":"plai68@cs.washington.edu","login":null,"count":3},{"name":"garrett","email":"garrett@cs.washington.edu","login":null,"count":3},{"name":"mali","email":"mali@tricycle.cs.washington.edu","login":null,"count":3},{"name":"Jianchu","email":"jianchuli0624@gmail.com","login":"Jianchu","count":3},{"name":"Mark Roberts","email":"markro49","login":"markro49","count":3},{"name":"Asumu Takikawa","email":"asumu@interchange.ubc.ca","login":null,"count":2},{"name":"Michael Coblenz","email":"mcoblenz@gmail.com","login":"mcoblenz","count":2},{"name":"Michael Hixson","email":"mhixson@techempower.com","login":"michaelhixson","count":2},{"name":"Heath Borders","email":"heath.borders@gmail.com","login":"hborders","count":2},{"name":"vananiev","email":"vananiev","login":"vananiev","count":2},{"name":"shubham kapoor","email":"165891311+shubhamk0205","login":"shubhamk0205","count":2},{"name":"patrickmeiring","email":"patrick.meiring@live.com","login":"patrickmeiring","count":2},{"name":"d367wang","email":"55197967+d367wang","login":"d367wang","count":2},{"name":"Trask Stalnaker","email":"trask.stalnaker@gmail.com","login":"trask","count":2},{"name":"Tony Wang","email":"twlogger@gmail.com","login":"twlogger","count":2},{"name":"Shubham Raj","email":"shubhamraj1in@gmail.com","login":"the1derer","count":2},{"name":"Nima Karimipour","email":"karimipour.nima@gmail.com","login":"nimakarimipour","count":2},{"name":"Nicholas Breen","email":"nick@breen.kiwi","login":"nickbreen","count":2},{"name":"Kanak Das","email":"114455341+kanaksad","login":"kanaksad","count":2},{"name":"Haifeng Shi","email":"shihaifeng1998@gmail.com","login":"AndrewShf","count":2},{"name":"Gagan Dhakrey","email":"59848316+gagandhakrey","login":"gagandhakrey","count":2},{"name":"Arthur Baars","email":"arthur@semmle.com","login":"aibaars","count":2},{"name":"Daniel Gao","email":"59534933+Gaoyan1999","login":"Gaoyan1999","count":2},{"name":"Damika-Anupama","email":"63784444+Damika-Anupama","login":"Damika-Anupama","count":2},{"name":"Sebastian Schuberth","email":"sschuberth","login":"sschuberth","count":1},{"name":"Stephan Schroevers","email":"stephan202@gmail.com","login":"Stephan202","count":1},{"name":"Thomas Schweizer","email":"thms.sch@gmail.com","login":"Thomsch","count":1},{"name":"Thomas Weißschuh","email":"thomas@t-8ch.de","login":"t-8ch","count":1},{"name":"Travis Haagen","email":"travis.haagen@gmail.com","login":"travishaagen","count":1},{"name":"Vatsal Sura","email":"vatsalhsura@gmail.com","login":"vatsalsura","count":1},{"name":"renato","email":"renato@twobo.com","login":null,"count":1},{"name":"mjollnir","email":"mjollnir@Hammer","login":null,"count":1},{"name":"jburke","email":"jburke@Jonathans-MacBook-Pro.local","login":null,"count":1},{"name":"Sadaf","email":"31702613+Sadaf91","login":"Sadaf91","count":1},{"name":"Rui Fernandes","email":"ruipedro16@protonmail.com","login":"ruipedro16","count":1},{"name":"Rob Bygrave","email":"robin.bygrave@gmail.com","login":"rbygrave","count":1},{"name":"René Kraneis","email":"rene.kraneis@gmail.com","login":"rkraneis","count":1},{"name":"Prionti Nasir","email":"pdn3628@rit.edu","login":"smellslikekeenspirit","count":1},{"name":"Pratik Bhusal","email":"PratikBhusal","login":"PratikBhusal","count":1},{"name":"Pascal Wittmann","email":"mail@pascal-wittmann.de","login":"pSub","count":1},{"name":"zhangjiangqige","email":"zhangjiangqige@gmail.com","login":"zhangjiangqige","count":1},{"name":"utsavoza","email":"utsavoza","login":"utsavoza","count":1},{"name":"tamier","email":"m2ta@uwaterloo.ca","login":"topnessman","count":1},{"name":"sullis","email":"github@seansullivan.com","login":"sullis","count":1},{"name":"olegshtch","email":"olegshtch@yandex.ru","login":"olegshtch","count":1},{"name":"iywang2016","email":"146040711+iywang2016","login":"iywang2016","count":1},{"name":"awturner","email":"public@ssbd.net","login":"awturner","count":1},{"name":"atul dada","email":"developeratuldada@gmail.com","login":"atuldada","count":1},{"name":"Vladimir Sitnikov","email":"sitnikov.vladimir@gmail.com","login":"vlsi","count":1},{"name":"Vivek Singh Solanki","email":"viveksolanki0509@gmail.com","login":"vivek-0509","count":1},{"name":"Martin Kellogg","email":"mkellogg@amazon.com","login":null,"count":1},{"name":"Michael Ernst","email":"mernst@cs.washington","login":null,"count":1},{"name":"Michèle","email":"Michèle@stefan-mobile.cs.washington.edu","login":null,"count":1},{"name":"Rashmi","email":"rashmi@Rashmis-MBP.lan","login":null,"count":1},{"name":"Ryan Oblak","email":"roblak@linkedin.com","login":null,"count":1},{"name":"Sagar Tewari","email":"sagartewariym@yahoo.com","login":null,"count":1},{"name":"Suzanne Millstein","email":"smillst@buffalo.cs.washington.edu","login":null,"count":1},{"name":"W. Dietl","email":"wmdietl@localhost.localdomain","login":null,"count":1},{"name":"Olek Wojnar","email":"3818875+olekw","login":"olekw","count":1},{"name":"Joe Schafer","email":"joe.schafer@delta46.us","login":"jschaf","count":1},{"name":"Jeroen Meijer","email":"jjgmeijer@gmail.com","login":"Meijuh","count":1},{"name":"Jakub Vrána","email":"jakub@vrana.cz","login":"vrana","count":1},{"name":"Hamed Taghani","email":"hamed.taghani@gmail.com","login":"HamedTaghani","count":1},{"name":"Haaris710","email":"31973970+Haaris710","login":"Haaris710","count":1},{"name":"Gautam Korlam","email":"kageiit","login":"kageiit","count":1},{"name":"Ethan Koenig","email":"ethantkoenig@gmail.com","login":"ethantkoenig","count":1},{"name":"Craig Day","email":"craig-day","login":"craig-day","count":1},{"name":"Adian Qian","email":"49576982+QRXqrx","login":"QRXqrx","count":1},{"name":"Alvin Abdagic","email":"aabdagic","login":"aabdagic","count":1},{"name":"Anant Jain","email":"anantjain60@gmail.com","login":"anantjain6","count":1},{"name":"Ankit Yadav","email":"49056780+avenger2597","login":"avenger2597","count":1},{"name":"Arie van Deursen","email":"avandeursen","login":"avandeursen","count":1},{"name":"Ayush Agarwal","email":"aagarwal9782@gmail.com","login":"aagarwal1012","count":1},{"name":"Baorui Zhou","email":"39170025+baoruiz","login":"baoruiz","count":1},{"name":"Basil Peace","email":"grv87@yandex.ru","login":"grv87","count":1},{"name":"Benno Stein","email":"benno.stein@gmail.com","login":"bennostein","count":1},{"name":"Brian Corcoran","email":"corcorb@gmail.com","login":"corcorb","count":1},{"name":"Oleg","email":"olegzzz","login":"olegzzz","count":1},{"name":"NITIN KUMAR DAS","email":"NITIN23329@GMAIL.COM","login":"NITIN23329","count":1},{"name":"Muyeed Ahmed","email":"akib100095@gmail.com","login":"MuyeedAhmed","count":1},{"name":"MichalStehlikCz","email":"38212200+MichalStehlikCz","login":"MichalStehlikCz","count":1},{"name":"Michael Sloan","email":"mgsloan@gmail.com","login":"mgsloan","count":1},{"name":"Michael Bayne","email":"mdb@samskivert.com","login":"samskivert","count":1},{"name":"Markus Frohme","email":"mtf90","login":"mtf90","count":1},{"name":"Marko Bekhta","email":"marko-bekhta","login":"marko-bekhta","count":1},{"name":"Luqman Aden","email":"me@luqman.ca","login":"luqmana","count":1},{"name":"Leo","email":"37022913+leoliu49","login":"leoliu49","count":1},{"name":"Kenn Knowles","email":"kenn@kennknowles.com","login":"kennknowles","count":1},{"name":"Junhao Hu","email":"85237617+shisheng-1","login":"shisheng-1","count":1},{"name":"Jugal Mistry","email":"41481260+HuM4NoiD","login":"HuM4NoiD","count":1},{"name":"Joshua Peterson","email":"44014143+jpeterson2","login":"jpeterson2","count":1},{"name":"Jonathan Nieder","email":"jrn@google.com","login":"jrn","count":1},{"name":"Johnny","email":"39348311+JohnnyJayJay","login":"JohnnyJayJay","count":1},{"name":"John Vandenberg","email":"jayvdb@gmail.com","login":"jayvdb","count":1},{"name":"John Krah","email":"john.krah@gmail.com","login":"johnkrah","count":1}],"past_year_committers":[{"name":"Michael Ernst","email":"mernst@cs.washington.edu","login":"mernst","count":437},{"name":"Suzanne Millstein","email":"smillst@cs.washington.edu","login":"smillst","count":110},{"name":"renovate[bot]","email":"29139614+renovate[bot]","login":"renovate[bot]","count":101},{"name":"Manu Sridharan","email":"msridhar@gmail.com","login":"msridhar","count":5},{"name":"Liam Miller-Cushon","email":"cushon@google.com","login":"cushon","count":3},{"name":"Yuki Yang","email":"106207451+YukiYang31","login":"YukiYang31","count":3},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":3},{"name":"Damika-Anupama","email":"63784444+Damika-Anupama","login":"Damika-Anupama","count":2},{"name":"Daniel Gao","email":"59534933+Gaoyan1999","login":"Gaoyan1999","count":2},{"name":"Gagan Dhakrey","email":"59848316+gagandhakrey","login":"gagandhakrey","count":2},{"name":"Sanjay Malakar","email":"iamsanjaymalakar@gmail.com","login":"iamsanjaymalakar","count":2},{"name":"shubham kapoor","email":"165891311+shubhamk0205","login":"shubhamk0205","count":2},{"name":"Ankit Yadav","email":"49056780+avenger2597","login":"avenger2597","count":1},{"name":"Marko Bekhta","email":"marko-bekhta","login":"marko-bekhta","count":1},{"name":"Rui Fernandes","email":"ruipedro16@protonmail.com","login":"ruipedro16","count":1},{"name":"Sascha Kehrli","email":"84683849+skehrli","login":"skehrli","count":1},{"name":"Vivek Singh Solanki","email":"viveksolanki0509@gmail.com","login":"vivek-0509","count":1},{"name":"vananiev","email":"vananiev","login":"vananiev","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-09T00:00:08.806Z","repositories_count":6254374,"commits_count":884058583,"contributors_count":35053221,"owners_count":1163734,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"typetools/checker-framework","html_url":"https://github.com/typetools/checker-framework","last_synced_at":"2026-05-27T17:11:17.185Z","status":null,"issues_count":266,"pull_requests_count":1266,"avg_time_to_close_issue":25533934.692857143,"avg_time_to_close_pull_request":293920.11981132074,"issues_closed_count":140,"pull_requests_closed_count":1060,"pull_request_authors_count":39,"issue_authors_count":85,"avg_comments_per_issue":1.5075187969924813,"avg_comments_per_pull_request":0.4075829383886256,"merged_pull_requests_count":905,"bot_issues_count":3,"bot_pull_requests_count":227,"past_year_issues_count":27,"past_year_pull_requests_count":327,"past_year_avg_time_to_close_issue":1351479.7142857143,"past_year_avg_time_to_close_pull_request":130370.82683982684,"past_year_issues_closed_count":7,"past_year_pull_requests_closed_count":231,"past_year_pull_request_authors_count":20,"past_year_issue_authors_count":15,"past_year_avg_comments_per_issue":1.1111111111111112,"past_year_avg_comments_per_pull_request":0.5107033639143731,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":67,"past_year_merged_pull_requests_count":192,"created_at":"2023-05-16T00:01:23.598Z","updated_at":"2026-05-27T17:11:17.186Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/typetools%2Fchecker-framework/issues","issue_labels_count":{"table":{"ResourceLeakChecker":30,"crash":29,"False Negative (missing warning or unsoundness)":12,"False Positive (false warning or imprecision)":12,"bug":9,"enhancement":7,"Dataflow":6,"good first issue":2,"Java8":2,"Performance":1,"JavaExpressions":1,"Unreproducible":1}},"pull_request_labels_count":{"table":{"dependencies":3,"java":2,"ResourceLeakChecker":2,"Performance":1,"python:uv":1}},"issue_author_associations_count":{"table":{"CONTRIBUTOR":120,"NONE":104,"MEMBER":42}},"pull_request_author_associations_count":{"table":{"MEMBER":839,"CONTRIBUTOR":392,"NONE":34,"OWNER":1}},"issue_authors":{"table":{"msridhar":40,"Calvin-L":18,"mernst":17,"theosotr":15,"cushon":15,"iamsanjaymalakar":13,"MichalStehlikCz":12,"smillst":12,"jyoo980":10,"vlsi":5,"spacether":4,"renovate[bot]":3,"GoogleCodeExporter":3,"rionda":3,"romani":3,"lcahmu":3,"Nausheen15":3,"kelloggm":3,"jpschewe":3,"perceptron8":2,"nickbreen":2,"alexvas":2,"pSub":2,"obfischer":2,"DrMicrobit":2,"zyadahmed":2,"agentgt":2,"roded":2,"Nargeshdb":2,"skehrli":2,"beikov":2,"amalloy":2,"hazendaz":2,"wmdietl":2,"smonteiro":1,"nitspat":1,"siudeks":1,"sanyarnd":1,"neilccbrown":1,"chaosflaws":1,"vishnukk":1,"pzygielo":1,"ZuhairORZaki":1,"JohnnyJayJay":1,"veikokaap":1,"Stephan202":1,"mspielberg":1,"GlennnM":1,"swarren12":1,"diegovar":1,"is-ivanov":1,"xenoterracide":1,"dwoffinden":1,"Rohanraj123":1,"fritzfs":1,"justmin":1,"Marat-Tim":1,"XakepSDK":1,"mmorrisontx":1,"Serranya":1,"markro49":1,"blackdiz":1,"TarqusMiltonium":1,"danthe1st":1,"wmdietlGC":1,"Yo7070":1,"mtf90":1,"Flexximilian":1,"AlexLloyd0":1,"elopezvalecky":1,"ky-gog":1,"AndreyAkifev":1,"Lmh-java":1,"Bobcat00":1,"jacek-lewandowski":1,"bmarwell":1,"PawelLipski":1,"frjonsen":1,"theit":1,"baeminbo":1,"blablubbabc":1,"jeffrey-easyesi":1,"mahfouz72":1,"gunjanaggarwal":1,"archiecobbs":1}},"pull_request_authors":{"table":{"mernst":614,"renovate[bot]":224,"smillst":217,"jyoo980":57,"msridhar":36,"skehrli":23,"Calvin-L":19,"kelloggm":18,"iamsanjaymalakar":9,"iywang2016":7,"johnkrah":4,"Nargeshdb":3,"dependabot[bot]":3,"vaidikcode":2,"Damika-Anupama":2,"Zadam01":2,"erfan-arvan":2,"Gaoyan1999":2,"mtf90":2,"JohnnyJayJay":1,"avenger2597":1,"vananiev":1,"PraneethKulukuri26":1,"Shivam7-1":1,"akulk022":1,"w0de":1,"LoiNguyenCS":1,"Neelanchal17":1,"kanaksad":1,"Suvrat1629":1,"kavya685":1,"HamedTaghani":1,"parameshn":1,"Copilot":1,"cushon":1,"YukiYang31":1,"PratikBhusal":1,"deeksha-vatwani":1,"shubhamk0205":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-05-30T00:00:22.129Z","repositories_count":14725227,"issues_count":33619414,"pull_requests_count":110578946,"authors_count":11282257,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"False Negative (missing warning or unsoundness)":2,"bug":1,"Dataflow":1,"False Positive (false warning or imprecision)":1}},"past_year_pull_request_labels_count":{"table":{"dependencies":3,"java":2,"python:uv":1}},"past_year_issue_author_associations_count":{"table":{"NONE":12,"CONTRIBUTOR":11,"MEMBER":4}},"past_year_pull_request_author_associations_count":{"table":{"MEMBER":239,"CONTRIBUTOR":77,"NONE":9}},"past_year_issue_authors":{"table":{"msridhar":7,"mernst":4,"Calvin-L":2,"cushon":2,"DrMicrobit":2,"archiecobbs":1,"baeminbo":1,"fritzfs":1,"jeffrey-easyesi":1,"jpschewe":1,"Marat-Tim":1,"perceptron8":1,"pzygielo":1,"rionda":1,"romani":1}},"past_year_pull_request_authors":{"table":{"mernst":203,"renovate[bot]":62,"smillst":35,"skehrli":3,"dependabot[bot]":3,"msridhar":3,"Damika-Anupama":2,"Gaoyan1999":2,"YukiYang31":1,"Suvrat1629":1,"shubhamk0205":1,"PraneethKulukuri26":1,"parameshn":1,"kavya685":1,"iamsanjaymalakar":1,"deeksha-vatwani":1,"cushon":1,"Copilot":1,"avenger2597":1,"akulk022":1}},"maintainers":[{"table":{"login":"mernst","count":631,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"}},{"table":{"login":"smillst","count":229,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"}},{"table":{"login":"iamsanjaymalakar","count":19,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}},{"table":{"login":"wmdietl","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wmdietl"}},{"table":{"login":"w0de","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/w0de"}}],"active_maintainers":[{"table":{"login":"mernst","count":207,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mernst"}},{"table":{"login":"smillst","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smillst"}},{"table":{"login":"iamsanjaymalakar","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/iamsanjaymalakar"}}]}},"events":{"total":{"CreateEvent":82,"ReleaseEvent":11,"IssuesEvent":102,"WatchEvent":89,"DeleteEvent":64,"IssueCommentEvent":250,"PushEvent":477,"PullRequestReviewCommentEvent":446,"PullRequestReviewEvent":495,"PullRequestEvent":577,"ForkEvent":23},"last_year":{"CreateEvent":67,"ReleaseEvent":9,"IssuesEvent":84,"WatchEvent":75,"DeleteEvent":51,"IssueCommentEvent":228,"PushEvent":417,"PullRequestReviewCommentEvent":448,"PullRequestReviewEvent":462,"PullRequestEvent":495,"ForkEvent":22}},"keywords":["java","types","verification"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/gradle-wrapper-validation.yml-DISABLED","sha":null,"kind":"manifest","created_at":"2023-01-15T07:45:14.376Z","updated_at":"2023-01-15T07:45:14.376Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/.github/workflows/gradle-wrapper-validation.yml-DISABLED","dependencies":[{"id":6919034274,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6919034275,"package_name":"gradle/wrapper-validation-action","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"maven","filepath":"checker/build.gradle","sha":null,"kind":"manifest","created_at":"2023-01-15T07:45:14.860Z","updated_at":"2023-01-15T07:45:14.860Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/checker/build.gradle","dependencies":[{"id":6919036295,"package_name":"org.plumelib:reflection-util","ecosystem":"maven","requirements":"${reflectionUtilVersion}","direct":true,"kind":"implementation","optional":false},{"id":6919036296,"package_name":"org.plumelib:plume-util","ecosystem":"maven","requirements":"${plumeUtilVersion}","direct":true,"kind":"implementation","optional":false},{"id":6919036297,"package_name":"com.google.auto.value:auto-value-annotations","ecosystem":"maven","requirements":"1.7.4","direct":true,"kind":"testImplementation","optional":false},{"id":6919036298,"package_name":"com.google.auto.value:auto-value","ecosystem":"maven","requirements":"1.7.4","direct":true,"kind":"testImplementation","optional":false},{"id":6919036299,"package_name":"com.ryanharter.auto.value:auto-value-parcel","ecosystem":"maven","requirements":"0.2.9","direct":true,"kind":"testImplementation","optional":false},{"id":6919036300,"package_name":"org.projectlombok:lombok","ecosystem":"maven","requirements":"1.18.24","direct":true,"kind":"testImplementation","optional":false},{"id":6919036301,"package_name":"com.amazonaws:aws-java-sdk-ec2","ecosystem":"maven","requirements":"*","direct":true,"kind":"testImplementation","optional":false},{"id":6919036302,"package_name":"com.amazonaws:aws-java-sdk-kms","ecosystem":"maven","requirements":"*","direct":true,"kind":"testImplementation","optional":false},{"id":6919036303,"package_name":"javax.servlet:javax.servlet-api","ecosystem":"maven","requirements":"3.1.0","direct":true,"kind":"testImplementation","optional":false},{"id":6919036304,"package_name":"commons-io:commons-io","ecosystem":"maven","requirements":"2.11.0","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"dataflow/build.gradle","sha":null,"kind":"manifest","created_at":"2023-01-15T07:45:15.768Z","updated_at":"2023-01-15T07:45:15.768Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/dataflow/build.gradle","dependencies":[{"id":6919037927,"package_name":"org.plumelib:plume-util","ecosystem":"maven","requirements":"${plumeUtilVersion}","direct":true,"kind":"api","optional":false}]},{"ecosystem":"maven","filepath":"framework/build.gradle","sha":null,"kind":"manifest","created_at":"2023-01-15T07:45:15.936Z","updated_at":"2023-01-15T07:45:15.936Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/framework/build.gradle","dependencies":[{"id":6919037949,"package_name":"org.plumelib:plume-util","ecosystem":"maven","requirements":"${plumeUtilVersion}","direct":true,"kind":"implementation","optional":false},{"id":6919037950,"package_name":"org.plumelib:reflection-util","ecosystem":"maven","requirements":"${reflectionUtilVersion}","direct":true,"kind":"implementation","optional":false},{"id":6919037951,"package_name":"io.github.classgraph:classgraph","ecosystem":"maven","requirements":"4.8.149","direct":true,"kind":"implementation","optional":false},{"id":6919037952,"package_name":"com.google.auto.value:auto-value-annotations","ecosystem":"maven","requirements":"${versions.autoValue}","direct":true,"kind":"testImplementation","optional":false},{"id":6919037953,"package_name":"com.google.auto.value:auto-value","ecosystem":"maven","requirements":"${versions.autoValue}","direct":true,"kind":"testImplementation","optional":false},{"id":6919037954,"package_name":"org.projectlombok:lombok","ecosystem":"maven","requirements":"${versions.lombok}","direct":true,"kind":"testImplementation","optional":false}]},{"ecosystem":"maven","filepath":"framework-test/build.gradle","sha":null,"kind":"manifest","created_at":"2023-01-15T07:45:16.244Z","updated_at":"2023-01-15T07:45:16.244Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/framework-test/build.gradle","dependencies":[{"id":6919037959,"package_name":"org.plumelib:plume-util","ecosystem":"maven","requirements":"${plumeUtilVersion}","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"javacutil/build.gradle","sha":null,"kind":"manifest","created_at":"2023-01-15T07:45:16.790Z","updated_at":"2023-01-15T07:45:16.790Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/javacutil/build.gradle","dependencies":[{"id":6919040970,"package_name":"org.plumelib:plume-util","ecosystem":"maven","requirements":"${plumeUtilVersion}","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"build.gradle","sha":null,"kind":"manifest","created_at":"2024-01-13T21:15:21.647Z","updated_at":"2024-01-13T21:15:21.647Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/build.gradle","dependencies":[]},{"ecosystem":"maven","filepath":"checker-qual/build.gradle","sha":null,"kind":"manifest","created_at":"2024-01-13T21:15:21.674Z","updated_at":"2024-01-13T21:15:21.674Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/checker-qual/build.gradle","dependencies":[]},{"ecosystem":"maven","filepath":"checker-qual-android/build.gradle","sha":null,"kind":"manifest","created_at":"2024-01-13T21:15:21.906Z","updated_at":"2024-01-13T21:15:21.906Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/checker-qual-android/build.gradle","dependencies":[]},{"ecosystem":"maven","filepath":"checker-util/build.gradle","sha":null,"kind":"manifest","created_at":"2024-01-13T21:15:23.235Z","updated_at":"2024-01-13T21:15:23.235Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/checker-util/build.gradle","dependencies":[]},{"ecosystem":"maven","filepath":"docs/examples/MavenExample/pom.xml","sha":null,"kind":"manifest","created_at":"2024-01-13T21:15:24.332Z","updated_at":"2024-01-13T21:15:24.332Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/docs/examples/MavenExample/pom.xml","dependencies":[]},{"ecosystem":"maven","filepath":"docs/examples/errorprone/build.gradle","sha":null,"kind":"manifest","created_at":"2024-01-13T21:15:24.367Z","updated_at":"2024-01-13T21:15:24.367Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/docs/examples/errorprone/build.gradle","dependencies":[]},{"ecosystem":"maven","filepath":"docs/examples/lombok/build.gradle","sha":null,"kind":"manifest","created_at":"2024-01-13T21:15:24.381Z","updated_at":"2024-01-13T21:15:24.381Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/docs/examples/lombok/build.gradle","dependencies":[]},{"ecosystem":"maven","filepath":"buildSrc/build.gradle","sha":null,"kind":"manifest","created_at":"2026-03-04T19:07:13.169Z","updated_at":"2026-03-04T19:07:13.169Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/buildSrc/build.gradle","dependencies":[{"id":25831150022,"package_name":"org.eclipse.jgit:org.eclipse.jgit","ecosystem":"maven","requirements":"7.5.0.202512021534-r","direct":true,"kind":"implementation","optional":false},{"id":25831150052,"package_name":"org.eclipse.jgit:org.eclipse.jgit.ssh.apache","ecosystem":"maven","requirements":"7.5.0.202512021534-r","direct":true,"kind":"implementation","optional":false},{"id":25831150066,"package_name":"org.bouncycastle:bcprov-jdk15to18","ecosystem":"maven","requirements":"1.83","direct":true,"kind":"implementation","optional":false}]},{"ecosystem":"maven","filepath":"annotation-file-utilities/build.gradle","sha":null,"kind":"manifest","created_at":"2026-03-04T19:07:13.115Z","updated_at":"2026-03-04T19:07:13.115Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/annotation-file-utilities/build.gradle","dependencies":[]},{"ecosystem":"pypi","filepath":"pyproject.toml","sha":null,"kind":"manifest","created_at":"2026-03-04T19:07:13.734Z","updated_at":"2026-03-04T19:07:13.734Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/pyproject.toml","dependencies":[]},{"ecosystem":"pypi","filepath":"uv.lock","sha":null,"kind":"lockfile","created_at":"2026-03-04T19:07:13.776Z","updated_at":"2026-03-04T19:07:13.776Z","repository_link":"https://github.com/typetools/checker-framework/blob/master/uv.lock","dependencies":[{"id":25831150120,"package_name":"application-properties","ecosystem":"pypi","requirements":"0.9.0","direct":false,"kind":"runtime","optional":false},{"id":25831150135,"package_name":"certifi","ecosystem":"pypi","requirements":"2026.1.4","direct":false,"kind":"runtime","optional":false},{"id":25831150136,"package_name":"charset-normalizer","ecosystem":"pypi","requirements":"3.4.4","direct":false,"kind":"runtime","optional":false},{"id":25831150137,"package_name":"checker-framework","ecosystem":"pypi","requirements":"0.1.0","direct":false,"kind":"runtime","optional":false},{"id":25831150149,"package_name":"columnar","ecosystem":"pypi","requirements":"1.4.1","direct":false,"kind":"runtime","optional":false},{"id":25831150158,"package_name":"html5validator","ecosystem":"pypi","requirements":"0.4.2","direct":false,"kind":"runtime","optional":false},{"id":25831150160,"package_name":"idna","ecosystem":"pypi","requirements":"3.11","direct":false,"kind":"runtime","optional":false},{"id":25831150161,"package_name":"pyjson5","ecosystem":"pypi","requirements":"2.0.0","direct":false,"kind":"runtime","optional":false},{"id":25831150184,"package_name":"pymarkdownlnt","ecosystem":"pypi","requirements":"0.9.33","direct":false,"kind":"runtime","optional":false},{"id":25831150193,"package_name":"pyyaml","ecosystem":"pypi","requirements":"6.0.3","direct":false,"kind":"runtime","optional":false},{"id":25831150194,"package_name":"requests","ecosystem":"pypi","requirements":"2.32.5","direct":false,"kind":"runtime","optional":false},{"id":25831150195,"package_name":"tomli","ecosystem":"pypi","requirements":"2.3.0","direct":false,"kind":"runtime","optional":false},{"id":25831150229,"package_name":"toolz","ecosystem":"pypi","requirements":"1.1.0","direct":false,"kind":"runtime","optional":false},{"id":25831150230,"package_name":"ty","ecosystem":"pypi","requirements":"0.0.1a32","direct":false,"kind":"runtime","optional":false},{"id":25831150231,"package_name":"typing-extensions","ecosystem":"pypi","requirements":"4.15.0","direct":false,"kind":"runtime","optional":false},{"id":25831150232,"package_name":"urllib3","ecosystem":"pypi","requirements":"2.6.3","direct":false,"kind":"runtime","optional":false},{"id":25831150233,"package_name":"wcwidth","ecosystem":"pypi","requirements":"0.2.14","direct":false,"kind":"runtime","optional":false}]}],"score":32.46900657810828,"created_at":"2025-05-08T05:36:01.085Z","updated_at":"2026-06-21T16:01:31.621Z","avatar_url":"https://github.com/typetools.png","language":"Java","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/360969","html_url":"https://summary.ecosyste.ms/projects/360969"}